$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json) Hash identifier: W7OApmBxFYvPpr5V8oJcke4BxUon4ZrSwYCWVfTLz0o= Subject key identifier: 8D:1B:51:B9:91:38:31:78:75:36:45:C5:1C:6B:1F:7E:2C:7A:39:A3 Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 05CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft Manifest number: 05C9 Signing time: Wed 02 Jul 2025 23:22:04 +0000 Manifest this update: Wed 02 Jul 2025 23:22:04 +0000 Manifest next update: Wed 09 Jul 2025 23:22:04 +0000 Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: Zzv+WXcSoPQ7oN68NUh/5vmp6Z7obgROBp11TO00m3g=) 2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: E/ZSFb0w8l7IP55HohiEiKQ/xTqSgiZ1I0q7vfGX9Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1486 (0x5ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Jul 2 23:22:04 2025 GMT Not After : Jul 9 23:22:04 2025 GMT Subject: CN=6865bf1c-c1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:b9:e6:d1:07:c2:0a:1d:cd:a3:e8:75:d9: 79:91:dd:61:f1:0e:81:1f:b3:eb:ed:df:5c:ef:f9: 54:9e:10:a8:0f:f4:f3:9e:a8:77:6c:eb:e5:63:f7: 01:70:a0:d4:88:67:24:59:81:7f:46:10:90:5c:e5: 00:7e:a6:f7:00:ec:00:bf:0a:08:2e:5f:a7:26:7b: cd:ac:23:44:72:52:22:5d:65:d4:b2:43:6a:c2:7c: c2:03:e0:ca:eb:d7:6a:b8:e0:b8:bc:28:c0:c5:98: 04:ba:70:72:a2:da:e7:28:c0:78:31:27:43:b8:17: 3d:bf:ae:cf:6a:31:62:44:b6:9a:d2:7c:d6:b1:f4: e7:13:77:b0:ea:77:20:18:eb:04:36:5d:90:1b:b1: df:45:61:33:bf:20:db:5b:93:5d:ab:05:9e:19:68: 5c:32:f1:f0:9c:e9:84:08:6a:b9:e4:c6:d9:38:ae: ef:b7:b5:07:97:91:69:9b:4f:e7:20:5a:0f:e1:d3: c8:3a:91:72:54:3d:bb:1d:bd:20:c5:33:3c:4c:12: ac:d5:20:4c:23:a2:86:b6:ff:2a:7a:cf:f9:5e:ba: a9:89:85:6d:cb:94:d4:e1:c5:84:ac:97:b5:3e:0c: b0:ae:40:67:19:eb:79:68:c9:b4:44:22:14:48:de: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1B:51:B9:91:38:31:78:75:36:45:C5:1C:6B:1F:7E:2C:7A:39:A3 X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f6:c2:ae:22:62:eb:90:56:d1:ad:34:b8:cb:e2:31:b4:48: 51:dc:8e:f4:18:f7:4f:9d:55:63:95:62:60:eb:7f:5a:e9:db: ed:c3:18:f5:3c:2b:29:21:ee:4c:a0:a1:82:42:c3:b7:ea:46: 2e:b4:df:a1:eb:ef:9b:07:1a:d9:09:e4:c0:7e:22:09:70:fc: 3c:9a:98:18:0e:f3:05:b4:09:4d:8c:12:31:15:2a:92:17:be: 2b:a0:ae:a1:6d:4b:88:11:5a:4a:f1:6e:be:98:0d:2a:65:70: 9b:2f:f7:85:38:b2:82:94:e7:a5:38:b6:66:f9:5c:9d:d8:8b: 21:46:22:18:2b:24:5b:d6:68:f0:f8:83:c3:50:fd:90:6b:5c: 3c:ac:e9:a6:e5:a3:bd:fc:ed:3a:a1:f8:00:e6:fa:65:06:62: ef:6b:9c:c1:4b:66:ba:0c:e5:5a:8f:85:23:19:3f:81:16:87: ee:69:98:5d:15:7a:14:0b:8b:27:95:12:16:cd:dc:6e:ab:fe: 0c:39:9a:b5:ce:e0:7a:22:e2:67:8b:76:53:e0:2e:50:c7:e2: c5:02:c1:99:b7:39:b4:c8:13:ff:64:f6:e6:a9:57:4b:f3:67: 0b:06:24:67:18:b9:d3:bc:ac:06:2b:e1:b3:1e:52:55:d9:23: aa:bf:8e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUwNzAyMjMyMjA0WhcNMjUwNzA5MjMyMjA0WjAYMRYwFAYD VQQDEw02ODY1YmYxYy1jMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwC55tEHwgodzaPoddl5kd1h8Q6BH7Pr7d9c7/lUnhCoD/Tznqh3bOvlY/cB cKDUiGckWYF/RhCQXOUAfqb3AOwAvwoILl+nJnvNrCNEclIiXWXUskNqwnzCA+DK 69dquOC4vCjAxZgEunByotrnKMB4MSdDuBc9v67PajFiRLaa0nzWsfTnE3ew6ncg GOsENl2QG7HfRWEzvyDbW5NdqwWeGWhcMvHwnOmECGq55MbZOK7vt7UHl5Fpm0/n IFoP4dPIOpFyVD27Hb0gxTM8TBKs1SBMI6KGtv8qes/5XrqpiYVty5TU4cWErJe1 PgywrkBnGet5aMm0RCIUSN6NfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0bUbmR ODF4dTZFxRxrH34sejmjMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB9sKuImLrkFbRrTS4y+IxtEhR3I70GPdPnVVjlWJg639a6dvtwxj1 PCspIe5MoKGCQsO36kYutN+h6++bBxrZCeTAfiIJcPw8mpgYDvMFtAlNjBIxFSqS F74roK6hbUuIEVpK8W6+mA0qZXCbL/eFOLKClOelOLZm+Vyd2IshRiIYKyRb1mjw +IPDUP2Qa1w8rOmm5aO9/O06ofgA5vplBmLva5zBS2a6DOVaj4UjGT+BFofuaZhd FXoUC4snlRIWzdxuq/4MOZq1zuB6IuJni3ZT4C5Qx+LFAsGZtzm0yBP/ZPbmqVdL 82cLBiRnGLnTvKwGK+GzHlJV2SOqv45L -----END CERTIFICATE-----Generated at Fri Jul 4 17:45:33 2025 by rpki-client