$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json) Hash identifier: ePW+zt04+WWXXWpYzub90Qz6BTvLwOTqv8HUuGrvtIQ= Subject key identifier: 9E:A0:E5:3B:77:A5:7F:7A:59:D6:BB:A0:7F:82:30:74:01:DB:64:1A Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft Manifest number: E4 Signing time: Thu 03 Jul 2025 05:40:06 +0000 Manifest this update: Thu 03 Jul 2025 05:40:06 +0000 Manifest next update: Thu 10 Jul 2025 05:40:05 +0000 Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: Xdy5zBw1q5T90Eww1kSJ/mgvWkL+mSJeWKUErtifDz4=) 2: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (hash: ZVnbf0eZss/W/BW/uaATqG881vi7quF65kC8w3J0+jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Jul 3 05:40:06 2025 GMT Not After : Jul 10 05:40:05 2025 GMT Subject: CN=686617b6-8fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:39:38:80:59:ad:10:54:27:94:d2:4e:24:f2: 17:1b:bd:69:41:ef:ed:96:62:59:21:26:22:59:e8: 02:46:cd:82:a5:0d:ac:37:1b:e8:d3:86:6a:c7:27: e8:e9:07:9b:a8:2e:89:35:5a:4c:e3:d3:f0:e8:96: 4e:38:47:15:56:92:9c:08:76:9d:c6:28:6f:e1:20: 62:f6:64:09:12:aa:f5:a2:ff:95:ba:87:ea:b8:05: fe:11:b5:cb:42:b7:fb:d1:6b:2c:83:2e:e2:89:df: 37:d2:c8:c5:a8:76:2b:89:dc:bd:ae:34:f1:9c:8d: 50:3e:96:78:98:a4:e0:7e:77:00:8c:08:db:0d:d6: b6:31:2a:5e:93:62:6f:24:be:e5:34:e2:3e:f5:71: 72:4a:e0:64:c6:67:3a:a5:81:4f:aa:50:cc:0b:f7: e6:2a:ae:46:52:24:02:35:52:82:8c:b9:d5:ec:43: 25:5d:5f:4b:97:80:48:45:a2:f9:be:32:18:4b:e3: 2d:dd:cf:5e:3f:27:00:80:12:17:5b:63:0f:a3:f4: c6:72:6e:45:ec:2d:01:97:9f:07:c9:b2:3a:b6:92: ae:00:23:8d:c4:7f:f8:e7:dd:6c:b9:fc:85:7b:b6: e6:61:3d:71:75:6d:af:b7:e3:02:a0:81:3a:f8:3b: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:E5:3B:77:A5:7F:7A:59:D6:BB:A0:7F:82:30:74:01:DB:64:1A X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9f:11:26:da:a1:0e:c3:ca:f4:64:27:92:07:79:88:04:20: 7e:7d:b9:60:d7:10:51:4a:1a:af:f0:7f:00:13:c0:59:95:f0: 43:09:01:21:3c:7c:a5:5f:58:5a:69:56:fe:2b:76:eb:14:ac: c2:6d:22:6a:72:b0:38:eb:57:9a:37:2d:44:45:ab:cd:1d:0b: 41:9b:bc:2e:a8:0f:c1:ba:82:7c:67:7d:83:15:d0:97:6e:c8: 05:b2:83:3b:bf:60:91:42:c0:b8:12:72:75:16:17:90:66:60: ef:f1:67:c1:f5:51:e4:b0:51:06:2f:fd:0f:94:8b:fb:f6:ad: 92:07:d1:5a:0e:99:43:ff:ee:76:ac:da:d8:e8:dc:2f:73:19: 0f:b2:3d:d6:df:d1:2d:46:2c:3d:ff:cd:57:a2:94:8b:f9:46: f2:fa:3d:20:ab:14:f9:e5:8b:2f:0a:f5:77:ec:7f:75:67:b8: 2b:f1:76:71:2a:89:1b:6f:d4:52:a3:3f:40:ff:75:c3:f0:7d: 75:9d:2d:71:dd:76:c8:c5:d0:a4:fc:23:b4:44:8f:5b:ab:05: 91:f8:f2:ab:55:24:b1:6d:9a:ea:3a:cb:23:61:00:90:68:1d: 17:f6:63:c3:50:18:9e:8b:66:f6:8d:99:b3:e1:41:82:70:85: 4e:bf:3e:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwNzAzMDU0MDA2WhcNMjUwNzEwMDU0MDA1WjAYMRYwFAYD VQQDEw02ODY2MTdiNi04ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Dk4gFmtEFQnlNJOJPIXG71pQe/tlmJZISYiWegCRs2CpQ2sNxvo04Zqxyfo 6QebqC6JNVpM49Pw6JZOOEcVVpKcCHadxihv4SBi9mQJEqr1ov+VuofquAX+EbXL Qrf70Wssgy7iid830sjFqHYridy9rjTxnI1QPpZ4mKTgfncAjAjbDda2MSpek2Jv JL7lNOI+9XFySuBkxmc6pYFPqlDMC/fmKq5GUiQCNVKCjLnV7EMlXV9Ll4BIRaL5 vjIYS+Mt3c9ePycAgBIXW2MPo/TGcm5F7C0Bl58HybI6tpKuACONxH/4591sufyF e7bmYT1xdW2vt+MCoIE6+DsaawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6g5Tt3 pX96Wda7oH+CMHQB22QaMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5 RW1nSXJfZk9wUHdJNTlrcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnxEm2qEOw8r0ZCeSB3mIBCB+fblg1xBRShqv8H8AE8BZlfBDCQEh PHylX1haaVb+K3brFKzCbSJqcrA461eaNy1ERavNHQtBm7wuqA/BuoJ8Z32DFdCX bsgFsoM7v2CRQsC4EnJ1FheQZmDv8WfB9VHksFEGL/0PlIv79q2SB9FaDplD/+52 rNrY6NwvcxkPsj3W39EtRiw9/81XopSL+Uby+j0gqxT55YsvCvV37H91Z7gr8XZx Kokbb9RSoz9A/3XD8H11nS1x3XbIxdCk/CO0RI9bqwWR+PKrVSSxbZrqOssjYQCQ aB0X9mPDUBiei2b2jZmz4UGCcIVOvz4v -----END CERTIFICATE-----Generated at Thu Jul 3 09:32:29 2025 by rpki-client