$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: ygfot2+cw4rGq0GIu3Gx7hwWr2B00agBVJTLRnhg3XI= Subject key identifier: 4F:15:D1:4F:8C:E4:27:03:C7:65:75:55:E3:17:61:75:A0:CF:2D:0A Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 28C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 2859 Signing time: Wed 02 Jul 2025 15:43:56 +0000 Manifest this update: Wed 02 Jul 2025 15:43:56 +0000 Manifest next update: Wed 09 Jul 2025 15:43:56 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: Kg1UcRY3oxwXKEVnaKp8hwYXJ4/mJWxoeoweUuDQTOI=) 2: 00E20E8023FB11F081F2CE1CC4F9AE02.roa (hash: CYhZwNbkJMEmQW6bX76pmhv6w7NiVezq9CPjRaMOupo=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10438 (0x28c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Jul 2 15:43:56 2025 GMT Not After : Jul 9 15:43:56 2025 GMT Subject: CN=686553bc-4772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:3c:3e:99:3e:18:f1:fd:9e:a8:5f:06:fc: 76:d6:2b:2e:5c:55:87:82:ae:5f:1f:ad:12:ce:6b: 1c:ac:56:6b:07:2d:d9:6f:6c:58:e2:ba:30:cd:cd: f0:ba:06:e9:b3:bc:ac:c9:af:1f:3d:bf:7d:ec:17: a5:ff:50:c4:f8:08:d9:36:73:c2:c6:fe:fc:65:ec: 74:21:b5:1b:27:94:dd:dc:63:15:5d:0f:26:e1:7c: 1e:36:35:49:b4:5f:0c:7a:46:0f:e4:dc:5e:1b:0c: 65:ed:5d:df:9d:d2:3d:2e:4d:65:6e:23:92:bb:a0: 33:b5:0d:33:3e:61:2f:ba:c5:ec:11:6f:96:8f:b5: 3b:6e:ad:a3:16:75:54:c9:f2:e8:15:52:0b:9a:ce: af:cf:56:e0:d3:31:95:dd:f7:c5:96:df:9e:32:d1: ee:59:dd:b4:3d:44:11:47:97:d3:e5:8a:57:42:2c: c7:78:1a:18:65:ed:86:83:c7:17:1d:43:1f:96:b9: 2c:be:1a:1c:dc:78:dc:95:34:97:54:bc:1d:0f:4b: e3:27:b7:ce:af:8d:a2:57:71:cf:3c:14:b0:7c:45: d5:5d:99:d6:bd:50:56:4a:9c:1f:1f:42:cd:e1:ed: ee:6a:6b:0c:2f:98:a2:5d:15:6a:d4:55:20:af:fc: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:D1:4F:8C:E4:27:03:C7:65:75:55:E3:17:61:75:A0:CF:2D:0A X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ce:fe:0f:e6:78:73:1d:ac:3e:ad:46:87:bb:bc:e4:92:75: 10:53:d8:48:4d:f5:a1:33:76:62:9c:e9:5e:43:43:7b:75:25: a9:2d:f3:30:c9:29:c0:d8:8c:32:18:a5:c1:9e:39:4c:ad:8f: 44:b0:74:8f:56:73:61:af:52:ca:f2:41:cf:72:79:02:55:5c: ce:9e:e7:6f:da:af:1c:b4:51:98:ce:47:53:7d:d3:05:81:64: 97:64:9f:e4:9d:9a:94:cc:7c:d0:db:e7:93:61:e1:4c:34:0e: 62:91:95:26:21:3f:b6:b6:e0:ba:be:5f:68:91:86:4f:10:0f: 8e:45:ed:8e:d3:37:56:84:40:d8:2e:be:30:36:a7:2a:7d:2c: 9c:d3:2a:ca:19:71:d2:05:bc:e2:f0:fc:0e:e4:1f:2d:5e:e2: e7:34:a1:f4:77:9c:2f:91:51:4d:19:0b:1d:ec:ac:d1:26:1b: b5:a2:d2:ee:d9:c9:9b:a2:90:8d:1f:ac:49:06:91:23:50:ff: 5c:b5:85:ca:b8:7f:3c:47:f3:c6:71:6d:ec:21:5f:85:25:af: 72:1d:4b:cc:06:48:25:53:88:2e:49:08:41:82:72:be:73:92: 1b:b7:dc:19:8e:85:82:c6:80:27:2d:08:dc:30:a8:33:77:1c: 02:2d:09:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjUwNzAyMTU0MzU2WhcNMjUwNzA5MTU0MzU2WjAYMRYwFAYD VQQDEw02ODY1NTNiYy00NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttU8Ppk+GPH9nqhfBvx21isuXFWHgq5fH60SzmscrFZrBy3Zb2xY4rowzc3w ugbps7ysya8fPb997Bel/1DE+AjZNnPCxv78Zex0IbUbJ5Td3GMVXQ8m4XweNjVJ tF8MekYP5NxeGwxl7V3fndI9Lk1lbiOSu6AztQ0zPmEvusXsEW+Wj7U7bq2jFnVU yfLoFVILms6vz1bg0zGV3ffFlt+eMtHuWd20PUQRR5fT5YpXQizHeBoYZe2Gg8cX HUMflrksvhoc3HjclTSXVLwdD0vjJ7fOr42iV3HPPBSwfEXVXZnWvVBWSpwfH0LN 4e3uamsML5iiXRVq1FUgr/wmbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8V0U+M 5CcDx2V1VeMXYXWgzy0KMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApzv4P5nhzHaw+rUaHu7zkknUQU9hITfWhM3ZinOleQ0N7dSWpLfMw ySnA2IwyGKXBnjlMrY9EsHSPVnNhr1LK8kHPcnkCVVzOnudv2q8ctFGYzkdTfdMF gWSXZJ/knZqUzHzQ2+eTYeFMNA5ikZUmIT+2tuC6vl9okYZPEA+ORe2O0zdWhEDY Lr4wNqcqfSyc0yrKGXHSBbzi8PwO5B8tXuLnNKH0d5wvkVFNGQsd7KzRJhu1otLu 2cmbopCNH6xJBpEjUP9ctYXKuH88R/PGcW3sIV+FJa9yHUvMBkglU4guSQhBgnK+ c5Ibt9wZjoWCxoAnLQjcMKgzdxwCLQmT -----END CERTIFICATE-----Generated at Thu Jul 3 06:39:18 2025 by rpki-client