$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: VDRarVjjibgyxtX8xAbtf8JIFeal70V+rLk+yyLs/2Q= Subject key identifier: BE:CC:74:C6:18:FF:B2:5C:9F:BF:F5:44:B4:76:5C:72:5C:4F:22:13 Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 010A Signing time: Tue 01 Jul 2025 05:34:43 +0000 Manifest this update: Tue 01 Jul 2025 05:34:42 +0000 Manifest next update: Tue 08 Jul 2025 05:34:42 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: D1s0KfsAdSY+6U9ryX8Ud1pDRwXDcRNfzCLUGYMXaAY=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Jul 1 05:34:42 2025 GMT Not After : Jul 8 05:34:42 2025 GMT Subject: CN=68637373-1243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:3e:e0:ec:3d:75:58:95:04:47:3d:07:f7: 8f:88:2b:a3:97:b6:fc:07:e6:36:6a:5a:f6:1e:06: db:d8:dd:40:df:4b:91:a7:40:0d:a1:1a:51:91:6d: b5:99:1b:4d:d0:00:b5:91:41:c9:75:73:e5:9d:d4: b7:9f:68:8e:73:84:5d:b9:e1:9f:7c:be:05:3b:46: 22:c1:0e:be:7b:87:16:2c:d8:71:72:5f:a9:48:f3: 65:d9:ec:c8:68:27:25:02:9b:4b:0e:b3:80:e4:db: 52:a5:96:a6:44:2c:34:1d:c3:78:aa:3e:5e:29:a1: 9f:e0:a6:ab:1e:2f:25:ea:61:35:bc:6b:82:f7:a3: b5:f4:14:b5:32:21:7e:5b:2b:53:7b:3e:e0:18:a1: 66:c9:0f:16:0f:f8:67:1d:dc:f9:ad:ee:6d:79:04: f7:2e:9f:db:f6:88:b6:6c:31:9c:34:a3:99:f4:c5: c6:f1:f8:f4:92:d7:26:82:06:7c:08:b8:50:dd:31: 06:63:a4:58:e8:30:0f:34:5f:85:80:f2:61:6c:ef: 1d:ac:6c:9a:0e:a1:9e:cd:20:c0:c4:ac:a3:66:93: 17:d7:40:b3:9a:d6:98:8f:ee:b6:41:1c:5a:1b:01: d4:09:a9:28:a5:30:c9:5e:a9:1d:56:a3:ed:fe:43: 49:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CC:74:C6:18:FF:B2:5C:9F:BF:F5:44:B4:76:5C:72:5C:4F:22:13 X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a0:66:11:23:36:7d:46:aa:81:d1:e6:8d:81:52:b1:ed:66: b8:f2:ea:23:e7:5c:ff:b4:20:dd:6e:fc:9a:85:f4:8e:f8:57: 93:5b:db:62:89:56:ab:d3:0e:cb:08:44:b3:8f:db:cd:3a:ba: 21:b6:c9:a3:d0:43:cf:d6:01:a9:bc:de:7f:a2:c2:d6:ad:80: 9f:79:25:b2:e6:ef:ad:fc:38:cd:56:d2:b8:93:f5:19:88:58: 81:e2:9b:b0:52:87:52:59:55:d8:6e:00:f2:b4:81:59:21:4b: 4c:6d:e0:15:8b:df:8b:29:fe:b8:2e:62:42:52:ae:db:a7:6f: ff:fb:c8:59:43:48:60:c7:77:b9:05:f6:1a:f1:63:17:ae:58: 76:2d:39:b5:13:7a:75:02:41:64:65:bf:1a:79:88:c1:ef:9e: 16:3f:6a:cf:f0:92:c5:d0:7b:e8:dd:8e:95:a2:0a:32:b2:84: e3:b4:76:cd:cc:3c:61:c1:97:9d:6f:8a:41:a1:f3:b3:63:a9: 32:8b:c6:64:ea:9e:56:58:8f:3b:11:35:bc:7e:cc:5e:f2:7a: ce:52:22:bd:20:4a:eb:31:91:0c:54:29:14:26:e6:20:2b:01: 2c:7a:0b:d8:3c:4d:c7:00:09:64:91:c8:0e:70:2d:13:9c:f5: 75:82:03:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUwNzAxMDUzNDQyWhcNMjUwNzA4MDUzNDQyWjAYMRYwFAYD VQQDEw02ODYzNzM3My0xMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl0+4Ow9dViVBEc9B/ePiCujl7b8B+Y2alr2Hgbb2N1A30uRp0ANoRpRkW21 mRtN0AC1kUHJdXPlndS3n2iOc4RdueGffL4FO0YiwQ6+e4cWLNhxcl+pSPNl2ezI aCclAptLDrOA5NtSpZamRCw0HcN4qj5eKaGf4KarHi8l6mE1vGuC96O19BS1MiF+ WytTez7gGKFmyQ8WD/hnHdz5re5teQT3Lp/b9oi2bDGcNKOZ9MXG8fj0ktcmggZ8 CLhQ3TEGY6RY6DAPNF+FgPJhbO8drGyaDqGezSDAxKyjZpMX10CzmtaYj+62QRxa GwHUCakopTDJXqkdVqPt/kNJIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7MdMYY /7Jcn7/1RLR2XHJcTyITMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsoGYRIzZ9RqqB0eaNgVKx7Wa48uoj51z/tCDdbvyahfSO+FeTW9ti iVar0w7LCESzj9vNOrohtsmj0EPP1gGpvN5/osLWrYCfeSWy5u+t/DjNVtK4k/UZ iFiB4puwUodSWVXYbgDytIFZIUtMbeAVi9+LKf64LmJCUq7bp2//+8hZQ0hgx3e5 BfYa8WMXrlh2LTm1E3p1AkFkZb8aeYjB754WP2rP8JLF0Hvo3Y6VogoysoTjtHbN zDxhwZedb4pBofOzY6kyi8Zk6p5WWI87ETW8fsxe8nrOUiK9IErrMZEMVCkUJuYg KwEsegvYPE3HAAlkkcgOcC0TnPV1ggOh -----END CERTIFICATE-----Generated at Tue Jul 1 13:21:05 2025 by rpki-client