$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft File: HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json) Hash identifier: W/Uk8ouOeN0giwEov/+YrHk5R07kWZ5TDDwnAo7ugDE= Subject key identifier: 13:B0:B2:B7:19:96:D8:F1:4C:23:DA:15:CB:4D:0B:69:D2:B7:0C:5C Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0 Certificate issuer: /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft Manifest number: 03BB Signing time: Sat 05 Jul 2025 01:11:27 +0000 Manifest this update: Sat 05 Jul 2025 01:11:27 +0000 Manifest next update: Sat 12 Jul 2025 01:11:27 +0000 Files and hashes: 1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: 3dw8dJMdTUmMqjSUczh8/c9l7XPhd8HS3f5wR8pFRi8=) 2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: H2GtJ0iPg0F8hSUg65wTV+ujzqji+9qmbwmD4ETHfZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0 Validity Not Before: Jul 5 01:11:27 2025 GMT Not After : Jul 12 01:11:27 2025 GMT Subject: CN=68687bbf-9c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:73:bd:97:d7:7b:d8:07:5d:be:61:f8:6a: 5d:43:a2:20:c2:1d:4c:d7:9e:ee:42:8f:8c:af:15: 85:fd:46:13:86:cd:fe:bd:91:ce:cf:0a:84:60:8b: ae:58:03:ac:92:1f:bf:e5:4f:5f:8a:f8:46:b5:44: dc:b9:2d:dd:85:f2:af:0b:84:88:b0:0c:f3:c3:64: 00:3c:49:22:f9:85:33:9d:9f:d0:57:3b:c8:eb:d9: 8f:f4:69:5e:da:91:aa:a9:40:c9:95:e5:06:ba:e0: 00:e9:71:f4:ee:fe:21:da:e6:3e:dc:48:d8:d8:ce: 54:d2:0c:b8:0f:06:ad:f8:31:a7:ad:dc:15:e9:ae: 88:a1:97:c6:bc:b5:dc:a9:ad:f0:c5:c1:8e:b4:42: 38:e3:d4:68:9b:4a:65:86:0f:78:61:fb:fb:f6:13: 04:ea:70:89:d7:18:bb:0d:d1:04:d0:4e:62:f2:04: 09:78:5e:27:4f:13:f6:20:cc:05:c3:5e:b7:d3:ae: 8e:47:4a:00:e5:bc:74:10:70:19:f7:99:8d:a3:61: 33:5f:ce:6a:8e:96:a9:99:6e:92:03:12:4c:f0:9e: d2:3a:e4:4c:cb:83:e6:7a:2d:1d:f6:f9:f7:87:6d: d4:b4:ba:82:a3:68:ab:0b:5f:cf:ff:f5:c1:a4:63: 91:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:B2:B7:19:96:D8:F1:4C:23:DA:15:CB:4D:0B:69:D2:B7:0C:5C X509v3 Authority Key Identifier: keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:3b:fc:68:a0:b1:a2:07:82:7e:42:f8:c1:48:7b:c1:a0: 18:a3:08:16:7d:47:b7:f8:64:c7:38:c6:76:e0:ab:4c:9c:d5: 24:ec:07:a8:82:10:87:23:da:ba:35:97:1a:44:d7:a4:eb:79: cc:10:e1:fb:5f:c7:92:bb:2f:a5:88:06:40:5d:84:9a:fe:96: c8:34:be:fd:71:0a:9e:31:ce:56:a0:53:71:07:aa:90:f1:84: 0c:1e:18:67:5e:01:da:82:3b:e2:60:2e:2b:f5:bf:07:c5:bc: d5:f8:5d:6b:c6:4f:99:d6:7b:46:ab:c0:aa:25:df:ea:c9:b3: 91:b9:d2:59:12:8b:7a:33:90:47:8b:a0:a0:e8:e0:4e:f7:a2: 4a:97:32:9f:ae:d3:42:a0:a8:fe:5e:42:10:a3:fc:69:5f:12: 68:63:4f:88:c5:a8:0d:8b:40:d8:2f:0d:99:34:9b:8a:d6:1a: 36:59:c5:2c:9b:3a:b1:7e:bd:69:c3:f1:b1:99:4d:87:c6:fc: 3b:89:6b:c3:13:7f:59:76:14:1d:9a:2d:f3:0d:83:68:e4:42: 8a:fe:b3:94:0d:8d:18:fc:58:36:76:fc:df:32:01:b0:cd:12: 7b:61:4b:af:95:75:cb:1c:31:40:4f:71:df:f6:ac:a2:d7:5d: 1f:4b:f5:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlEMUYxMTAvBgNVBAUTKDFDMEVCREMyODFEMDJGOURBMjRFQzExNzRCQTlDRjE4 NDU5QjkzRTAwHhcNMjUwNzA1MDExMTI3WhcNMjUwNzEyMDExMTI3WjAYMRYwFAYD VQQDEw02ODY4N2JiZi05YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOpzvZfXe9gHXb5h+GpdQ6Igwh1M157uQo+MrxWF/UYThs3+vZHOzwqEYIuu WAOskh+/5U9fivhGtUTcuS3dhfKvC4SIsAzzw2QAPEki+YUznZ/QVzvI69mP9Gle 2pGqqUDJleUGuuAA6XH07v4h2uY+3EjY2M5U0gy4Dwat+DGnrdwV6a6IoZfGvLXc qa3wxcGOtEI449Rom0plhg94Yfv79hME6nCJ1xi7DdEE0E5i8gQJeF4nTxP2IMwF w163066OR0oA5bx0EHAZ95mNo2EzX85qjpapmW6SAxJM8J7SOuRMy4Pmei0d9vn3 h23UtLqCo2irC1/P//XBpGORuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOwsrcZ ltjxTCPaFctNC2nStwxcMB8GA1UdIwQYMBaAFBwOvcKB0C+dok7BF0upzxhFm5Pg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUQxRi9EOTgyQ0I1RTk1 RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1MmlUc0VYUzZuUEdFV2Jr LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBNjl3b0hRTDUyaVRzRVhTNm5QR0VXYmstQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUQxRi9EOTgyQ0I1RTk1RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1 MmlUc0VYUzZuUEdFV2JrLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAowDv8aKCxogeCfkL4wUh7waAYowgWfUe3+GTHOMZ24KtMnNUk7Aeo ghCHI9q6NZcaRNek63nMEOH7X8eSuy+liAZAXYSa/pbINL79cQqeMc5WoFNxB6qQ 8YQMHhhnXgHagjviYC4r9b8HxbzV+F1rxk+Z1ntGq8CqJd/qybORudJZEot6M5BH i6Cg6OBO96JKlzKfrtNCoKj+XkIQo/xpXxJoY0+IxagNi0DYLw2ZNJuK1ho2WcUs mzqxfr1pw/GxmU2Hxvw7iWvDE39ZdhQdmi3zDYNo5EKK/rOUDY0Y/Fg2dvzfMgGw zRJ7YUuvlXXLHDFAT3Hf9qyi110fS/W4 -----END CERTIFICATE-----Generated at Sun Jul 6 00:03:21 2025 by rpki-client