$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: WZurdZVEauW/gJc4SoJJGpBr7dToemx1X3+3HakDqbg= Subject key identifier: 98:F5:49:6E:23:AF:EC:CA:A9:BB:EC:7A:90:75:6B:52:8E:5A:3F:D4 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 34B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 15:10:28 +0000 Manifest this update: Fri 22 Aug 2025 15:10:27 +0000 Manifest next update: Fri 29 Aug 2025 15:10:27 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: Jiy7odp5rfay4V/JZ+BKVsq4JoxOabolR0RbxaCE+xs=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13496 (0x34b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Aug 22 15:10:27 2025 GMT Not After : Aug 29 15:10:27 2025 GMT Subject: CN=68a88863-b21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:bf:34:3b:86:4f:53:fa:f8:9a:da:3a:f3: fc:10:ea:e6:9c:dc:49:49:f3:48:df:6e:1b:87:db: 68:c9:2b:be:cf:6d:7c:bb:b7:f7:d9:6a:dd:d3:7f: 55:e5:f4:1a:37:91:b1:a9:ca:bc:98:27:dc:2c:a8: 8d:43:c6:c7:c4:ad:30:e3:b0:0b:82:2d:7b:ff:a7: 10:bc:b2:64:0c:21:03:3a:f4:cc:e8:c0:14:9e:cc: e6:11:24:9c:f1:f3:fe:f6:b5:44:00:e7:ff:a8:50: 94:55:c0:7f:7d:d8:f1:77:11:95:f3:30:68:87:ce: d6:58:f1:70:01:e5:4f:da:70:04:dd:79:c1:94:60: 74:4d:04:6a:2d:f7:c7:26:a6:d2:37:6e:8a:dd:5d: 55:53:c2:53:3d:b9:3e:95:1d:b0:eb:18:78:1b:10: 47:f6:db:5b:34:2e:de:90:46:43:90:be:a8:26:68: 97:d3:f7:0b:da:cf:1b:52:bb:16:39:94:31:15:61: 18:01:4f:42:8c:fd:7a:15:0a:3b:14:7f:f7:60:28: b2:12:81:9e:9a:5c:54:8b:e1:a5:42:5d:5e:ca:97: 39:d0:72:c8:31:78:01:b4:39:a6:74:bf:76:2b:4c: a9:58:06:50:3e:91:0c:45:dd:95:06:23:6d:86:10: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F5:49:6E:23:AF:EC:CA:A9:BB:EC:7A:90:75:6B:52:8E:5A:3F:D4 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:73:0b:73:fd:a0:d0:11:a6:f1:2e:c5:47:71:31:ea:1b:04: 17:91:fa:0f:34:0d:f9:37:d5:84:37:26:ba:0b:2b:a1:58:aa: cf:2f:83:0d:88:6d:89:af:9c:c4:6d:ff:98:b4:ad:0c:23:e9: fb:56:18:a4:e4:b3:60:e5:00:44:6b:01:c8:79:5d:e6:bc:74: ea:65:59:7a:ed:ea:79:56:c7:a7:e6:ac:4f:5f:75:0a:6b:ea: 90:83:27:6d:97:37:94:e3:71:3d:e6:de:11:27:e2:dc:34:d4: 1d:c6:9d:8a:81:82:22:f2:0a:f6:2a:ba:0c:dc:79:a7:9b:e7: 57:03:e9:33:16:5f:2d:df:3e:0b:e6:d2:82:cf:20:35:eb:ae: be:ba:83:3f:0f:d2:27:1e:79:a9:6b:ad:6e:fe:b4:96:4b:d7: 7f:a6:2d:8a:e9:16:d2:64:be:65:f9:2b:04:5e:63:8b:aa:97: ad:bd:27:5a:db:ac:08:1c:20:fd:7d:cf:fd:41:a9:d5:fa:e4: dd:7f:ab:23:9c:67:f4:f5:8c:30:e0:d3:d8:b9:ae:fe:31:84: 52:0b:da:ef:54:54:a0:f2:8b:77:0e:33:d5:67:17:d6:eb:66: 26:7b:5d:5a:0e:b3:aa:ee:9b:b4:8d:a5:ba:ab:d9:14:69:b3: 29:7a:2e:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUwODIyMTUxMDI3WhcNMjUwODI5MTUxMDI3WjAYMRYwFAYD VQQDEw02OGE4ODg2My1iMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUC/NDuGT1P6+JraOvP8EOrmnNxJSfNI324bh9toySu+z218u7f32Wrd039V 5fQaN5Gxqcq8mCfcLKiNQ8bHxK0w47ALgi17/6cQvLJkDCEDOvTM6MAUnszmESSc 8fP+9rVEAOf/qFCUVcB/fdjxdxGV8zBoh87WWPFwAeVP2nAE3XnBlGB0TQRqLffH JqbSN26K3V1VU8JTPbk+lR2w6xh4GxBH9ttbNC7ekEZDkL6oJmiX0/cL2s8bUrsW OZQxFWEYAU9CjP16FQo7FH/3YCiyEoGemlxUi+GlQl1eypc50HLIMXgBtDmmdL92 K0ypWAZQPpEMRd2VBiNthhAJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJj1SW4j r+zKqbvsepB1a1KOWj/UMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAycwtz/aDQEabxLsVHcTHqGwQXkfoPNA35N9WENya6CyuhWKrPL4MN iG2Jr5zEbf+YtK0MI+n7Vhik5LNg5QBEawHIeV3mvHTqZVl67ep5Vsen5qxPX3UK a+qQgydtlzeU43E95t4RJ+LcNNQdxp2KgYIi8gr2KroM3Hmnm+dXA+kzFl8t3z4L 5tKCzyA1666+uoM/D9InHnmpa61u/rSWS9d/pi2K6RbSZL5l+SsEXmOLqpetvSda 26wIHCD9fc/9QanV+uTdf6sjnGf09Yww4NPYua7+MYRSC9rvVFSg8ot3DjPVZxfW 62Yme11aDrOq7pu0jaW6q9kUabMpei5o -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:11 2025 by rpki-client