$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: W1r9zWinTXUNVsHOpVTgOs3+Tvj6yg3rygoE90mX4NE= Subject key identifier: 70:5E:D3:87:2E:EB:FD:75:15:19:E7:93:6F:85:E6:9B:6B:F0:BA:EA Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01E1 Signing time: Thu 03 Jul 2025 02:47:08 +0000 Manifest this update: Thu 03 Jul 2025 02:47:07 +0000 Manifest next update: Thu 10 Jul 2025 02:47:07 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: ffck0Hrmmew+CDNLiApI9bgLUIDarqvJW7F3WSAhP60=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Jul 3 02:47:07 2025 GMT Not After : Jul 10 02:47:07 2025 GMT Subject: CN=6865ef2b-dc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:76:8e:37:a7:1d:be:28:f8:a1:ca:ad:69: 82:f2:3b:33:4f:ad:b4:8b:fe:f8:73:e3:e9:88:a8: a7:09:8a:ef:c7:e3:90:94:04:e6:2c:84:8b:b0:d2: db:96:03:63:3d:94:3a:1a:d0:43:cb:8c:d2:05:33: 88:f5:05:0e:86:f4:85:83:cc:92:d2:db:38:2b:23: 2d:6b:fd:fd:7b:8d:09:dc:fa:8c:a8:a5:40:61:f3: 4b:13:ef:ac:5a:ca:b1:94:61:22:ee:ce:2e:0b:55: 12:83:e9:72:8a:9d:e5:9c:81:46:75:a1:42:18:8e: b8:22:3c:53:18:4b:a8:bb:ff:8f:78:98:bd:9a:91: 58:41:42:ec:0b:15:40:4e:6e:aa:a5:3c:80:7c:b0: 8a:78:71:7d:06:93:60:2e:0e:3c:8b:bb:08:dd:70: e2:fd:9a:6e:95:53:f1:d6:6d:40:e5:17:4b:ee:59: ed:d0:d3:1d:93:c4:b7:d5:fd:8e:f3:14:cd:33:5d: 30:62:2e:6a:ff:94:b0:1b:05:20:2e:28:ae:ac:64: 88:9e:8a:08:39:81:15:61:47:97:ec:2c:99:eb:e1: a3:a1:da:29:f6:2d:81:63:a0:16:35:09:bd:ca:33: 5f:61:38:4d:28:17:22:76:71:94:32:51:0d:89:f2: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5E:D3:87:2E:EB:FD:75:15:19:E7:93:6F:85:E6:9B:6B:F0:BA:EA X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:08:56:78:09:fb:85:2e:23:ca:43:15:ce:9e:72:a2:64: 80:03:29:c8:f9:14:73:a6:73:a8:5d:b9:85:e8:73:48:5d:49: 67:63:e7:90:32:7e:7e:44:0f:a8:b7:9e:4c:33:32:74:87:3c: 13:5a:df:f3:5b:e6:58:50:89:2c:f5:db:fe:1b:cb:9a:3e:8f: 8e:b2:66:ef:fb:d1:39:83:4d:a4:af:a6:31:ed:61:2c:b5:29: 94:79:1c:2b:fa:b9:64:27:c8:4c:a1:cb:6b:4b:e7:70:03:33: 0d:8c:c6:87:fc:43:58:ef:3e:23:97:aa:9c:45:ff:ba:7c:b2: aa:e9:5b:b7:6e:33:78:c2:70:db:a2:ad:69:90:ea:b4:7c:2c: 90:79:11:86:98:7c:a8:9d:8f:4b:03:ef:10:ad:0e:44:80:79: ac:b2:eb:1c:08:bd:12:d2:04:d8:f4:ae:8d:fb:31:d8:2b:ad: 1e:68:d1:f0:1b:f0:0f:05:44:1e:38:48:15:d7:45:d0:7f:d3: f6:c2:e0:a4:ba:2a:a4:9a:15:97:0b:05:e3:66:5f:1f:af:f6: 60:b3:89:2b:33:33:a6:48:07:1c:e6:2e:c2:f6:07:14:58:84: 1c:74:bb:7c:20:5e:ff:f5:8e:6b:87:54:2d:f9:33:d1:3c:bb: e3:b9:0d:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNzAzMDI0NzA3WhcNMjUwNzEwMDI0NzA3WjAYMRYwFAYD VQQDEw02ODY1ZWYyYi1kYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MB2jjenHb4o+KHKrWmC8jszT620i/74c+PpiKinCYrvx+OQlATmLISLsNLb lgNjPZQ6GtBDy4zSBTOI9QUOhvSFg8yS0ts4KyMta/39e40J3PqMqKVAYfNLE++s WsqxlGEi7s4uC1USg+lyip3lnIFGdaFCGI64IjxTGEuou/+PeJi9mpFYQULsCxVA Tm6qpTyAfLCKeHF9BpNgLg48i7sI3XDi/ZpulVPx1m1A5RdL7lnt0NMdk8S31f2O 8xTNM10wYi5q/5SwGwUgLiiurGSInooIOYEVYUeX7CyZ6+Gjodop9i2BY6AWNQm9 yjNfYThNKBcidnGUMlENifKqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBe04cu 6/11FRnnk2+F5ptr8LrqMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVMghWeAn7hS4jykMVzp5yomSAAynI+RRzpnOoXbmF6HNIXUlnY+eQ Mn5+RA+ot55MMzJ0hzwTWt/zW+ZYUIks9dv+G8uaPo+Osmbv+9E5g02kr6Yx7WEs tSmUeRwr+rlkJ8hMoctrS+dwAzMNjMaH/ENY7z4jl6qcRf+6fLKq6Vu3bjN4wnDb oq1pkOq0fCyQeRGGmHyonY9LA+8QrQ5EgHmssuscCL0S0gTY9K6N+zHYK60eaNHw G/APBUQeOEgV10XQf9P2wuCkuiqkmhWXCwXjZl8fr/Zgs4krMzOmSAcc5i7C9gcU WIQcdLt8IF7/9Y5rh1Qt+TPRPLvjuQ2a -----END CERTIFICATE-----Generated at Fri Jul 4 21:59:13 2025 by rpki-client