$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: Xw9gc5iULzVBoGIkaXrUOm3KobxuzmXFRFvv9J5hyFo= Subject key identifier: 50:F3:CF:F3:E5:4C:F9:63:67:F6:8B:D6:05:A2:58:6E:CA:54:AE:DE Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0A89 Signing time: Wed 02 Jul 2025 19:48:59 +0000 Manifest this update: Wed 02 Jul 2025 19:48:58 +0000 Manifest next update: Wed 09 Jul 2025 19:48:58 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: YS8ukNN8clUBK6liOEeQFAvPHnyRvS/1vqjIiFiOmkI=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Jul 2 19:48:58 2025 GMT Not After : Jul 9 19:48:58 2025 GMT Subject: CN=68658d2a-c4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:aa:cb:c4:19:b5:97:fb:b6:8a:72:72:26: 58:ee:32:0e:59:4f:97:80:3c:45:d8:a1:71:bb:ce: 98:c9:b5:01:f6:21:cb:05:b9:a1:a1:b8:3d:8b:7c: a0:74:07:94:71:74:2c:a4:00:17:09:9b:1f:0e:e0: 41:e8:14:98:7c:f1:74:be:64:43:31:97:06:88:6a: 3f:71:4a:82:b5:c7:2d:89:a9:86:a7:9b:54:01:83: d8:07:90:a3:65:93:ec:47:e0:d1:d7:fd:1e:ee:8d: 4e:dc:98:29:ee:73:d2:73:cd:44:36:79:6b:27:47: 96:de:ae:82:16:c7:ff:1f:4b:b9:6d:e6:75:30:dc: 3a:e5:f4:fb:ad:a5:b8:c9:24:85:e1:d7:ca:cb:83: 62:44:cc:f8:56:8a:00:15:8f:25:16:34:07:a5:39: 6b:94:f1:f1:ab:94:fc:8b:2d:19:20:55:7d:28:84: 98:e5:a7:89:57:d9:0e:ed:b7:74:dc:cb:bc:39:dd: dc:79:21:c2:c8:cc:f5:e2:31:ce:18:a1:b6:4e:3c: 13:f0:38:8c:f8:e6:84:0b:85:ce:55:b4:31:52:30: 40:28:56:3e:db:f1:43:99:a3:1b:8a:f4:f0:af:b4: 2a:5e:28:2c:76:fa:32:87:8e:4e:11:f6:96:f5:62: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F3:CF:F3:E5:4C:F9:63:67:F6:8B:D6:05:A2:58:6E:CA:54:AE:DE X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:77:25:db:dc:a5:51:9c:3f:76:e6:cb:cd:cc:c7:7b:89:7d: 89:c1:08:d7:00:6d:aa:62:5f:41:a0:60:0d:f8:dd:06:f3:ae: 45:07:f3:7d:6c:91:1f:6f:a5:46:9a:e6:27:90:6a:97:4d:3f: 07:40:82:64:76:bd:e9:55:98:95:89:f0:97:8b:3f:7e:a5:df: ec:8f:b3:2f:d7:8a:50:d7:16:2a:57:b0:1c:53:99:19:cf:17: 87:d3:db:0e:80:63:15:b7:97:98:75:36:17:4f:ea:36:04:c0: 6e:3d:95:8c:3d:d3:cc:02:67:15:de:35:ed:c0:40:f9:2b:d9: 72:ff:9a:ee:09:14:29:73:f2:13:5c:03:b0:ee:14:ba:5b:8a: c5:67:70:d2:fb:8f:a1:e7:aa:ff:42:bb:44:8d:42:15:a7:8c: 2c:be:36:94:8d:d8:b5:4f:d0:82:9d:ad:6a:9e:08:b5:1a:3f: d9:1a:8d:c8:2d:d3:18:55:be:13:f3:7d:f3:02:da:ee:e4:3d: 52:75:5b:65:c5:09:53:ff:81:e4:14:31:57:e9:10:95:60:99: 89:26:25:5d:c0:95:02:fb:0b:9c:9e:81:97:4d:96:8d:96:6e: 4b:d2:5a:4a:ba:b3:72:0c:ca:84:89:85:9b:ad:93:7e:7d:93: 99:2c:aa:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwNzAyMTk0ODU4WhcNMjUwNzA5MTk0ODU4WjAYMRYwFAYD VQQDEw02ODY1OGQyYS1jNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb2qy8QZtZf7topyciZY7jIOWU+XgDxF2KFxu86YybUB9iHLBbmhobg9i3yg dAeUcXQspAAXCZsfDuBB6BSYfPF0vmRDMZcGiGo/cUqCtcctiamGp5tUAYPYB5Cj ZZPsR+DR1/0e7o1O3Jgp7nPSc81ENnlrJ0eW3q6CFsf/H0u5beZ1MNw65fT7raW4 ySSF4dfKy4NiRMz4VooAFY8lFjQHpTlrlPHxq5T8iy0ZIFV9KISY5aeJV9kO7bd0 3Mu8Od3ceSHCyMz14jHOGKG2TjwT8DiM+OaEC4XOVbQxUjBAKFY+2/FDmaMbivTw r7QqXigsdvoyh45OEfaW9WKkPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDzz/Pl TPljZ/aL1gWiWG7KVK7eMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAdyXb3KVRnD925svNzMd7iX2JwQjXAG2qYl9BoGAN+N0G865FB/N9 bJEfb6VGmuYnkGqXTT8HQIJkdr3pVZiVifCXiz9+pd/sj7Mv14pQ1xYqV7AcU5kZ zxeH09sOgGMVt5eYdTYXT+o2BMBuPZWMPdPMAmcV3jXtwED5K9ly/5ruCRQpc/IT XAOw7hS6W4rFZ3DS+4+h56r/QrtEjUIVp4wsvjaUjdi1T9CCna1qngi1Gj/ZGo3I LdMYVb4T833zAtru5D1SdVtlxQlT/4HkFDFX6RCVYJmJJiVdwJUC+wucnoGXTZaN lm5L0lpKurNyDMqEiYWbrZN+fZOZLKoI -----END CERTIFICATE-----Generated at Thu Jul 3 03:04:28 2025 by rpki-client