$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: 52/GzLr4R19OeM6kD13SuhGO/K8pLEPzMyzZ95LqjUs= Subject key identifier: 27:68:17:7A:B6:1E:69:98:F4:CD:E6:58:95:1A:B8:C5:57:46:C7:3F Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 34DA Signing time: Sat 31 May 2025 14:38:48 +0000 Manifest this update: Sat 31 May 2025 14:38:47 +0000 Manifest next update: Sat 07 Jun 2025 14:38:47 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: W8qkW8RjaiS0eFjyxUBTFJXGUTPG96VjlpjqH4lyjNE=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: May 31 14:38:47 2025 GMT Not After : Jun 7 14:38:47 2025 GMT Subject: CN=683b1478-6a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:49:5d:3c:5b:d9:41:17:e9:6f:6b:6e:fd: ad:73:4b:f4:48:8b:0d:bc:38:a9:4d:16:b0:9b:4a: e5:e5:91:11:71:74:b9:3e:be:94:b3:48:74:92:23: 2a:eb:00:94:03:4c:13:a9:17:39:1e:74:f7:4f:4f: 13:10:18:e2:17:54:1e:40:fe:c1:31:0b:5c:9c:a5: a5:e2:d8:bf:dc:be:4c:a3:de:79:3d:e5:69:c3:d0: 53:ee:de:3e:5a:5f:73:9d:4b:15:75:39:bf:e4:35: e8:4d:95:ad:36:c6:bb:af:1c:29:5c:20:03:3e:d5: 83:ab:b7:e9:04:c9:c3:f6:f9:df:c6:2d:38:ab:66: bb:16:73:f5:0b:f5:2e:fa:59:c5:01:29:e9:c7:91: 0a:8e:0e:ed:1e:4c:a8:06:ff:cb:8c:0c:9d:5d:2f: 58:66:fe:8a:2e:86:c0:f2:e2:1d:bd:f8:88:82:ac: 1e:0a:30:14:92:16:8b:8c:a9:ac:37:d9:c7:d3:ad: e6:df:1b:ed:a5:bd:65:8e:1d:86:35:4a:33:18:9c: 68:2a:7a:d9:23:0c:c3:03:b1:21:69:1c:8b:72:48: 3b:4c:7d:82:55:9f:20:7e:b2:08:bb:b3:e6:54:f1: 87:b0:1a:4e:ee:8a:2f:a5:9c:a4:77:cb:6e:cb:4c: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:17:7A:B6:1E:69:98:F4:CD:E6:58:95:1A:B8:C5:57:46:C7:3F X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:23:16:f7:b0:c5:e1:93:89:4c:8c:63:0a:c9:3f:d8:a3:e6: 32:60:5f:cc:5c:b5:5e:15:13:73:88:ef:d6:72:f9:90:1b:17: 30:ba:69:9f:d8:ae:17:a4:3b:2c:0d:15:ef:ef:7e:5a:67:15: a5:05:31:33:fd:d4:c5:4f:3b:98:3c:fb:b7:ec:43:d2:d1:b2: 1c:69:7c:71:09:a2:91:45:c7:c9:fd:7b:ac:55:1c:dc:5b:c1: be:45:86:73:2a:6b:c6:e9:da:44:da:72:b1:75:36:ad:f0:c2: 38:fc:72:62:32:ec:34:02:88:39:ac:79:c9:c1:ce:f9:11:de: e7:d5:3d:ce:f6:53:b6:38:bc:0a:dc:dd:a7:f6:c3:e2:43:4d: 2a:90:70:21:47:8d:f1:b1:d6:be:e3:8b:1d:41:ff:e5:b6:be: 7e:96:c9:a1:d7:b0:5b:f5:5a:e9:10:6a:51:33:59:fc:c5:29: c2:c8:f8:8e:41:20:23:83:cf:98:e3:0c:55:c1:76:19:86:11: f1:66:ce:0d:ff:09:7c:db:89:55:6e:0c:ec:52:7d:19:e2:27: 18:63:3e:8b:74:65:05:23:f8:5f:ca:1e:66:2c:2e:37:d3:43: 87:b2:2b:6d:e2:48:7e:1f:e3:c1:91:6e:d4:82:21:cd:62:44: 1c:8e:79:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwNTMxMTQzODQ3WhcNMjUwNjA3MTQzODQ3WjAYMRYwFAYD VQQDEw02ODNiMTQ3OC02YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe9JXTxb2UEX6W9rbv2tc0v0SIsNvDipTRawm0rl5ZERcXS5Pr6Us0h0kiMq 6wCUA0wTqRc5HnT3T08TEBjiF1QeQP7BMQtcnKWl4ti/3L5Mo955PeVpw9BT7t4+ Wl9znUsVdTm/5DXoTZWtNsa7rxwpXCADPtWDq7fpBMnD9vnfxi04q2a7FnP1C/Uu +lnFASnpx5EKjg7tHkyoBv/LjAydXS9YZv6KLobA8uIdvfiIgqweCjAUkhaLjKms N9nH063m3xvtpb1ljh2GNUozGJxoKnrZIwzDA7EhaRyLckg7TH2CVZ8gfrIIu7Pm VPGHsBpO7oovpZykd8tuy0xKcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdoF3q2 HmmY9M3mWJUauMVXRsc/MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTIxb3sMXhk4lMjGMKyT/Yo+YyYF/MXLVeFRNziO/WcvmQGxcwummf 2K4XpDssDRXv735aZxWlBTEz/dTFTzuYPPu37EPS0bIcaXxxCaKRRcfJ/XusVRzc W8G+RYZzKmvG6dpE2nKxdTat8MI4/HJiMuw0Aog5rHnJwc75Ed7n1T3O9lO2OLwK 3N2n9sPiQ00qkHAhR43xsda+44sdQf/ltr5+lsmh17Bb9VrpEGpRM1n8xSnCyPiO QSAjg8+Y4wxVwXYZhhHxZs4N/wl824lVbgzsUn0Z4icYYz6LdGUFI/hfyh5mLC43 00OHsitt4kh+H+PBkW7UgiHNYkQcjnnj -----END CERTIFICATE-----Generated at Sat May 31 17:58:46 2025 by rpki-client