$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: LM6VaIJCI5ZdgJOlufrh+bPYfkmqn7mFPUpPFaOs23Q= Subject key identifier: 79:DF:46:80:AB:C0:F8:64:15:6C:1F:C1:DF:36:91:3E:EA:A7:F9:5C Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 54 Signing time: Sun 27 Apr 2025 06:12:43 +0000 Manifest this update: Sun 27 Apr 2025 06:12:43 +0000 Manifest next update: Sun 04 May 2025 06:12:43 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: yRW+AnJqp3aDOpjV/R5UvMkAnGVs0VRovdWbLNQqjgE=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: B6GTUBQJjZfy0L/2y0BwFYd9G60axGsfhhHtTmQD3Vw=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: MaCtkavFP9h6cbzbI+/48yQalN3EQ9/HSWusPsbFrP0=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: 8ewBwE8XstXeeqmSvgrbIwTd2CEtwyCXsNRMX6ARDE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Apr 27 06:12:43 2025 GMT Not After : May 4 06:12:43 2025 GMT Subject: CN=680dcadb-53d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0a:25:db:fe:32:bb:12:fc:3e:01:bc:91:ad: 03:93:33:2f:98:6f:59:62:ce:85:17:cf:94:f7:62: 60:82:03:f2:e9:28:f8:86:92:09:b7:f6:cb:6f:61: 9e:37:5b:bc:e2:c4:77:f7:5d:d6:8e:3d:e7:d3:c6: 74:ce:1c:f9:3c:03:39:77:e4:8a:48:56:c1:ce:bc: 70:e8:42:e1:e3:91:7a:aa:ec:d0:9f:d2:87:39:d1: a6:12:7e:8a:c4:89:20:ac:b1:1e:d3:38:01:91:de: b3:c9:5d:b0:5e:fa:21:2b:c1:39:76:bd:b2:07:e0: f1:08:9c:d2:42:e6:d8:e9:98:f6:09:b2:78:ad:c1: cd:17:b1:6d:85:9c:8e:52:06:8e:01:09:22:e3:96: e7:ee:3d:81:29:25:0b:3b:07:ec:09:4c:d8:34:4d: 9c:f0:b2:49:95:7a:3a:41:2c:57:74:7d:28:df:dd: 66:b5:7c:ae:9f:16:ed:86:11:45:f3:1d:05:33:98: c5:9d:2b:a9:4d:6d:ba:f3:d4:9d:ff:88:a6:63:4c: c1:04:a7:7e:31:d2:df:10:c4:b2:db:68:8d:5a:de: 55:1c:c8:7f:c7:d5:d1:87:da:0d:62:71:02:f6:6c: 14:f4:71:d6:c6:cd:87:7f:84:55:7e:34:7a:9c:5c: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:46:80:AB:C0:F8:64:15:6C:1F:C1:DF:36:91:3E:EA:A7:F9:5C X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e1:52:95:18:14:b1:5a:36:19:b0:8e:de:c4:af:21:ce:45: e5:08:a9:94:57:f2:6f:ed:a6:85:77:a4:c7:73:97:8a:e3:0a: 7f:60:0b:92:1b:78:49:e8:98:2d:e6:e8:f2:1b:8a:bb:6b:2e: 0c:f8:0b:c3:f4:22:60:19:91:35:6e:ba:53:40:3d:11:4c:43: 98:59:61:a7:1e:34:cc:fa:6c:af:eb:15:ec:88:33:43:6e:53: 7f:c7:2e:7d:49:5a:94:ae:75:f4:96:65:e9:61:04:aa:0b:07: ea:a4:c5:9a:0d:0a:18:21:81:59:94:8b:ed:fa:67:77:83:cf: 24:cb:9f:d4:84:e1:6d:3b:82:be:02:17:ea:29:4a:d5:d5:cc: e3:7a:1d:4c:51:40:00:53:df:c1:77:34:96:4b:c3:f2:16:84: 4e:e9:2c:4d:10:88:a1:8b:36:0e:47:71:78:35:c8:b8:d1:32: 2b:db:fb:60:9e:09:be:cb:d5:e8:f9:fd:3b:df:0f:ae:89:5a: 13:ee:94:53:4e:71:71:12:96:f7:97:36:b5:15:5f:92:10:cd: cd:b6:5b:bd:d6:18:7a:7c:7d:6d:6b:6b:e7:48:4f:93:f2:dd: 1a:4f:02:ff:73:e5:a7:3b:65:61:01:18:5d:08:13:bc:9f:8f: a9:32:be:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJFRjExMC8GA1UEBRMoODcxOTdGRDU0NkRDMzE1MjMxMTFERDkzOTBCMUJBM0Yz RDcwMjY1NjAeFw0yNTA0MjcwNjEyNDNaFw0yNTA1MDQwNjEyNDNaMBgxFjAUBgNV BAMTDTY4MGRjYWRiLTUzZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0CiXb/jK7Evw+AbyRrQOTMy+Yb1lizoUXz5T3YmCCA/LpKPiGkgm39stvYZ43 W7zixHf3XdaOPefTxnTOHPk8Azl35IpIVsHOvHDoQuHjkXqq7NCf0oc50aYSforE iSCssR7TOAGR3rPJXbBe+iErwTl2vbIH4PEInNJC5tjpmPYJsnitwc0XsW2FnI5S Bo4BCSLjlufuPYEpJQs7B+wJTNg0TZzwskmVejpBLFd0fSjf3Wa1fK6fFu2GEUXz HQUzmMWdK6lNbbrz1J3/iKZjTMEEp34x0t8QxLLbaI1a3lUcyH/H1dGH2g1icQL2 bBT0cdbGzYd/hFV+NHqcXD0lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUed9GgKvA +GQVbB/B3zaRPuqn+VwwHwYDVR0jBBgwFoAUhxl/1UbcMVIxEd2TkLG6Pz1wJlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkVGL0ZDNjUwQjcyQjcx RDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0ps WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHhsXzFVYmNNVkl4RWQyVGtMRzZQejF3SmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkVGL0ZDNjUwQjcyQjcxRDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJ eEVkMlRrTEc2UHoxd0psWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbhUpUYFLFaNhmwjt7EryHOReUIqZRX8m/tpoV3pMdzl4rjCn9gC5Ib eEnomC3m6PIbirtrLgz4C8P0ImAZkTVuulNAPRFMQ5hZYaceNMz6bK/rFeyIM0Nu U3/HLn1JWpSudfSWZelhBKoLB+qkxZoNChghgVmUi+36Z3eDzyTLn9SE4W07gr4C F+opStXVzON6HUxRQABT38F3NJZLw/IWhE7pLE0QiKGLNg5HcXg1yLjRMivb+2Ce Cb7L1ej5/TvfD66JWhPulFNOcXESlveXNrUVX5IQzc22W73WGHp8fW1ra+dIT5Py 3RpPAv9z5ac7ZWEBGF0IE7yfj6kyvqs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net