$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: GGGgqFac411ANUrzROa6/fGAyc5aI8Euh5lFSURy07k= Subject key identifier: BC:B7:A0:86:58:2F:51:AD:A3:C1:19:0D:B4:F7:B2:BB:A0:B8:57:18 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 03B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 03AE Signing time: Thu 03 Jul 2025 01:04:08 +0000 Manifest this update: Thu 03 Jul 2025 01:04:08 +0000 Manifest next update: Thu 10 Jul 2025 01:04:08 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: 4czSNiEXnCFgvhEmMGezpxlwQp/CFZ7lPRybs3qBrZs=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 946 (0x3b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Jul 3 01:04:08 2025 GMT Not After : Jul 10 01:04:08 2025 GMT Subject: CN=6865d708-716d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:f6:a8:c8:f1:2f:d5:24:7a:04:62:8d:0b: fb:4f:2f:9d:ed:f3:88:94:66:09:02:f3:62:a4:07: ea:f5:0d:4e:08:41:a7:8e:63:21:d5:ed:0f:80:14: f5:60:ba:06:2e:c5:bf:03:9c:84:6e:28:ed:38:3f: 6e:31:ec:6f:2e:e2:79:05:a1:66:52:d9:3e:35:ee: d6:43:e6:6d:cb:38:55:31:ae:c0:92:aa:90:89:d7: de:70:fc:82:96:50:c2:07:b3:ff:be:0d:2d:f7:dd: bc:46:6b:2e:8b:63:ba:c6:ca:c9:44:d3:d8:7d:26: 23:61:06:fc:dc:b3:a7:39:11:1d:9c:37:df:21:3f: 89:e7:6f:fa:66:c8:c6:bf:5a:e3:85:9d:cd:9a:a5: b9:29:26:38:79:e6:6e:c2:c6:c8:a3:36:6b:5d:76: 45:1a:f6:a8:d2:5d:be:99:e5:d3:1c:6a:af:6c:1c: 76:54:82:fb:c0:f2:b2:90:5e:e8:15:ae:b3:c8:8e: ec:46:b1:80:d2:97:c3:07:e8:b3:9d:5a:dd:83:3f: 8e:f8:90:60:c8:97:d0:b8:ff:5f:6e:a1:42:87:8a: bb:1c:9a:1d:d7:b2:90:11:4b:63:5a:ad:4c:15:60: 6b:9d:37:a8:ce:92:dd:4c:fc:3f:bf:e2:8b:e6:1d: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B7:A0:86:58:2F:51:AD:A3:C1:19:0D:B4:F7:B2:BB:A0:B8:57:18 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:69:61:ec:38:c1:0f:42:8c:59:eb:24:3b:05:4f:84:f6: 45:2c:20:03:b3:fd:24:3f:6a:0d:ca:03:25:3d:61:45:4a:59: 93:da:bb:ef:ec:ce:0a:14:dc:26:59:cb:34:37:83:c9:7a:66: 83:aa:43:69:dd:1e:5c:b5:ec:d3:d4:fe:bc:55:c8:5d:84:0e: 24:a1:e5:ef:4e:69:b1:8e:3a:20:29:04:af:c5:b1:b1:aa:fa: 4d:38:1c:56:fa:ac:e9:71:46:ea:2d:b9:a2:cc:44:2d:b9:43: 33:d3:64:2d:ea:f4:2d:d5:48:3c:db:3b:2f:9b:ca:22:95:2f: 8d:67:2f:e4:43:62:49:06:ab:88:2c:97:89:ef:ad:97:e2:19: 19:c7:1d:84:74:25:83:74:74:cd:fa:a8:8a:a2:68:2c:62:23: f9:de:74:1d:c7:c4:8f:68:71:f3:e7:14:ba:53:78:b0:0a:ea: 58:17:9f:94:0e:08:eb:38:de:88:80:29:35:22:a4:2e:c7:62: 43:08:4d:8a:ed:fe:ec:a0:41:78:78:91:a1:bd:56:85:f9:ac: ac:41:2c:de:60:55:74:62:46:cd:63:11:e7:ba:4c:db:20:68: 27:2e:3e:51:84:a9:74:eb:e8:4c:91:46:41:c4:12:e7:04:3e: 17:f7:2a:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUwNzAzMDEwNDA4WhcNMjUwNzEwMDEwNDA4WjAYMRYwFAYD VQQDEw02ODY1ZDcwOC03MTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF/2qMjxL9UkegRijQv7Ty+d7fOIlGYJAvNipAfq9Q1OCEGnjmMh1e0PgBT1 YLoGLsW/A5yEbijtOD9uMexvLuJ5BaFmUtk+Ne7WQ+ZtyzhVMa7AkqqQidfecPyC llDCB7P/vg0t9928Rmsui2O6xsrJRNPYfSYjYQb83LOnOREdnDffIT+J52/6ZsjG v1rjhZ3NmqW5KSY4eeZuwsbIozZrXXZFGvao0l2+meXTHGqvbBx2VIL7wPKykF7o Fa6zyI7sRrGA0pfDB+iznVrdgz+O+JBgyJfQuP9fbqFCh4q7HJod17KQEUtjWq1M FWBrnTeozpLdTPw/v+KL5h0BNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy3oIZY L1Gto8EZDbT3sruguFcYMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUyWlh7DjBD0KMWeskOwVPhPZFLCADs/0kP2oNygMlPWFFSlmT2rvv 7M4KFNwmWcs0N4PJemaDqkNp3R5ctezT1P68VchdhA4koeXvTmmxjjogKQSvxbGx qvpNOBxW+qzpcUbqLbmizEQtuUMz02Qt6vQt1Ug82zsvm8oilS+NZy/kQ2JJBquI LJeJ762X4hkZxx2EdCWDdHTN+qiKomgsYiP53nQdx8SPaHHz5xS6U3iwCupYF5+U DgjrON6IgCk1IqQux2JDCE2K7f7soEF4eJGhvVaF+aysQSzeYFV0YkbNYxHnukzb IGgnLj5RhKl06+hMkUZBxBLnBD4X9yoM -----END CERTIFICATE-----Generated at Thu Jul 3 12:04:11 2025 by rpki-client