$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: +CJUu/TgU80R2MsFkXkESokZqi8ezTb7iyTPn+Nujus= Subject key identifier: CF:7B:FD:65:56:C6:CA:55:68:5F:95:55:8F:75:F4:B2:51:E4:79:26 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1D18 Signing time: Fri 30 May 2025 16:20:19 +0000 Manifest this update: Fri 30 May 2025 16:20:19 +0000 Manifest next update: Fri 06 Jun 2025 16:20:19 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: Vhfkbl4Vre4PgLY6jzQhnW76HLf9RtaupmWYA09Na4A=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: hUo9fC/hzy17W76vlbeXm/dftwyddFbiGAwqbp53ZVY=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: PqWYELxwluX51eG9Uh24A8xMydgivpkrMXOxcA+zOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7471 (0x1d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: May 30 16:20:19 2025 GMT Not After : Jun 6 16:20:19 2025 GMT Subject: CN=6839dac3-815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:76:ca:32:59:22:ae:9a:fb:a1:e1:81:4e: 21:55:cb:f4:c6:f5:f6:b8:29:b2:13:79:23:6d:9a: 57:47:c4:c7:07:b8:a0:2d:bf:c6:b8:66:26:cd:59: ce:5f:b8:78:0a:99:fd:24:b8:0d:c3:32:4d:b2:32: 95:10:db:47:4d:3e:9a:94:4a:cf:f0:44:6d:c1:bb: 8e:e3:00:05:34:12:36:b2:65:b8:29:1d:fb:97:20: 97:ff:83:64:05:ea:d3:5e:32:9c:67:2b:49:a7:80: 9c:41:73:cd:27:13:ed:00:7f:3d:90:6c:73:1f:62: 16:87:0e:29:79:b6:2d:04:0e:8b:de:e9:df:66:e7: 1a:d6:ff:55:32:c4:69:ab:32:41:6d:fb:8d:af:77: 16:78:cd:7f:86:f2:fe:ed:55:b3:53:f3:92:fd:83: ba:d3:34:11:0a:4e:93:df:ba:f4:61:03:7c:01:cf: b7:04:bb:ee:f0:96:b4:6b:8f:7b:f2:4e:f1:d8:17: 7a:35:09:2c:2d:5e:57:aa:b6:d7:c5:d5:ba:b3:46: d0:55:cd:7f:0c:c5:09:0f:2e:85:c9:d5:e6:a7:51: a4:b9:13:20:a5:4a:3b:e4:b2:6d:78:9b:27:6e:de: 2b:84:ae:ab:0e:4d:65:fd:03:8c:c0:2b:6a:0d:4e: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7B:FD:65:56:C6:CA:55:68:5F:95:55:8F:75:F4:B2:51:E4:79:26 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e8:6a:97:dc:e6:78:a6:1d:62:c5:d1:d3:ac:4c:f6:0f:20: 4b:27:df:2d:01:69:e8:e3:f3:07:eb:8d:d6:7f:08:32:e9:aa: f2:e1:5c:e5:0c:6f:16:37:ff:33:aa:45:b1:a0:9d:f8:9b:c9: 88:a4:17:f0:95:9f:3e:74:05:3a:e3:37:24:c8:5d:f2:07:a1: 06:dd:6c:f7:3b:1d:53:fd:95:22:02:bb:3a:44:18:b4:62:a1: 19:c3:29:10:d5:86:a8:fb:98:7f:f4:c4:c4:54:5c:aa:ce:09: 81:57:64:ba:b0:98:8e:a5:a4:c8:32:ad:3e:be:33:0d:fc:cc: f9:26:6e:59:68:cd:9a:e5:bb:d9:2d:ca:77:0e:14:b1:85:db: dd:b3:c7:c7:ae:f9:a7:c7:ad:d2:b1:bb:09:aa:1c:6a:e0:4b: ff:f7:23:66:9c:c6:7b:56:e4:33:a7:67:8a:68:29:7a:8c:3f: f4:84:b6:75:cf:a4:a8:f2:94:b0:b6:11:09:6f:ae:e5:70:7e: 99:7a:6a:c5:fe:c7:31:41:ba:4d:75:c9:93:35:92:a9:e4:2f: 9b:14:ef:e9:32:66:df:37:a3:8a:ce:b2:6c:f7:0e:89:a3:e0: f3:d7:98:36:f3:6f:ff:26:42:06:f8:5a:04:27:44:dc:c4:01: 26:c0:41:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjUwNTMwMTYyMDE5WhcNMjUwNjA2MTYyMDE5WjAYMRYwFAYD VQQDEw02ODM5ZGFjMy04MTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmJ2yjJZIq6a+6HhgU4hVcv0xvX2uCmyE3kjbZpXR8THB7igLb/GuGYmzVnO X7h4Cpn9JLgNwzJNsjKVENtHTT6alErP8ERtwbuO4wAFNBI2smW4KR37lyCX/4Nk BerTXjKcZytJp4CcQXPNJxPtAH89kGxzH2IWhw4pebYtBA6L3unfZuca1v9VMsRp qzJBbfuNr3cWeM1/hvL+7VWzU/OS/YO60zQRCk6T37r0YQN8Ac+3BLvu8Ja0a497 8k7x2Bd6NQksLV5XqrbXxdW6s0bQVc1/DMUJDy6FydXmp1GkuRMgpUo75LJteJsn bt4rhK6rDk1l/QOMwCtqDU6Y5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM97/WVW xspVaF+VVY919LJR5HkmMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi6GqX3OZ4ph1ixdHTrEz2DyBLJ98tAWno4/MH643Wfwgy6ary4Vzl DG8WN/8zqkWxoJ34m8mIpBfwlZ8+dAU64zckyF3yB6EG3Wz3Ox1T/ZUiArs6RBi0 YqEZwykQ1Yao+5h/9MTEVFyqzgmBV2S6sJiOpaTIMq0+vjMN/Mz5Jm5ZaM2a5bvZ Lcp3DhSxhdvds8fHrvmnx63SsbsJqhxq4Ev/9yNmnMZ7VuQzp2eKaCl6jD/0hLZ1 z6So8pSwthEJb67lcH6ZemrF/scxQbpNdcmTNZKp5C+bFO/pMmbfN6OKzrJs9w6J o+Dz15g282//JkIG+FoEJ0TcxAEmwEHw -----END CERTIFICATE-----Generated at Sat May 31 16:39:47 2025 by rpki-client