$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: 4KjWhEEay89hBifRkilW5xC9pUt4AId3bhVj0SaOlRg= Subject key identifier: 96:11:85:F6:01:AB:5E:62:37:CC:8F:F7:AC:48:A4:C1:D9:9A:3B:84 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 01A5 Signing time: Thu 03 Jul 2025 03:21:30 +0000 Manifest this update: Thu 03 Jul 2025 03:21:29 +0000 Manifest next update: Thu 10 Jul 2025 03:21:29 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: mMLZy3d59k0ll/puDOU1t9XEhUhPjEwoa+OKjSellKg=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Jul 3 03:21:29 2025 GMT Not After : Jul 10 03:21:29 2025 GMT Subject: CN=6865f73a-7ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:f1:9a:2b:38:b1:1f:d6:fa:6c:ac:e4:ac: 66:68:1a:d2:a5:ea:cd:9d:5f:13:e2:af:03:57:23: 22:09:4c:ef:1b:ae:06:bb:54:72:0f:09:15:e9:0d: 0a:a7:78:f3:0c:7a:f3:f6:07:7f:07:15:a2:e2:09: 4d:dc:fe:bf:eb:28:ff:57:81:75:eb:f1:6b:ac:22: 0d:5c:a7:68:d2:68:42:d4:c6:67:e9:48:27:a8:b2: b7:24:07:4e:be:e9:6c:f4:61:c9:c4:e2:d5:70:32: 85:ff:91:2b:c7:0a:b5:91:23:da:18:ae:84:b7:49: 84:7a:eb:0c:bc:e4:2c:56:bd:c8:0f:d4:eb:f5:4a: 1d:7b:87:25:2c:bf:ef:bb:71:d8:b8:3c:e2:05:2a: 7c:96:30:03:94:92:a7:9a:cf:08:f0:b0:a9:01:2d: fb:cf:52:df:20:e5:23:06:fb:38:bf:de:0e:9e:58: 3f:3a:1e:aa:35:2c:a4:b3:fc:b5:40:2c:e4:78:1a: 90:be:0c:a2:ac:58:8a:71:ba:a3:e7:3a:38:b5:9c: 36:04:a3:c5:4c:6f:1e:37:9c:b7:35:49:7c:80:1f: 71:9e:a2:ea:d9:22:90:1c:d9:34:12:af:99:5d:7d: c1:3f:b9:95:26:55:83:dd:86:88:4e:1a:71:89:c9: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:11:85:F6:01:AB:5E:62:37:CC:8F:F7:AC:48:A4:C1:D9:9A:3B:84 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1d:ed:43:dd:a2:77:40:53:64:4e:9e:8a:0e:ce:63:0c:93: 0e:b2:ef:dd:4d:ac:3f:48:df:3b:cd:6a:6e:58:ca:fe:ce:18: f5:3e:8f:35:bf:c2:38:f2:61:e1:91:6a:92:df:3c:2d:2d:bc: 89:d4:98:93:80:af:8e:1a:66:49:11:a1:86:14:08:16:f8:7a: 5c:3b:94:a9:d7:c3:f7:6b:50:6a:7a:77:31:7d:d1:0e:89:f0: d2:4b:04:82:46:93:39:0d:85:02:d9:fa:5c:23:e4:5f:d7:89: 75:de:54:b4:5d:c7:8a:0e:bf:ac:01:e3:c2:ae:00:23:c6:5c: 48:d1:87:61:65:ab:f8:90:8c:94:82:27:1a:72:e2:44:16:a2: 9d:e0:d2:2a:e9:02:34:1a:0b:c3:86:28:a0:08:50:9f:35:66: 9e:59:a6:fb:0a:f7:aa:a7:10:4f:07:c9:9d:0c:e1:c7:07:59: b3:6c:83:fc:45:49:5b:9c:8a:45:bb:2f:ee:85:6c:eb:03:8d: 8c:65:8b:4e:76:95:42:b7:66:8d:8a:16:eb:4f:88:58:4a:be: 76:c7:2c:2e:b1:7a:0e:f6:1d:99:b7:ff:4e:d3:a6:3f:95:05: da:9f:8d:f9:84:bb:a0:39:cc:3c:9b:03:c5:07:ad:f5:46:bb: 92:1c:20:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwNzAzMDMyMTI5WhcNMjUwNzEwMDMyMTI5WjAYMRYwFAYD VQQDEw02ODY1ZjczYS03ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq53xmis4sR/W+mys5KxmaBrSperNnV8T4q8DVyMiCUzvG64Gu1RyDwkV6Q0K p3jzDHrz9gd/BxWi4glN3P6/6yj/V4F16/FrrCINXKdo0mhC1MZn6UgnqLK3JAdO vuls9GHJxOLVcDKF/5Erxwq1kSPaGK6Et0mEeusMvOQsVr3ID9Tr9Uode4clLL/v u3HYuDziBSp8ljADlJKnms8I8LCpAS37z1LfIOUjBvs4v94Onlg/Oh6qNSyks/y1 QCzkeBqQvgyirFiKcbqj5zo4tZw2BKPFTG8eN5y3NUl8gB9xnqLq2SKQHNk0Eq+Z XX3BP7mVJlWD3YaIThpxicnECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYRhfYB q15iN8yP96xIpMHZmjuEMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHe1D3aJ3QFNkTp6KDs5jDJMOsu/dTaw/SN87zWpuWMr+zhj1Po81 v8I48mHhkWqS3zwtLbyJ1JiTgK+OGmZJEaGGFAgW+HpcO5Sp18P3a1BqencxfdEO ifDSSwSCRpM5DYUC2fpcI+Rf14l13lS0XceKDr+sAePCrgAjxlxI0YdhZav4kIyU gicacuJEFqKd4NIq6QI0GgvDhiigCFCfNWaeWab7CveqpxBPB8mdDOHHB1mzbIP8 RUlbnIpFuy/uhWzrA42MZYtOdpVCt2aNihbrT4hYSr52xywusXoO9h2Zt/9O06Y/ lQXan435hLugOcw8mwPFB631RruSHCC6 -----END CERTIFICATE-----Generated at Fri Jul 4 17:41:26 2025 by rpki-client