$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json) Hash identifier: cb322Zfspm0lG54yxKzcU3S26J92lYkwHkXi2P1gEQ0= Subject key identifier: F0:5A:0D:A9:E2:89:7A:03:36:40:61:0E:CE:42:F5:01:45:28:89:E5 Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft Manifest number: 07A3 Signing time: Wed 02 Jul 2025 21:34:51 +0000 Manifest this update: Wed 02 Jul 2025 21:34:51 +0000 Manifest next update: Wed 09 Jul 2025 21:34:51 +0000 Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: rrUuim194otDnWi/Qrt2CZYCgjQzv8K7m1Pq3XuY6qQ=) 2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Validity Not Before: Jul 2 21:34:51 2025 GMT Not After : Jul 9 21:34:51 2025 GMT Subject: CN=6865a5fb-ebfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:22:48:a7:19:72:c1:96:26:48:11:a8:33: 95:46:8f:b5:45:6b:1e:db:98:07:a7:19:b2:ce:ff: 4b:a5:c2:36:3b:aa:5c:51:30:c8:1c:67:30:06:b8: 8c:58:3f:3b:86:a6:8b:e4:42:6f:9b:fa:cd:08:7c: 96:86:3d:80:d9:f9:76:7d:ff:3b:25:3f:29:ff:0f: db:27:2f:01:c1:43:5c:df:fd:60:cd:c9:c1:0c:4b: ac:67:c6:df:e8:5f:a4:b3:8e:d3:6e:80:24:3e:be: 3a:ac:03:51:a6:15:df:a7:0d:e1:4d:bf:ee:31:7b: 0d:c6:ef:35:d3:24:79:e3:94:f9:73:76:3e:ef:ec: 70:9c:67:60:35:99:43:6b:f1:a5:90:85:63:6a:3e: 0f:6b:f7:43:dc:63:72:0c:00:eb:65:40:e3:24:c7: db:e2:66:16:e7:f8:d5:5f:a6:0b:be:0a:51:cd:67: d9:7a:4a:ce:f5:74:f3:8b:b0:88:f7:ae:d3:8c:4e: 3f:26:db:9f:60:fe:0d:ca:7c:49:58:76:ab:2e:69: 44:de:89:36:8f:01:5a:50:be:b1:6c:98:e0:5d:96: 97:90:a0:3f:58:19:17:0c:2f:f9:18:1b:97:81:04: 3c:e4:11:35:d1:05:db:e9:ce:71:c0:19:30:0e:d0: 12:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5A:0D:A9:E2:89:7A:03:36:40:61:0E:CE:42:F5:01:45:28:89:E5 X509v3 Authority Key Identifier: keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:9a:d5:a4:c5:f4:ba:1d:6d:36:f2:af:d9:24:e5:4f:2f:50: d2:23:0a:69:c3:77:a9:7d:7a:a7:60:9b:f6:a8:1b:82:d8:fc: e8:36:73:60:c6:f3:35:55:01:38:df:ae:d1:ac:7f:c7:aa:6d: 1e:3e:04:f8:03:ff:3e:59:eb:5b:f5:99:81:3e:b2:70:3c:22: 59:db:e2:3a:4e:fb:d4:0a:a9:dd:c2:b8:d7:8c:84:5b:ec:6b: f8:02:08:db:b3:b8:ae:46:b3:d0:de:60:15:9f:96:32:44:1c: ea:8e:4f:ac:99:99:6a:ac:7f:24:0a:c8:f8:34:76:c2:56:1e: 18:aa:8c:56:af:ff:8b:50:24:59:17:a9:61:2f:28:79:13:e7: a0:a6:59:ee:0a:33:45:56:fe:6d:5c:80:57:bf:69:40:5c:70: 4c:4e:d0:47:e9:2e:c7:66:06:4c:d7:8d:89:4a:3d:99:f0:5b: b5:6a:18:f8:2e:ac:db:9f:a5:fc:4a:05:32:08:e6:17:be:dd: 17:a1:03:0b:fe:45:ea:14:da:fa:ea:a5:3a:0f:70:6e:4d:d9: 1d:1d:9e:19:92:b4:1a:57:a0:94:72:58:ca:52:a0:9c:56:14: 7c:2c:ec:fa:56:69:6b:73:f9:af:95:61:7f:b9:e3:32:b7:a0: d3:3a:5a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5 MDM4NTU4NkUwHhcNMjUwNzAyMjEzNDUxWhcNMjUwNzA5MjEzNDUxWjAYMRYwFAYD VQQDEw02ODY1YTVmYi1lYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWEiSKcZcsGWJkgRqDOVRo+1RWse25gHpxmyzv9LpcI2O6pcUTDIHGcwBriM WD87hqaL5EJvm/rNCHyWhj2A2fl2ff87JT8p/w/bJy8BwUNc3/1gzcnBDEusZ8bf 6F+ks47TboAkPr46rANRphXfpw3hTb/uMXsNxu810yR545T5c3Y+7+xwnGdgNZlD a/GlkIVjaj4Pa/dD3GNyDADrZUDjJMfb4mYW5/jVX6YLvgpRzWfZekrO9XTzi7CI 967TjE4/JtufYP4NynxJWHarLmlE3ok2jwFaUL6xbJjgXZaXkKA/WBkXDC/5GBuX gQQ85BE10QXb6c5xwBkwDtAStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBaDani iXoDNkBhDs5C9QFFKInlMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2 UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClmtWkxfS6HW028q/ZJOVPL1DSIwppw3epfXqnYJv2qBuC2PzoNnNg xvM1VQE4367RrH/Hqm0ePgT4A/8+Wetb9ZmBPrJwPCJZ2+I6TvvUCqndwrjXjIRb 7Gv4Agjbs7iuRrPQ3mAVn5YyRBzqjk+smZlqrH8kCsj4NHbCVh4YqoxWr/+LUCRZ F6lhLyh5E+egplnuCjNFVv5tXIBXv2lAXHBMTtBH6S7HZgZM142JSj2Z8Fu1ahj4 Lqzbn6X8SgUyCOYXvt0XoQML/kXqFNr66qU6D3BuTdkdHZ4ZkrQaV6CUcljKUqCc VhR8LOz6Vmlrc/mvlWF/ueMyt6DTOlqa -----END CERTIFICATE-----Generated at Thu Jul 3 05:15:41 2025 by rpki-client