$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: PefBsVJ1a6zxVeY89osKEww5s9apunLJHzoRYVjtPZs= Subject key identifier: 01:6F:43:1A:DB:19:6B:0A:97:25:A5:F3:DC:D7:87:E9:89:23:3B:CA Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 037D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 036D Signing time: Tue 01 Jul 2025 01:32:31 +0000 Manifest this update: Tue 01 Jul 2025 01:32:30 +0000 Manifest next update: Tue 08 Jul 2025 01:32:30 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: tvlTAPJyuuE7qR4TJ6LJlhuHz15Ar0ieSP6qXqcsz4s=) 2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=) 3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 893 (0x37d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Jul 1 01:32:30 2025 GMT Not After : Jul 8 01:32:30 2025 GMT Subject: CN=68633aae-3161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:4f:bc:97:ad:72:ba:76:ec:fd:a6:51:99: 11:4a:f7:2b:62:17:5a:31:8d:f8:30:76:d2:fd:a7: 80:02:56:3c:2e:ed:88:23:8e:69:8f:58:40:eb:b2: a8:78:33:26:0d:52:36:35:12:fb:d1:10:89:23:4e: c3:09:19:dc:a1:c5:29:19:b5:4f:70:f1:7d:78:c0: 0f:b9:cd:4f:72:2e:23:c8:d5:00:c0:6c:12:41:3e: 57:a2:8f:26:91:94:d7:ed:ee:b7:84:57:38:05:9d: ae:c6:0f:6c:e6:8f:f8:95:36:52:9f:77:68:30:10: 0d:13:de:5b:2e:89:85:03:24:db:5e:97:c1:00:b1: 8e:91:1e:84:fa:70:0c:3a:64:84:5d:6b:8a:6f:fd: 95:19:e0:a8:7f:03:19:2d:79:2c:71:8e:ba:f3:cf: 9d:7a:35:de:6a:01:0f:1f:d9:4f:f0:5b:76:37:8e: 9a:08:a0:5b:17:b2:98:ac:49:1f:7d:af:76:a8:8f: 70:49:4f:30:3f:45:0e:49:de:31:78:73:4e:56:93: 07:f3:41:ce:e6:3b:84:f6:7d:3b:d4:47:1b:68:55: 34:8a:1d:1f:df:5a:97:d9:c8:0c:b5:09:b3:8a:8e: 90:83:2d:61:e0:52:64:3b:7a:ed:9d:64:4f:11:cc: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6F:43:1A:DB:19:6B:0A:97:25:A5:F3:DC:D7:87:E9:89:23:3B:CA X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:58:b4:79:6a:f6:87:5d:09:83:ef:da:db:d5:34:d4:42:39: 37:d1:66:d4:8c:0e:b0:63:df:b7:dc:85:d6:6c:8f:70:71:d8: bb:49:ed:80:0d:92:be:ab:65:26:0e:2f:6f:56:b9:3b:0d:5d: bb:e0:44:f3:8d:53:2b:ea:8f:61:7e:4e:bb:20:05:f4:80:0e: 23:be:16:22:40:27:c2:f2:94:45:1c:ce:b3:bb:3b:9e:dc:f9: 66:66:5e:64:87:55:c7:cd:96:49:d3:a8:33:8c:f0:82:08:5c: 5f:29:3e:f6:15:f1:39:ef:28:05:96:15:1e:03:5a:c9:96:8a: 0b:70:a1:ec:db:be:3d:5f:0e:3c:06:58:e2:57:20:b2:32:a8: dd:52:9a:49:c0:39:da:af:ca:a9:ae:c9:30:5a:6c:fc:2a:5f: 9e:15:e4:ba:b1:ab:1e:70:aa:21:9f:a5:a6:40:26:fa:93:63: 86:13:0a:5d:90:c7:91:6f:ae:d1:e7:55:f0:07:11:ae:38:c0: 5e:ea:5b:65:2e:aa:6a:77:e7:35:67:9d:51:14:e7:6c:f7:3f: 0f:c9:ed:66:16:da:9a:69:5d:72:03:7c:bc:aa:0a:2b:d9:b5: 35:4e:7b:66:9e:51:95:ad:f4:12:36:2a:96:f6:82:c1:93:ef: 4a:62:30:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjUwNzAxMDEzMjMwWhcNMjUwNzA4MDEzMjMwWjAYMRYwFAYD VQQDEw02ODYzM2FhZS0zMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zhPvJetcrp27P2mUZkRSvcrYhdaMY34MHbS/aeAAlY8Lu2II45pj1hA67Ko eDMmDVI2NRL70RCJI07DCRncocUpGbVPcPF9eMAPuc1Pci4jyNUAwGwSQT5Xoo8m kZTX7e63hFc4BZ2uxg9s5o/4lTZSn3doMBANE95bLomFAyTbXpfBALGOkR6E+nAM OmSEXWuKb/2VGeCofwMZLXkscY6688+dejXeagEPH9lP8Ft2N46aCKBbF7KYrEkf fa92qI9wSU8wP0UOSd4xeHNOVpMH80HO5juE9n071EcbaFU0ih0f31qX2cgMtQmz io6Qgy1h4FJkO3rtnWRPEcwnqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFvQxrb GWsKlyWl89zXh+mJIzvKMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8WLR5avaHXQmD79rb1TTUQjk30WbUjA6wY9+33IXWbI9wcdi7Se2A DZK+q2UmDi9vVrk7DV274ETzjVMr6o9hfk67IAX0gA4jvhYiQCfC8pRFHM6zuzue 3PlmZl5kh1XHzZZJ06gzjPCCCFxfKT72FfE57ygFlhUeA1rJlooLcKHs2749Xw48 BljiVyCyMqjdUppJwDnar8qprskwWmz8Kl+eFeS6sasecKohn6WmQCb6k2OGEwpd kMeRb67R51XwBxGuOMBe6ltlLqpqd+c1Z51RFOds9z8Pye1mFtqaaV1yA3y8qgor 2bU1TntmnlGVrfQSNiqW9oLBk+9KYjBX -----END CERTIFICATE-----Generated at Wed Jul 2 20:26:06 2025 by rpki-client