$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: HM4vo9sSPN4BZaiYD7b+McuYJTDt4g4Qnc9OfGpmpxY= Subject key identifier: 0F:CA:41:F4:4A:C1:56:B5:71:CC:26:2A:65:F1:00:E5:87:36:4F:A8 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0BA8 Signing time: Mon 30 Jun 2025 19:07:11 +0000 Manifest this update: Mon 30 Jun 2025 19:07:10 +0000 Manifest next update: Mon 07 Jul 2025 19:07:10 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: mFE0rOTToDmPmG0tvLn79JKhKR04Nz9yNN2vtRF/6u4=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: dTqPYAZ0fYSqCYvtzmzk6vV87y7uZ4+mAQSsb1JNqeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Jun 30 19:07:10 2025 GMT Not After : Jul 7 19:07:10 2025 GMT Subject: CN=6862e05f-694f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:73:91:21:4f:f2:cf:c8:86:3b:20:ab:cb: 2a:48:fb:62:9a:7f:a2:c2:d0:7a:04:38:8c:1c:8f: 8f:06:17:6b:10:ae:2a:d7:8f:31:f8:11:71:c8:d1: 85:62:1c:f1:38:f9:86:be:4f:17:c7:0b:13:82:b3: a9:5e:7c:04:73:09:b1:b1:6f:ae:ca:14:d2:a1:84: 8c:a1:40:70:e5:39:18:62:0c:ca:63:1f:8c:5d:1d: b9:e4:27:40:14:96:73:4a:34:c8:8e:70:1a:59:72: b1:8b:77:f1:90:4f:5b:4e:12:51:54:af:4d:66:4b: db:eb:cf:20:6b:f6:06:66:01:39:46:a5:a9:bc:eb: 9f:9c:1a:62:a3:7d:51:ef:ea:77:95:9f:32:09:c1: 7f:2c:09:1c:f1:c8:3c:7d:ab:56:f6:3b:83:c4:fe: d3:1d:5a:b0:15:bd:a1:96:b7:d2:73:2d:8e:41:87: b5:56:08:72:17:e5:73:34:e7:9e:b5:65:29:69:ce: a2:23:0c:ee:69:c7:32:d5:f5:3a:e4:f0:d3:b2:4e: c6:28:41:08:03:f5:d5:dc:7e:00:6c:b8:0f:7a:f1: 19:1d:8d:b4:21:d2:96:1a:92:a8:f4:e9:09:f9:52: 69:2e:4f:ef:e9:a3:0c:80:22:20:d0:97:51:08:f9: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:41:F4:4A:C1:56:B5:71:CC:26:2A:65:F1:00:E5:87:36:4F:A8 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:67:5d:6f:79:79:af:43:f7:e4:7b:fe:f9:13:10:a3:2b:a9: 43:b1:cb:ee:e2:d4:dc:8c:63:db:c1:64:50:2c:6b:f2:5c:53: ab:23:49:09:c0:d1:60:46:34:8f:82:1f:00:d7:f7:55:28:fd: 3d:73:3d:e2:be:03:c0:a1:b5:86:69:ca:11:7e:a4:fe:3a:01: 5b:2c:fe:43:40:83:41:f7:5b:db:05:28:fe:a3:74:be:3d:4a: f2:22:0c:4d:79:49:77:a2:72:fe:9d:84:cf:4e:fe:46:6b:ba: 58:ad:9b:e9:72:5b:ff:24:a1:4d:f6:67:c8:6a:ed:81:93:94: 01:bd:04:17:ea:41:0e:51:fb:d6:1b:95:5b:c0:a2:a6:b6:96: 86:62:06:05:35:1a:8c:26:e2:b6:56:0a:1a:85:59:9b:b9:96: bc:9c:af:e3:94:dd:c8:c4:d1:0b:fb:14:4b:54:b8:28:07:70: 8c:a1:32:ec:d8:39:cf:eb:9c:26:83:36:bb:d0:23:99:a2:b9: b7:9b:4a:cc:1f:86:0e:6d:67:6e:a1:dd:be:14:0d:ea:90:e0: e6:ae:e9:88:f6:21:1d:3b:93:a0:d3:b4:8a:20:8e:3b:87:a6: 98:9a:72:6a:dc:6e:84:36:4a:7f:ef:e0:c3:17:85:87:eb:77: df:6b:06:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjUwNjMwMTkwNzEwWhcNMjUwNzA3MTkwNzEwWjAYMRYwFAYD VQQDEw02ODYyZTA1Zi02OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEFzkSFP8s/Ihjsgq8sqSPtimn+iwtB6BDiMHI+PBhdrEK4q148x+BFxyNGF YhzxOPmGvk8XxwsTgrOpXnwEcwmxsW+uyhTSoYSMoUBw5TkYYgzKYx+MXR255CdA FJZzSjTIjnAaWXKxi3fxkE9bThJRVK9NZkvb688ga/YGZgE5RqWpvOufnBpio31R 7+p3lZ8yCcF/LAkc8cg8fatW9juDxP7THVqwFb2hlrfScy2OQYe1VghyF+VzNOee tWUpac6iIwzuaccy1fU65PDTsk7GKEEIA/XV3H4AbLgPevEZHY20IdKWGpKo9OkJ +VJpLk/v6aMMgCIg0JdRCPnesQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/KQfRK wVa1ccwmKmXxAOWHNk+oMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiZ11veXmvQ/fke/75ExCjK6lDscvu4tTcjGPbwWRQLGvyXFOrI0kJ wNFgRjSPgh8A1/dVKP09cz3ivgPAobWGacoRfqT+OgFbLP5DQINB91vbBSj+o3S+ PUryIgxNeUl3onL+nYTPTv5Ga7pYrZvpclv/JKFN9mfIau2Bk5QBvQQX6kEOUfvW G5VbwKKmtpaGYgYFNRqMJuK2VgoahVmbuZa8nK/jlN3IxNEL+xRLVLgoB3CMoTLs 2DnP65wmgza70COZorm3m0rMH4YObWduod2+FA3qkODmrumI9iEdO5Og07SKII47 h6aYmnJq3G6ENkp/7+DDF4WH63ffawZS -----END CERTIFICATE-----Generated at Mon Jun 30 23:12:57 2025 by rpki-client