$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: X+7ZLzKD7hxF49gV5tlgoiHzYTulWfZRg6YR6e+RaHc= Subject key identifier: 59:8E:63:A4:7E:80:0C:C3:85:B9:06:EE:E0:C2:B0:C5:6A:37:19:CA Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 10A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 1080 Signing time: Wed 02 Jul 2025 17:36:12 +0000 Manifest this update: Wed 02 Jul 2025 17:36:11 +0000 Manifest next update: Wed 09 Jul 2025 17:36:11 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 10pwRmh7Ov5Vmle/afPI8zHi0VJJNvAZP+zA2bAEkUo=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4264 (0x10a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Jul 2 17:36:11 2025 GMT Not After : Jul 9 17:36:11 2025 GMT Subject: CN=68656e0c-856b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:39:d3:18:20:b7:8e:7a:47:02:c6:a9:41: 9d:47:28:b5:5d:ea:25:f8:b2:c2:7e:1c:be:10:39: 4e:e8:14:be:a7:81:bf:19:89:af:39:71:66:db:33: 8c:84:76:a3:b3:a3:71:4a:7e:a2:70:33:61:77:c6: 60:47:87:f9:ff:8d:a9:15:6b:df:d0:b1:76:de:06: 5b:4a:23:bf:c2:7e:2b:5c:3f:1f:60:4c:6e:3f:80: 89:0e:57:b6:97:60:2e:9c:1b:54:1d:e9:f4:70:a3: c0:35:9c:01:d6:5f:5b:b8:78:4c:52:9e:d0:de:af: 97:7e:4f:fb:94:08:fa:43:17:5f:65:f6:ff:db:06: fb:ef:75:d7:61:4f:75:36:98:92:77:32:30:cd:da: 11:f6:15:c3:38:86:03:c6:55:32:ca:e7:0f:b8:3f: b0:c1:14:69:ac:3a:21:c2:02:81:3b:08:b7:f8:18: 8d:ad:a0:56:98:3f:7d:18:54:52:73:44:6e:98:ad: 54:f3:9f:43:e6:eb:b6:0e:79:80:c8:8a:9e:a2:08: 95:23:e1:61:82:9d:8d:fe:61:08:a7:68:49:6b:b3: 0d:ad:ab:9e:dc:1a:aa:7e:b2:1f:45:92:7e:73:ac: 79:ee:34:4f:b7:30:23:f0:51:58:a4:95:57:af:6a: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:63:A4:7E:80:0C:C3:85:B9:06:EE:E0:C2:B0:C5:6A:37:19:CA X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:7b:ca:06:64:7c:dc:cf:19:25:0b:2f:98:65:a6:75:75:bb: b8:e2:15:ca:63:82:5c:7b:c6:02:9f:1c:21:03:2c:52:2a:9c: 82:f0:6b:a8:09:12:87:c8:e2:cf:08:e8:43:33:7b:0c:c4:92: d5:b6:5f:1e:71:af:6c:38:ed:9d:48:c2:1e:21:de:c7:df:7d: e2:c9:34:c2:ab:65:0a:65:29:38:ae:1e:0b:c7:44:6d:fe:1b: 8b:c1:0e:26:1b:43:c7:36:1a:6f:17:2b:96:67:79:a9:ca:c1: a0:c9:82:67:d8:15:7e:cc:fd:cd:63:f2:5b:df:8f:c4:51:cb: cb:c1:9e:36:c3:22:45:ad:fd:d4:d3:ea:d0:84:3b:df:53:83: cb:6a:77:4f:b2:0f:71:ea:81:f2:9a:64:a7:1c:9d:9e:ca:f5: 7a:3f:07:a7:59:aa:cb:04:d8:1d:c8:2d:f0:8a:35:cc:2e:e6: 83:32:ca:6d:70:fc:f2:5e:d3:8e:d4:e7:2d:5d:8a:db:9c:58: 3d:9e:8f:56:9c:a4:5e:fd:97:c4:28:75:4d:9e:76:35:41:1d: 96:88:10:19:b7:7e:5a:a8:8d:63:66:48:db:c9:5f:3d:bf:70: 40:e5:9e:18:7e:be:fd:56:47:b7:97:cd:e9:1f:1f:51:d6:5b: df:83:14:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUwNzAyMTczNjExWhcNMjUwNzA5MTczNjExWjAYMRYwFAYD VQQDEw02ODY1NmUwYy04NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5U50xggt456RwLGqUGdRyi1Xeol+LLCfhy+EDlO6BS+p4G/GYmvOXFm2zOM hHajs6NxSn6icDNhd8ZgR4f5/42pFWvf0LF23gZbSiO/wn4rXD8fYExuP4CJDle2 l2AunBtUHen0cKPANZwB1l9buHhMUp7Q3q+Xfk/7lAj6QxdfZfb/2wb773XXYU91 NpiSdzIwzdoR9hXDOIYDxlUyyucPuD+wwRRprDohwgKBOwi3+BiNraBWmD99GFRS c0RumK1U859D5uu2DnmAyIqeogiVI+Fhgp2N/mEIp2hJa7MNraue3BqqfrIfRZJ+ c6x57jRPtzAj8FFYpJVXr2oKYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmOY6R+ gAzDhbkG7uDCsMVqNxnKMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCze8oGZHzczxklCy+YZaZ1dbu44hXKY4Jce8YCnxwhAyxSKpyC8Guo CRKHyOLPCOhDM3sMxJLVtl8eca9sOO2dSMIeId7H333iyTTCq2UKZSk4rh4Lx0Rt /huLwQ4mG0PHNhpvFyuWZ3mpysGgyYJn2BV+zP3NY/Jb34/EUcvLwZ42wyJFrf3U 0+rQhDvfU4PLandPsg9x6oHymmSnHJ2eyvV6PwenWarLBNgdyC3wijXMLuaDMspt cPzyXtOO1OctXYrbnFg9no9WnKRe/ZfEKHVNnnY1QR2WiBAZt35aqI1jZkjbyV89 v3BA5Z4Yfr79Vke3l83pHx9R1lvfgxTL -----END CERTIFICATE-----Generated at Thu Jul 3 23:20:05 2025 by rpki-client