$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: 0PZ97ppMO36Sh4r74d9CEhOi8ebe7zhdmTIoR2kCqsk= Subject key identifier: FA:DE:FF:38:EB:64:79:09:C0:EB:EC:5E:DF:2A:99:69:3F:02:AD:C5 Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 01F6 Signing time: Tue 01 Jul 2025 05:07:22 +0000 Manifest this update: Tue 01 Jul 2025 05:07:21 +0000 Manifest next update: Tue 08 Jul 2025 05:07:21 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: EGtaUNrZKrTnAlyzE8OPqGOKhVlsx12uVUrJv0TC5nI=) 2: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (hash: V5GXfj7MVmj/bsrh8ZK5BOMK+sTslcHA1M5O9HLWM8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Jul 1 05:07:21 2025 GMT Not After : Jul 8 05:07:21 2025 GMT Subject: CN=68636d09-98e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:e2:3c:12:2f:9a:71:50:29:c0:8c:e7:9b: d4:13:b4:8f:59:8d:d5:d7:0d:c0:53:bc:95:88:38: 58:f9:48:f2:bb:11:c8:2a:91:6f:21:10:94:27:df: fd:3c:17:c5:12:b0:a3:b8:03:4f:31:71:6c:c6:0b: 15:01:4a:93:67:df:72:d7:10:9c:3c:d4:94:64:5d: 0c:40:e8:1c:19:5a:d5:55:14:5d:1a:01:91:64:97: 44:09:37:20:b8:e1:b8:16:35:ce:d0:a8:69:4b:4c: fd:2d:57:8a:28:ea:5c:41:09:30:4b:8e:6e:56:4b: 89:e6:36:a7:07:66:a1:ae:cc:a1:c4:f5:6b:94:62: 78:76:b7:bd:2e:05:ec:2a:20:4b:51:7d:5d:16:84: 74:0a:f4:f2:30:9a:54:b9:64:83:48:79:26:3d:a9: 91:60:3a:5b:45:69:03:25:1e:66:5c:c5:28:61:40: 49:38:89:05:eb:e2:20:e3:75:52:3b:54:88:83:6e: e6:c2:c5:c6:15:95:a4:8a:f6:ce:0d:6e:40:36:80: 4c:d3:4b:af:c6:00:5f:bb:05:a6:54:0b:09:eb:10: 67:92:d5:ac:28:96:37:e2:f9:2c:51:b9:72:ef:54: 02:c6:f7:3d:ad:e6:23:d6:bd:a1:3b:88:db:67:96: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DE:FF:38:EB:64:79:09:C0:EB:EC:5E:DF:2A:99:69:3F:02:AD:C5 X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:19:31:5f:fc:9e:7b:ac:66:8b:d3:16:c1:46:79:08:be:ad: c0:61:a4:1c:c8:9a:30:dc:ae:4b:40:34:27:5a:ff:45:f8:aa: b0:7b:7c:b7:42:a3:fa:2c:12:f9:a4:05:0c:7f:83:49:bc:07: 4a:0f:2c:86:6b:30:58:e4:15:4c:38:66:e1:49:e0:4e:11:7c: 32:03:c1:0e:f6:20:bc:d3:85:a2:5c:db:74:48:e6:a3:e3:39: 83:b3:2f:86:b6:de:fc:45:09:d1:8c:ab:21:77:fb:9b:2a:43: 8a:9a:87:65:9e:45:21:67:f9:27:43:74:08:bd:85:ed:3a:f5: 2e:39:f5:05:e7:a7:3e:f3:9b:a3:0e:e2:27:da:6a:e4:20:cc: e1:bc:a8:37:57:ab:ac:5f:52:c3:39:4a:ab:76:55:63:5e:77: 6e:01:6a:b7:2b:f1:fa:17:80:76:74:4d:7c:4b:51:cc:45:80: ba:b9:82:8a:bc:0b:d4:86:b7:86:8b:b2:e7:67:fa:33:7a:16: 85:f4:93:1d:0f:eb:54:79:98:3f:a5:01:b6:cd:6d:2b:0b:8a: 24:f9:07:bd:76:cb:3b:1f:78:f7:60:d4:00:3c:99:60:60:9e: 4e:ae:1d:87:c7:de:51:bb:57:eb:32:43:79:db:f1:39:53:03: 1c:ee:3c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjUwNzAxMDUwNzIxWhcNMjUwNzA4MDUwNzIxWjAYMRYwFAYD VQQDEw02ODYzNmQwOS05OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35/iPBIvmnFQKcCM55vUE7SPWY3V1w3AU7yViDhY+UjyuxHIKpFvIRCUJ9/9 PBfFErCjuANPMXFsxgsVAUqTZ99y1xCcPNSUZF0MQOgcGVrVVRRdGgGRZJdECTcg uOG4FjXO0KhpS0z9LVeKKOpcQQkwS45uVkuJ5janB2ahrsyhxPVrlGJ4dre9LgXs KiBLUX1dFoR0CvTyMJpUuWSDSHkmPamRYDpbRWkDJR5mXMUoYUBJOIkF6+Ig43VS O1SIg27mwsXGFZWkivbODW5ANoBM00uvxgBfuwWmVAsJ6xBnktWsKJY34vksUbly 71QCxvc9reYj1r2hO4jbZ5bedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPre/zjr ZHkJwOvsXt8qmWk/Aq3FMB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMGTFf/J57rGaL0xbBRnkIvq3AYaQcyJow3K5LQDQnWv9F+Kqwe3y3 QqP6LBL5pAUMf4NJvAdKDyyGazBY5BVMOGbhSeBOEXwyA8EO9iC804WiXNt0SOaj 4zmDsy+Gtt78RQnRjKshd/ubKkOKmodlnkUhZ/knQ3QIvYXtOvUuOfUF56c+85uj DuIn2mrkIMzhvKg3V6usX1LDOUqrdlVjXnduAWq3K/H6F4B2dE18S1HMRYC6uYKK vAvUhreGi7LnZ/ozehaF9JMdD+tUeZg/pQG2zW0rC4ok+Qe9dss7H3j3YNQAPJlg YJ5Orh2Hx95Ru1frMkN52/E5UwMc7jxM -----END CERTIFICATE-----Generated at Wed Jul 2 15:46:11 2025 by rpki-client