$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: gKL5kYk1kwP9cIz2TQnPiOh45g2k5PegGOIwuuKNrzY= Subject key identifier: D2:FF:61:39:5F:8F:B1:73:D3:0E:D9:9C:11:F4:A3:49:F6:F2:90:A8 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1DD7 Signing time: Wed 02 Jul 2025 16:14:07 +0000 Manifest this update: Wed 02 Jul 2025 16:14:06 +0000 Manifest next update: Wed 09 Jul 2025 16:14:06 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: VMyuChFA7z+4fX/17XJHFRvEXlJ/O2qQHv5UTzxSf50=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7654 (0x1de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Jul 2 16:14:06 2025 GMT Not After : Jul 9 16:14:06 2025 GMT Subject: CN=68655ace-4863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:69:c9:6f:88:4e:18:39:4c:0a:77:ff:cd: a7:8e:77:f8:97:3e:4d:62:73:36:1c:a3:46:b9:29: 29:b1:2f:cc:65:04:ad:af:eb:02:7c:35:ad:47:3a: 18:d5:06:6e:7d:30:0a:17:e0:ef:ee:47:46:85:a4: 97:af:00:f4:dc:03:c4:db:9c:b4:7e:5b:c0:b5:88: 8a:13:0e:fd:b0:94:0e:92:0c:36:a8:aa:db:a9:6c: 0b:f4:60:e2:2a:27:64:15:83:60:0c:26:45:a7:41: ab:6a:b0:3c:af:3a:77:63:84:9a:34:c6:37:eb:29: 4e:b5:d3:52:21:fb:42:78:9a:92:e7:60:64:02:5b: dc:a4:e2:5b:2e:a1:00:4d:c3:2b:83:bb:f0:cb:f3: 72:7f:12:0a:7c:b7:97:bc:25:50:91:65:9f:37:7f: 66:9a:b7:15:e3:de:fb:72:14:a4:6a:6e:61:a4:ba: ff:bb:91:a2:74:b6:53:17:22:e0:60:e3:71:7d:b8: 36:fa:01:12:d0:2f:b6:3c:06:42:1b:14:33:ff:fa: c1:03:0b:6c:d8:a0:41:f5:4f:53:75:1b:38:65:42: 42:db:2e:ff:70:3e:e4:25:54:87:8b:37:e5:38:9b: 5a:7b:5d:6a:e7:00:9b:1a:88:b0:18:40:77:46:46: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:61:39:5F:8F:B1:73:D3:0E:D9:9C:11:F4:A3:49:F6:F2:90:A8 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:07:07:e9:e5:6b:34:25:d8:09:bb:b7:b4:01:ae:06:69:e3: 05:d7:2b:d9:5e:3d:0b:df:da:49:8f:47:e6:8b:e4:4d:fd:f4: ed:1b:ec:b0:f2:38:3a:d5:e3:ae:32:f9:e8:cb:c5:5c:94:b0: e6:2b:21:af:9d:a1:64:fa:db:47:53:ff:3d:6b:38:85:14:da: 4a:14:7b:d8:a4:c1:6d:c6:ae:8a:19:18:98:e4:1a:6c:4e:2a: cd:d8:b4:a7:d4:2d:a5:5e:21:43:b2:ca:dd:86:0f:8d:e0:9e: 03:3c:2f:52:dd:d7:4b:20:2e:e0:12:2a:5f:49:e9:f7:e0:61: 79:9d:54:31:39:79:0f:94:82:fe:ec:b0:1d:5c:ef:4f:47:f9: 0d:2f:8b:1b:18:10:39:fd:cf:b7:96:71:c6:2d:a2:0b:22:02: e6:67:13:5d:88:cb:61:e1:91:cf:9a:cd:da:17:b2:61:1b:3b: bc:7e:4c:6e:c6:f6:9f:c4:0f:17:6c:d3:e3:6c:c0:76:d2:40: d7:37:7d:16:48:09:b9:47:b4:d5:e0:2e:ff:be:9d:20:9d:97: 63:30:a1:e0:6f:24:1b:cc:55:85:dd:64:5a:09:0a:10:15:1c: 49:e4:9f:c3:16:81:47:b9:16:89:e2:47:09:eb:9f:82:4f:b0: b1:74:f5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwNzAyMTYxNDA2WhcNMjUwNzA5MTYxNDA2WjAYMRYwFAYD VQQDEw02ODY1NWFjZS00ODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QFpyW+IThg5TAp3/82njnf4lz5NYnM2HKNGuSkpsS/MZQStr+sCfDWtRzoY 1QZufTAKF+Dv7kdGhaSXrwD03APE25y0flvAtYiKEw79sJQOkgw2qKrbqWwL9GDi KidkFYNgDCZFp0GrarA8rzp3Y4SaNMY36ylOtdNSIftCeJqS52BkAlvcpOJbLqEA TcMrg7vwy/NyfxIKfLeXvCVQkWWfN39mmrcV4977chSkam5hpLr/u5GidLZTFyLg YONxfbg2+gES0C+2PAZCGxQz//rBAwts2KBB9U9TdRs4ZUJC2y7/cD7kJVSHizfl OJtae11q5wCbGoiwGEB3RkZe6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL/YTlf j7Fz0w7ZnBH0o0n28pCoMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzBwfp5Ws0JdgJu7e0Aa4GaeMF1yvZXj0L39pJj0fmi+RN/fTtG+yw 8jg61eOuMvnoy8VclLDmKyGvnaFk+ttHU/89aziFFNpKFHvYpMFtxq6KGRiY5Bps TirN2LSn1C2lXiFDssrdhg+N4J4DPC9S3ddLIC7gEipfSen34GF5nVQxOXkPlIL+ 7LAdXO9PR/kNL4sbGBA5/c+3lnHGLaILIgLmZxNdiMth4ZHPms3aF7JhGzu8fkxu xvafxA8XbNPjbMB20kDXN30WSAm5R7TV4C7/vp0gnZdjMKHgbyQbzFWF3WRaCQoQ FRxJ5J/DFoFHuRaJ4kcJ65+CT7CxdPV/ -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:34 2025 by rpki-client