$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft File: h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json) Hash identifier: mdjV56S5all0Xc2LahwJ/jLDXq/EZEJdwKed+41YYMs= Subject key identifier: 53:EA:EF:8B:87:AE:55:0F:88:E9:4B:02:8C:B8:4D:E5:88:8E:9C:3E Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Certificate serial: 17F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft Manifest number: 17D8 Signing time: Sat 28 Jun 2025 16:26:28 +0000 Manifest this update: Sat 28 Jun 2025 16:26:28 +0000 Manifest next update: Sat 05 Jul 2025 16:26:28 +0000 Files and hashes: 1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: tUblNwWlJQMcKha21aT4DS4shcU+l32wLNy4Ime2PNE=) 2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: EjdNTbAyftBJxtIBKhAk8tku0Xw6VBdJSMgPHoN2SG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6128 (0x17f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Validity Not Before: Jun 28 16:26:28 2025 GMT Not After : Jul 5 16:26:28 2025 GMT Subject: CN=686017b4-0c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:b1:ed:fd:2d:bf:a2:e6:37:ed:15:83:47: 44:04:e1:cd:75:28:e0:45:4f:96:7a:4d:be:61:e4: 30:a6:90:c2:5d:68:57:70:5f:2c:e9:ca:89:c1:ce: 8f:ca:10:af:fd:cc:c1:b5:d7:c4:92:3f:9e:95:26: 54:24:1a:95:d4:01:08:7b:a9:bb:89:b8:4d:c1:d8: 0b:61:c9:c3:89:fd:d4:e7:37:4f:51:9f:9e:62:42: 45:ac:e4:1b:54:2c:c7:1b:58:fb:cc:18:30:c2:bd: 41:2e:bb:6e:1d:62:71:7f:14:af:84:9f:89:2f:c1: 87:46:96:99:e9:fc:0b:9d:ec:b7:3b:30:a5:b6:df: 87:30:7c:dc:3d:93:03:f0:66:5e:5c:53:96:81:d0: 5e:60:d9:25:94:ba:f2:b2:ca:2d:4c:00:bd:40:1d: d2:72:f1:2d:e9:ed:5e:66:4a:b3:9b:d2:16:7e:20: 21:d9:31:3b:8d:15:49:33:22:73:5f:15:46:54:9b: ca:fa:05:fb:27:11:49:d1:5c:30:25:cb:68:df:5f: 5e:75:81:08:e2:26:fd:fd:8f:14:23:b0:73:28:83: fb:26:3a:dd:f1:72:8e:b3:6d:17:48:45:9d:b1:e9: 9e:0c:64:aa:b1:d2:e1:96:6c:fb:c2:c1:31:10:37: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:EF:8B:87:AE:55:0F:88:E9:4B:02:8C:B8:4D:E5:88:8E:9C:3E X509v3 Authority Key Identifier: keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:67:ba:a1:16:dd:d3:93:fb:8c:3e:d6:37:fe:0c:98:29:fe: 8a:d8:db:d5:d2:79:ba:31:0d:b2:a2:be:27:4c:3c:b9:3a:0c: ab:c3:c0:0c:24:4f:20:0a:e1:e4:93:cd:dd:c6:1e:c8:e7:ba: 47:8f:e1:25:4b:85:57:61:a7:93:85:98:cc:c9:37:a7:48:8b: 00:68:cf:c0:2b:d1:f5:5f:7a:31:c8:3e:6d:e0:b9:81:e1:1b: 4c:54:e8:84:bf:35:db:aa:00:67:26:49:c7:23:b1:ff:1d:4c: b4:f0:fd:23:ff:67:60:aa:d8:71:59:43:a1:d4:38:08:e1:86: 2d:8a:5c:34:7d:10:a0:aa:b3:13:0f:09:ad:44:9f:cd:30:5b: 53:c2:be:d7:3e:a9:67:93:26:e4:17:96:ba:01:62:70:44:93: 87:d3:b4:13:b7:40:68:c3:61:76:65:6b:a1:56:65:8d:b5:ef: bd:f8:e8:de:2d:c5:13:4f:d4:cd:72:96:1a:e2:b4:a0:97:85: 8d:aa:e8:a1:2c:ba:7e:29:5c:14:02:c0:53:17:08:3a:f1:b1: 7c:2b:57:0c:e2:d5:03:47:63:32:52:bb:f5:43:76:23:fd:88: 35:c4:e0:c0:f3:5a:ae:3b:0f:89:e2:32:a9:c2:01:ae:84:76: 6a:29:f4:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxQzkxMTAvBgNVBAUTKDg3NUY0MDAyMUM2RDQzQjA0RUZFODk0QTdGQzE1Q0M0 RjZFRDg5QkEwHhcNMjUwNjI4MTYyNjI4WhcNMjUwNzA1MTYyNjI4WjAYMRYwFAYD VQQDEw02ODYwMTdiNC0wYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIGx7f0tv6LmN+0Vg0dEBOHNdSjgRU+Wek2+YeQwppDCXWhXcF8s6cqJwc6P yhCv/czBtdfEkj+elSZUJBqV1AEIe6m7ibhNwdgLYcnDif3U5zdPUZ+eYkJFrOQb VCzHG1j7zBgwwr1BLrtuHWJxfxSvhJ+JL8GHRpaZ6fwLney3OzCltt+HMHzcPZMD 8GZeXFOWgdBeYNkllLryssotTAC9QB3ScvEt6e1eZkqzm9IWfiAh2TE7jRVJMyJz XxVGVJvK+gX7JxFJ0VwwJcto319edYEI4ib9/Y8UI7BzKIP7Jjrd8XKOs20XSEWd semeDGSqsdLhlmz7wsExEDf8yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPq74uH rlUPiOlLAoy4TeWIjpw+MB8GA1UdIwQYMBaAFIdfQAIcbUOwTv6JSn/BXMT27Ym6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTFDOS9DMzAwQzJDRUM2 RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3Qk9fb2xLZjhGY3hQYnRp Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxOUFBaHh0UTdCT19vbEtmOEZjeFBidGliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTFDOS9DMzAwQzJDRUM2RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3 Qk9fb2xLZjhGY3hQYnRpYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Z7qhFt3Tk/uMPtY3/gyYKf6K2NvV0nm6MQ2yor4nTDy5Ogyrw8AM JE8gCuHkk83dxh7I57pHj+ElS4VXYaeThZjMyTenSIsAaM/AK9H1X3oxyD5t4LmB 4RtMVOiEvzXbqgBnJknHI7H/HUy08P0j/2dgqthxWUOh1DgI4YYtilw0fRCgqrMT DwmtRJ/NMFtTwr7XPqlnkybkF5a6AWJwRJOH07QTt0Bow2F2ZWuhVmWNte+9+Oje LcUTT9TNcpYa4rSgl4WNquihLLp+KVwUAsBTFwg68bF8K1cM4tUDR2MyUrv1Q3Yj /Yg1xODA81quOw+J4jKpwgGuhHZqKfQX -----END CERTIFICATE-----Generated at Sun Jun 29 13:46:13 2025 by rpki-client