$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: GcubYQyENydGLm3lKuzTOceAkWCbYHYFp10lh2idlXE= Subject key identifier: FE:48:89:98:9C:3C:A8:77:6D:81:F9:F3:53:2C:74:E7:E9:BC:F6:4B Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 349F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 3498 Signing time: Fri 04 Jul 2025 15:16:42 +0000 Manifest this update: Fri 04 Jul 2025 15:16:42 +0000 Manifest next update: Fri 11 Jul 2025 15:16:42 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: Xcl7miaf9Hm8LxAPbmDCd3fRIKSbCxKAJXKMHbe1bgw=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13471 (0x349f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Jul 4 15:16:42 2025 GMT Not After : Jul 11 15:16:42 2025 GMT Subject: CN=6867f05a-a43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:ca:20:57:dc:be:38:d6:3e:18:fe:52:6f: 2c:d8:be:5a:20:69:ce:e7:ea:ca:16:aa:26:53:60: 85:7a:98:6f:06:e7:22:af:55:ee:5b:4c:ba:4a:80: 93:90:5f:6d:d8:f8:13:b7:4a:6a:21:cf:38:bd:cc: 1b:03:bb:72:9c:10:b2:5c:fe:be:8b:07:77:fe:2f: 29:0c:01:d1:29:92:82:11:94:11:91:ee:77:89:df: bc:47:14:6c:33:03:24:17:a0:65:aa:d1:5c:50:ab: 5e:5d:af:1a:60:28:da:5d:6d:5e:31:f3:7a:a6:d8: d6:cd:b9:6a:2c:6d:8f:be:b2:1d:50:1f:ef:bc:50: 70:ae:b0:fa:0e:cb:13:b4:a4:43:06:1e:34:7d:88: d0:f0:7d:e2:33:e6:3e:84:1d:5e:58:7a:d9:a4:15: a8:72:76:9d:0c:25:e2:fd:fb:0c:af:3e:2d:31:2b: 50:36:16:b0:09:f1:d0:a1:ea:1a:f7:52:94:7c:a4: ee:93:6c:42:17:75:cb:f2:26:98:fe:3b:25:41:25: dc:4e:18:f3:df:85:f2:a8:db:fa:af:a3:d7:35:47: 05:dc:a1:3f:35:51:c5:35:0d:ab:ad:5c:0e:36:5a: fd:05:d0:f2:aa:2d:37:94:ae:ea:f1:23:68:7d:fd: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:48:89:98:9C:3C:A8:77:6D:81:F9:F3:53:2C:74:E7:E9:BC:F6:4B X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:60:c6:58:16:84:5b:13:b9:cb:3a:b7:21:a3:8f:ba:49:9d: a3:8f:72:64:65:6e:2b:99:5c:a8:0f:59:08:74:93:5c:2e:f5: 68:d2:3d:05:82:02:ee:19:57:6b:c7:55:de:19:be:57:c6:60: 96:d1:4e:d6:5d:2e:4c:f0:99:cc:8d:f2:13:7b:68:d0:14:3a: cb:48:ee:c3:d7:cb:4d:ea:ea:41:ed:24:ef:70:6f:2d:cf:06: 92:25:ed:d5:43:38:c9:57:ee:0a:c1:bf:78:f8:59:9e:85:d4: d1:70:d0:62:6f:00:1a:ed:f9:fe:ca:39:9c:26:b0:85:32:76: 60:72:17:fa:e7:3e:7b:a5:7c:35:92:80:ab:9a:7b:d5:13:54: e6:85:50:1d:a4:1c:1a:be:c7:e0:ad:4e:d2:18:38:d1:41:c2: ba:48:fb:b5:cf:4e:61:3d:f8:3a:41:fe:a6:a5:b2:12:c1:ff: a8:24:66:33:ea:63:06:be:1c:d4:17:d7:76:cf:a0:ed:9f:3d: ca:f9:2f:ee:c1:a6:b1:f9:d6:b6:ef:25:3a:d1:a4:5d:1b:ae: 48:60:1b:c7:7f:9f:f5:18:cc:8e:99:f8:79:29:66:d3:c2:6b: 04:aa:63:1b:99:ce:10:7c:96:c0:bc:c2:63:fa:cb:1c:ee:a5: b5:29:4b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUwNzA0MTUxNjQyWhcNMjUwNzExMTUxNjQyWjAYMRYwFAYD VQQDEw02ODY3ZjA1YS1hNDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9bKIFfcvjjWPhj+Um8s2L5aIGnO5+rKFqomU2CFephvBucir1XuW0y6SoCT kF9t2PgTt0pqIc84vcwbA7tynBCyXP6+iwd3/i8pDAHRKZKCEZQRke53id+8RxRs MwMkF6BlqtFcUKteXa8aYCjaXW1eMfN6ptjWzblqLG2PvrIdUB/vvFBwrrD6DssT tKRDBh40fYjQ8H3iM+Y+hB1eWHrZpBWocnadDCXi/fsMrz4tMStQNhawCfHQoeoa 91KUfKTuk2xCF3XL8iaY/jslQSXcThjz34XyqNv6r6PXNUcF3KE/NVHFNQ2rrVwO Nlr9BdDyqi03lK7q8SNoff04OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5IiZic PKh3bYH581MsdOfpvPZLMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7YMZYFoRbE7nLOrcho4+6SZ2jj3JkZW4rmVyoD1kIdJNcLvVo0j0F ggLuGVdrx1XeGb5XxmCW0U7WXS5M8JnMjfITe2jQFDrLSO7D18tN6upB7STvcG8t zwaSJe3VQzjJV+4Kwb94+FmehdTRcNBibwAa7fn+yjmcJrCFMnZgchf65z57pXw1 koCrmnvVE1TmhVAdpBwavsfgrU7SGDjRQcK6SPu1z05hPfg6Qf6mpbISwf+oJGYz 6mMGvhzUF9d2z6Dtnz3K+S/uwaax+da27yU60aRdG65IYBvHf5/1GMyOmfh5KWbT wmsEqmMbmc4QfJbAvMJj+ssc7qW1KUvX -----END CERTIFICATE-----Generated at Sat Jul 5 21:56:29 2025 by rpki-client