$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json) Hash identifier: jwkXiKUkaqwpcts85cvQytEaChenmkzgngEFWhumYDg= Subject key identifier: 46:95:0D:F0:35:E7:6F:C4:9F:12:91:79:42:F9:28:C4:75:2B:F6:D7 Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82 Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft Manifest number: E0 Signing time: Fri 25 Apr 2025 04:31:57 +0000 Manifest this update: Fri 25 Apr 2025 04:31:57 +0000 Manifest next update: Fri 02 May 2025 04:31:57 +0000 Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: TpidigL2n4aXH+hY2pUmg2ivdv9jRXEK/pmNWBOPKrM=) 2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: d+Z8hZJ1dcZIqJgs5jVt78VrRJybv8thQQWwCFca5j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282 Validity Not Before: Apr 25 04:31:57 2025 GMT Not After : May 2 04:31:57 2025 GMT Subject: CN=680b103d-5de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:00:0a:96:2c:14:80:e8:a9:2a:76:f0:b6: e5:24:4f:d9:e1:0b:f7:3e:75:50:49:28:a9:16:71: ae:52:bc:7a:51:36:9f:09:42:de:28:77:ee:72:1c: b1:20:ef:d3:43:a6:84:8a:38:48:a3:09:3e:a6:18: 85:ba:8e:44:c6:db:9d:fd:e4:ad:97:8e:c4:02:12: 8c:d1:e5:e4:c4:3a:30:ad:b5:81:54:94:74:a7:e8: 88:2a:aa:5c:23:6e:f7:61:f2:87:36:b9:96:97:e7: 02:a7:11:63:11:11:c3:a4:76:7a:9e:31:05:39:d2: 2c:39:af:9e:10:92:ae:40:cc:46:93:b5:3c:9d:e7: d3:fa:85:e1:67:cd:d8:a1:d2:9d:4d:6e:fc:ba:bd: 73:46:f0:a8:31:5e:97:40:bf:33:89:75:b5:a1:b8: 7e:0b:24:bd:af:01:fb:40:64:7e:f7:ee:bd:37:1d: 0b:0f:dd:34:19:be:58:b6:60:91:68:62:31:4f:10: 87:aa:db:92:f6:90:4c:53:8d:5d:0e:09:91:c2:a1: 11:d6:f2:39:93:67:93:37:c0:cf:a7:b3:1f:03:53: f1:f7:71:8a:ee:ec:6a:fe:8c:bb:e1:8c:85:82:26: c3:f7:5f:a0:e1:34:76:b5:f3:59:25:3f:19:a8:c7: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:95:0D:F0:35:E7:6F:C4:9F:12:91:79:42:F9:28:C4:75:2B:F6:D7 X509v3 Authority Key Identifier: keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:af:66:c4:1f:3f:76:66:f1:e7:cc:bc:7a:0c:dc:5c:1f:12: df:95:30:74:99:d2:4c:e4:15:2a:b0:34:58:46:a4:ab:1d:c0: 1b:22:b2:d2:90:f7:c4:30:2f:e1:1b:d0:7c:b3:54:21:e6:90: cb:cf:f6:0e:cd:3f:49:44:94:5c:81:6b:47:aa:b6:e0:52:31: c2:a1:22:83:f5:59:c9:da:03:7b:04:77:a0:6c:85:c9:82:21: 6d:ae:a9:f5:b4:e0:b7:9a:f5:09:73:e8:3b:bb:3c:4d:5d:bc: b5:1a:4b:8d:40:63:5f:4e:30:91:76:68:17:f9:d3:fc:bf:4b: a7:5a:34:1f:cd:59:3a:c7:d5:7d:60:ce:e4:ca:2b:c1:13:3e: bc:14:83:f7:36:8c:02:57:f2:7e:c8:e7:c3:af:ac:b5:49:05: 09:a6:f5:9c:4f:41:d1:41:56:5f:46:e5:19:39:27:7f:5e:53: f9:2b:0b:6d:5a:aa:5b:59:62:2b:f3:79:77:67:16:8a:f9:00: f0:bc:22:38:c7:fc:fe:b6:1e:51:8f:07:b8:d8:08:8b:f2:de: f9:6e:78:f6:58:2c:9b:38:8b:b5:39:f9:df:7e:79:ad:48:ec: e7:c2:fe:63:26:00:95:8b:ea:23:07:68:f0:8f:da:99:49:63: 09:1b:d2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKDg3MDE4NkI2NTdEMTFCMjk4QTg0QjAyNDIwRUU3NEUx RkJCNUMyODIwHhcNMjUwNDI1MDQzMTU3WhcNMjUwNTAyMDQzMTU3WjAYMRYwFAYD VQQDEw02ODBiMTAzZC01ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sQACpYsFIDoqSp28LblJE/Z4Qv3PnVQSSipFnGuUrx6UTafCULeKHfuchyx IO/TQ6aEijhIowk+phiFuo5Extud/eStl47EAhKM0eXkxDowrbWBVJR0p+iIKqpc I273YfKHNrmWl+cCpxFjERHDpHZ6njEFOdIsOa+eEJKuQMxGk7U8nefT+oXhZ83Y odKdTW78ur1zRvCoMV6XQL8ziXW1obh+CyS9rwH7QGR+9+69Nx0LD900Gb5YtmCR aGIxTxCHqtuS9pBMU41dDgmRwqER1vI5k2eTN8DPp7MfA1Px93GK7uxq/oy74YyF gibD91+g4TR2tfNZJT8ZqMc2uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaVDfA1 52/EnxKReUL5KMR1K/bXMB8GA1UdIwQYMBaAFIcBhrZX0RspioSwJCDudOH7tcKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ENUZFQTNERUM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5bUtoTEFrSU81MDRmdTF3 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h3R0d0bGZSR3ltS2hMQWtJTzUwNGZ1MXdvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ENUZFQTNERUM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5 bUtoTEFrSU81MDRmdTF3b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGr2bEHz92ZvHnzLx6DNxcHxLflTB0mdJM5BUqsDRYRqSrHcAbIrLS kPfEMC/hG9B8s1Qh5pDLz/YOzT9JRJRcgWtHqrbgUjHCoSKD9VnJ2gN7BHegbIXJ giFtrqn1tOC3mvUJc+g7uzxNXby1GkuNQGNfTjCRdmgX+dP8v0unWjQfzVk6x9V9 YM7kyivBEz68FIP3NowCV/J+yOfDr6y1SQUJpvWcT0HRQVZfRuUZOSd/XlP5Kwtt WqpbWWIr83l3ZxaK+QDwvCI4x/z+th5Rjwe42AiL8t75bnj2WCybOIu1Ofnffnmt SOznwv5jJgCVi+ojB2jwj9qZSWMJG9LJ -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:49 2025 by rpki-client on console.sobornost.net