$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft File: HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json) Hash identifier: KffYEdKMVGV65XeImFqUF7DmqC335f5XI+ht7SoV8XM= Subject key identifier: 69:83:17:38:46:82:FF:A8:DA:C7:B2:62:1A:7A:01:51:2F:4B:7B:80 Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 Certificate issuer: /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft Manifest number: 02CD Signing time: Sat 31 May 2025 01:34:19 +0000 Manifest this update: Sat 31 May 2025 01:34:19 +0000 Manifest next update: Sat 07 Jun 2025 01:34:19 +0000 Files and hashes: 1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: XE2nJQawol3tgi6aupcqqq43HItxgrUy5NgtB6PiN54=) 2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: LJB886NUTljPvfWlokxnMW+kRUtkV7Ec61N0MHSXzHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4 Validity Not Before: May 31 01:34:19 2025 GMT Not After : Jun 7 01:34:19 2025 GMT Subject: CN=683a5c9b-c82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:5d:43:87:4f:34:f8:1e:55:91:85:7a:1b: ca:82:53:96:eb:e4:a5:c5:53:e3:d8:67:34:33:19: ba:cb:63:20:e3:48:ed:7d:2c:86:0a:52:29:98:57: 12:36:1a:bb:21:11:8f:dd:67:d3:59:8b:70:cc:5f: 2b:1b:02:5d:4b:7d:2a:2d:5a:25:15:80:83:6b:fa: de:75:a8:f9:b0:a8:a4:99:e6:85:ba:61:26:7d:87: cd:bc:c0:b6:cf:78:20:4e:e7:81:c7:5a:42:f0:65: b2:6f:fc:86:eb:3c:94:1e:26:20:78:bd:10:94:4a: 60:4b:a3:98:f2:0a:53:e0:9b:13:66:53:95:9b:8f: c8:c2:5a:98:23:f3:6c:6a:e6:e7:e7:54:f8:7b:8b: 93:27:8f:1d:bd:f0:1b:68:a8:6a:fe:a1:20:5f:ee: 3b:4b:27:bf:d2:ec:b1:17:2b:4b:1a:8b:4d:14:23: 69:44:a0:ca:20:a5:92:9a:76:ce:8b:f9:96:65:47: 9e:74:c7:99:c9:29:bc:e2:56:2a:c4:bd:ab:68:f8: dd:bd:10:9c:ea:11:23:72:78:44:24:9d:f9:b5:87: 70:67:be:28:e8:cb:77:32:d1:8f:c7:de:ff:17:2e: 07:1f:f8:35:b9:24:18:ae:70:24:4c:57:f4:d7:77: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:17:38:46:82:FF:A8:DA:C7:B2:62:1A:7A:01:51:2F:4B:7B:80 X509v3 Authority Key Identifier: keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a4:da:b0:ff:b4:02:20:d5:66:fc:a0:a6:1b:37:61:95:4e: 39:60:72:81:1f:f5:5d:45:a7:4f:89:2e:d0:dc:6c:df:2f:6a: d9:86:ec:33:1f:5e:44:cc:ec:d2:32:2d:90:aa:a0:55:e4:d5: 83:22:3a:cb:67:ba:2d:a6:14:9c:b0:1b:6f:d6:1d:9c:d8:2b: 96:97:2f:a9:31:cb:ac:16:a4:9b:18:06:07:f7:31:e9:2f:04: d6:49:b7:90:e8:39:15:0a:ab:ff:56:c4:06:75:a3:a6:d4:2e: 55:cd:1c:b1:2c:7b:99:aa:7f:b3:53:2e:9f:ec:40:49:4b:11: 96:11:9f:e6:18:6d:2f:36:4b:b0:ae:67:08:a4:c3:b2:60:e2: 6a:2f:6a:a3:f5:c9:48:05:d1:11:fd:12:e4:95:74:a0:88:d0: 64:1c:a7:e3:e9:9f:af:ea:0e:82:0c:55:6f:dc:e2:be:2f:73: 35:89:61:7a:d1:2e:03:47:43:bd:74:49:43:4f:53:d7:e2:34: cf:54:91:75:06:20:32:4d:3c:8e:35:ce:9d:68:e5:53:17:0d: f6:1d:15:c1:1c:43:20:a2:fc:b2:6c:67:50:d6:ee:62:da:49: 71:68:58:c4:d9:59:dd:1f:78:0d:5f:13:ce:a7:8b:6d:51:b3: 10:16:be:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGMkIxMTAvBgNVBAUTKDFDQkE4RDNEQUE4MDQ4ODkzMEE5OTI4QjE5NkVERUUw NzVGNDA5QTQwHhcNMjUwNTMxMDEzNDE5WhcNMjUwNjA3MDEzNDE5WjAYMRYwFAYD VQQDEw02ODNhNWM5Yi1jODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJddQ4dPNPgeVZGFehvKglOW6+SlxVPj2Gc0Mxm6y2Mg40jtfSyGClIpmFcS Nhq7IRGP3WfTWYtwzF8rGwJdS30qLVolFYCDa/redaj5sKikmeaFumEmfYfNvMC2 z3ggTueBx1pC8GWyb/yG6zyUHiYgeL0QlEpgS6OY8gpT4JsTZlOVm4/IwlqYI/Ns aubn51T4e4uTJ48dvfAbaKhq/qEgX+47Sye/0uyxFytLGotNFCNpRKDKIKWSmnbO i/mWZUeedMeZySm84lYqxL2raPjdvRCc6hEjcnhEJJ35tYdwZ74o6Mt3MtGPx97/ Fy4HH/g1uSQYrnAkTFf013fZSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmDFzhG gv+o2seyYhp6AVEvS3uAMB8GA1UdIwQYMBaAFBy6jT2qgEiJMKmSixlu3uB19Amk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUYyQi81MzczMjJGQUVC QzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJa3dxWktMR1c3ZTRIWDBD YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMcU5QYXFBU0lrd3FaS0xHVzdlNEhYMENhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUYyQi81MzczMjJGQUVCQzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJ a3dxWktMR1c3ZTRIWDBDYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXpNqw/7QCINVm/KCmGzdhlU45YHKBH/VdRadPiS7Q3GzfL2rZhuwz H15EzOzSMi2QqqBV5NWDIjrLZ7otphScsBtv1h2c2CuWly+pMcusFqSbGAYH9zHp LwTWSbeQ6DkVCqv/VsQGdaOm1C5VzRyxLHuZqn+zUy6f7EBJSxGWEZ/mGG0vNkuw rmcIpMOyYOJqL2qj9clIBdER/RLklXSgiNBkHKfj6Z+v6g6CDFVv3OK+L3M1iWF6 0S4DR0O9dElDT1PX4jTPVJF1BiAyTTyONc6daOVTFw32HRXBHEMgovyybGdQ1u5i 2klxaFjE2VndH3gNXxPOp4ttUbMQFr4b -----END CERTIFICATE-----Generated at Sat May 31 16:44:49 2025 by rpki-client