$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: /DBu//XvjZAbl6KlV8SBkw6sdGK6uwOoaDNKSO/6MPM= Subject key identifier: FE:92:79:CA:0A:84:48:35:8E:EA:1B:72:39:45:DB:F8:24:92:C8:C6 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A3A Signing time: Wed 02 Jul 2025 19:58:09 +0000 Manifest this update: Wed 02 Jul 2025 19:58:08 +0000 Manifest next update: Wed 09 Jul 2025 19:58:08 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: 54vuklWsrqtMPT5ZJwO0D3ehjZAUeyVuaj73zp1HPZI=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Jul 2 19:58:08 2025 GMT Not After : Jul 9 19:58:08 2025 GMT Subject: CN=68658f51-9e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:38:e9:ed:63:3d:2b:d3:16:51:4e:96:06: f4:1c:55:25:27:4e:00:df:cd:95:9c:8e:0e:b6:1e: 89:16:bf:be:fa:0f:7f:9d:fe:3d:35:1c:dc:6c:eb: f1:35:64:b6:91:9a:61:23:37:d3:cc:9f:ee:3e:77: ca:69:41:62:f7:ed:89:fa:af:b7:eb:bd:c9:73:67: 7c:25:16:2b:61:41:92:b4:eb:8f:d0:18:a0:98:a2: 3a:68:32:76:b5:9c:e9:9e:1d:f9:4a:ec:5b:24:0b: 8a:2c:c7:2a:5a:9f:31:c7:bb:d5:77:0c:42:d3:f7: 75:87:bd:e3:bb:6e:67:2a:18:88:ae:50:9f:b3:f5: 8c:ec:43:40:49:b9:16:7c:cb:a7:79:33:c3:86:32: 6d:ed:f2:74:d3:6a:7b:7b:4e:af:c9:45:25:10:41: 66:a6:f3:a5:38:6a:b1:0f:19:d2:20:26:a5:ad:5c: 94:f0:e6:66:07:03:d7:2b:b8:6f:63:be:55:66:91: a7:03:df:ce:0c:09:3d:33:69:71:ce:13:b7:39:4a: ff:19:3e:55:74:81:e4:5b:5d:74:f0:80:1f:23:df: 4c:6c:ee:b5:8a:b8:40:7f:22:64:ec:d5:e6:f7:a8: b2:59:92:ca:5f:fc:74:d3:dd:5d:0e:73:05:ff:e8: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:92:79:CA:0A:84:48:35:8E:EA:1B:72:39:45:DB:F8:24:92:C8:C6 X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:b8:b4:9e:4b:7c:27:bb:92:b7:91:bd:36:f0:1c:e9:44: a0:bc:18:dc:97:03:06:e6:78:d6:43:54:f4:8f:7c:45:22:63: 04:38:ae:80:a7:97:6e:d4:34:6f:f3:40:a2:a1:05:c3:87:81: 6b:81:20:2b:70:4f:aa:aa:ba:ba:f4:ae:f9:cf:88:6e:0f:bd: 0a:44:71:ef:30:1e:b3:fe:95:11:e7:0b:35:14:7d:cc:7c:2d: 57:49:22:3f:e1:42:e6:3c:b9:a9:f6:30:59:52:d8:9d:d8:d9: f7:54:77:fc:9a:0c:25:fe:f8:c5:5e:61:d6:f7:d5:ef:13:f9: 53:5a:03:d9:b8:56:e4:91:47:e6:9d:68:1f:98:fa:b3:21:03: 9f:e3:a5:9b:f7:45:15:2f:4c:54:ea:b5:f2:7e:6f:8a:85:bc: 6a:42:f1:07:0f:e8:09:6c:ad:cc:36:14:52:88:33:7a:0b:ef: 75:f7:0c:42:e3:f0:15:47:e0:b3:8f:65:60:82:a2:24:f8:04: 73:34:9f:fa:7d:f7:e3:84:68:11:40:fb:c4:36:ed:20:d4:74: b5:7a:c3:da:30:e6:e4:1f:eb:c7:84:e6:b7:cb:70:15:57:96: a6:df:e5:a8:f6:7f:f6:c3:bb:9a:6c:a7:cf:55:c0:b2:a8:d9: 21:3b:c0:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwNzAyMTk1ODA4WhcNMjUwNzA5MTk1ODA4WjAYMRYwFAYD VQQDEw02ODY1OGY1MS05ZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmg46e1jPSvTFlFOlgb0HFUlJ04A382VnI4Oth6JFr+++g9/nf49NRzcbOvx NWS2kZphIzfTzJ/uPnfKaUFi9+2J+q+3673Jc2d8JRYrYUGStOuP0BigmKI6aDJ2 tZzpnh35SuxbJAuKLMcqWp8xx7vVdwxC0/d1h73ju25nKhiIrlCfs/WM7ENASbkW fMuneTPDhjJt7fJ002p7e06vyUUlEEFmpvOlOGqxDxnSICalrVyU8OZmBwPXK7hv Y75VZpGnA9/ODAk9M2lxzhO3OUr/GT5VdIHkW1108IAfI99MbO61irhAfyJk7NXm 96iyWZLKX/x0091dDnMF/+iiJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6SecoK hEg1juobcjlF2/gkksjGMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8bi0nkt8J7uSt5G9NvAc6USgvBjclwMG5njWQ1T0j3xFImMEOK6A p5du1DRv80CioQXDh4FrgSArcE+qqrq69K75z4huD70KRHHvMB6z/pUR5ws1FH3M fC1XSSI/4ULmPLmp9jBZUtid2Nn3VHf8mgwl/vjFXmHW99XvE/lTWgPZuFbkkUfm nWgfmPqzIQOf46Wb90UVL0xU6rXyfm+KhbxqQvEHD+gJbK3MNhRSiDN6C+919wxC 4/AVR+Czj2VggqIk+ARzNJ/6fffjhGgRQPvENu0g1HS1esPaMObkH+vHhOa3y3AV V5am3+Wo9n/2w7uabKfPVcCyqNkhO8BN -----END CERTIFICATE-----Generated at Thu Jul 3 09:32:22 2025 by rpki-client