$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: V3Uq0xSKS9inQ5F4Uh5e2jZQG3m6K/Uc9bqPjiUumbs= Subject key identifier: D1:CF:18:25:5C:8E:05:15:1D:6E:8B:F3:FA:DE:55:B8:33:39:C3:AC Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 0285 Signing time: Thu 03 Jul 2025 02:03:13 +0000 Manifest this update: Thu 03 Jul 2025 02:03:12 +0000 Manifest next update: Thu 10 Jul 2025 02:03:12 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: i8GAaW1v+H8/bG5vkqlbh6w457Ld2JmL/xV1D7tqkXU=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: mDNZv224II9doQ1iNCGuKTRk+eFwgECKzo+AWal5Fq0=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: AgK/4KQKRm1k0cfVPX0Zdc5eL/A0KNuVFO4G4wksfbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Jul 3 02:03:12 2025 GMT Not After : Jul 10 02:03:12 2025 GMT Subject: CN=6865e4e1-2fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:fa:36:ee:52:a0:bc:3b:8f:46:04:fb:30: 2a:fa:bc:f6:39:c4:32:2f:61:51:f4:cb:5d:89:35: 56:ed:92:15:97:7d:b3:46:88:5b:76:1e:07:f1:e9: b0:46:c2:6a:9f:8d:6d:d2:50:2c:64:68:88:67:a5: bf:8e:fa:7e:52:3b:7f:6c:cd:32:33:7f:30:67:20: 7a:44:20:07:e8:77:e8:6a:52:5d:0c:49:15:e4:67: 52:01:0f:6e:5c:22:1f:8b:8e:96:9d:4f:16:e1:ae: 68:57:99:8e:97:be:f0:10:c1:26:4c:f3:7e:b6:2f: a8:cf:e3:5e:c9:db:9c:51:2b:d4:8c:91:3b:e3:9a: a9:7b:36:6c:72:10:c3:c3:5e:9f:16:fc:3e:76:ae: 6e:8d:18:14:02:4c:93:a9:be:62:87:44:75:a5:47: 93:ff:e3:03:f1:98:1e:bf:63:bb:c3:69:f8:18:fa: a1:e9:ab:d3:5b:68:d8:47:5f:00:1c:f9:b2:73:30: 2f:59:0e:ab:50:40:49:b5:e9:df:8a:ed:cd:ff:c3: 70:c8:bf:50:6f:41:83:5b:a3:11:1b:77:83:c9:bb: 30:91:f1:37:7c:f1:c6:e5:47:a9:62:ee:5f:06:37: 66:ee:32:da:96:86:13:a6:1b:d3:a7:90:82:7e:38: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:18:25:5C:8E:05:15:1D:6E:8B:F3:FA:DE:55:B8:33:39:C3:AC X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d6:1d:d1:4f:a4:be:bd:92:d4:d7:76:82:3f:c0:3b:62:41: b4:51:ab:41:f8:b7:dc:34:8d:a2:13:ba:07:d3:f3:2c:f0:f4: c0:02:9f:4c:96:ec:9e:d2:c2:65:0a:66:e5:1a:69:28:f9:ca: 29:2f:11:8d:b7:1a:88:d9:e9:56:f4:1d:86:33:8d:3a:4e:fc: 3a:e4:fd:c6:f9:32:68:ca:07:9d:59:e7:61:0f:e8:16:68:a3: c0:b7:7d:63:1a:7f:d5:08:39:11:a4:37:36:4b:22:34:30:01: 5e:52:bc:f2:4b:28:4b:93:bc:77:13:a1:84:b5:97:70:3e:86: 4d:df:3c:67:a1:f4:8b:21:52:f0:46:81:97:bd:15:25:7b:56: 2c:7f:67:e9:a0:05:48:f6:aa:86:ad:d9:6b:ca:6b:a3:6f:9b: 3f:02:03:c7:52:08:73:77:c5:e7:c8:19:51:de:ba:02:1e:e9: 72:e9:00:14:a0:15:38:53:2f:c0:a2:68:64:86:75:fb:a6:f6: eb:c5:15:3d:2f:e0:09:cd:1e:e1:f5:d6:b5:f6:5d:39:96:d3: fb:ba:74:d1:62:ee:7f:87:7b:10:18:7b:5a:4d:c9:36:67:e1: de:0e:b1:69:72:97:27:0d:0a:0b:fa:92:14:33:fe:f7:51:52: e1:f9:a2:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwNzAzMDIwMzEyWhcNMjUwNzEwMDIwMzEyWjAYMRYwFAYD VQQDEw02ODY1ZTRlMS0yZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI76Nu5SoLw7j0YE+zAq+rz2OcQyL2FR9MtdiTVW7ZIVl32zRohbdh4H8emw RsJqn41t0lAsZGiIZ6W/jvp+Ujt/bM0yM38wZyB6RCAH6HfoalJdDEkV5GdSAQ9u XCIfi46WnU8W4a5oV5mOl77wEMEmTPN+ti+oz+NeyducUSvUjJE745qpezZschDD w16fFvw+dq5ujRgUAkyTqb5ih0R1pUeT/+MD8Zgev2O7w2n4GPqh6avTW2jYR18A HPmyczAvWQ6rUEBJtenfiu3N/8NwyL9Qb0GDW6MRG3eDybswkfE3fPHG5UepYu5f Bjdm7jLaloYTphvTp5CCfjje3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHPGCVc jgUVHW6L8/reVbgzOcOsMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB91h3RT6S+vZLU13aCP8A7YkG0UatB+LfcNI2iE7oH0/Ms8PTAAp9M luye0sJlCmblGmko+copLxGNtxqI2elW9B2GM406Tvw65P3G+TJoygedWedhD+gW aKPAt31jGn/VCDkRpDc2SyI0MAFeUrzySyhLk7x3E6GEtZdwPoZN3zxnofSLIVLw RoGXvRUle1Ysf2fpoAVI9qqGrdlrymujb5s/AgPHUghzd8XnyBlR3roCHuly6QAU oBU4Uy/AomhkhnX7pvbrxRU9L+AJzR7h9da19l05ltP7unTRYu5/h3sQGHtaTck2 Z+HeDrFpcpcnDQoL+pIUM/73UVLh+aI6 -----END CERTIFICATE-----Generated at Thu Jul 3 05:21:09 2025 by rpki-client