$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: /O231azhJD0bSY/WBnHLthccapJ4TeiTOdYf6lK0B7I= Subject key identifier: 48:5F:38:78:6D:4F:99:D3:E4:94:AF:4E:34:5F:FF:99:D6:1B:93:91 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0A91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A2F Signing time: Wed 02 Jul 2025 20:11:10 +0000 Manifest this update: Wed 02 Jul 2025 20:11:09 +0000 Manifest next update: Wed 09 Jul 2025 20:11:09 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: JoSkwGx0JUQGuR6HLj8bwC6YCw0pmHUW2sjy4TyUoqw=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2705 (0xa91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Jul 2 20:11:09 2025 GMT Not After : Jul 9 20:11:09 2025 GMT Subject: CN=6865925d-486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:d6:72:e1:1a:da:d5:2c:23:5c:ce:6e:af: 1d:90:55:bc:f4:55:ab:8b:43:c3:76:d7:bc:bb:d8: 0e:90:5f:02:84:f3:f4:0a:69:91:29:15:3f:39:1c: 4b:fe:29:e7:ac:50:2c:2d:8f:98:f5:00:a9:62:e8: aa:04:61:af:e9:49:18:8a:6c:58:39:a7:bb:41:00: 46:d4:64:cd:2c:90:2a:e4:41:73:9a:ba:c7:8a:4f: 8f:45:3c:7e:27:4e:72:6b:5e:df:24:26:86:10:29: b4:e3:bd:6c:3e:e5:70:21:3a:2d:c8:6f:83:39:88: 1d:b3:c3:da:0d:f0:f4:dc:cd:0f:b4:c4:4e:36:e3: 90:6a:ea:cf:f3:6f:b8:d7:d1:43:d4:cd:5e:96:a7: 6e:bf:b6:0f:14:63:05:85:85:71:f4:76:35:96:d3: 8f:50:8e:81:c6:a2:18:86:9d:69:1c:fa:c1:06:93: 20:32:82:2b:27:bf:97:86:88:f9:1d:35:f1:90:5f: 03:c4:1c:b2:1c:11:25:48:31:b0:61:a7:db:16:be: f9:7e:c0:35:64:88:3c:7e:56:8e:06:c2:8a:fd:b3: 57:c2:54:f3:d9:51:9f:3f:4f:42:ee:3c:d1:c1:0b: b9:e7:ba:e8:dc:5f:78:c4:fd:fa:92:41:1c:db:ad: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5F:38:78:6D:4F:99:D3:E4:94:AF:4E:34:5F:FF:99:D6:1B:93:91 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d2:55:43:77:0d:9d:b1:8c:86:b4:94:88:6e:34:90:d8:7a: ab:2b:98:fb:18:ba:bf:02:2d:81:1a:0b:a6:44:66:bb:c8:1c: 5e:40:6c:4c:c5:be:c4:54:46:78:60:08:84:56:f5:da:f6:65: d5:11:b7:6a:f1:53:5f:59:46:90:11:98:70:2c:10:01:3c:dd: c0:81:b7:20:c8:4d:e2:87:3a:54:94:49:d8:a9:61:23:66:35: 7e:f8:95:14:ee:9a:bf:1b:fd:c4:d1:57:3f:fb:62:81:9f:94: d0:65:23:cc:2a:b1:45:a1:d2:2a:b5:c2:ac:24:44:ab:a5:3b: 1f:9e:00:68:a8:f6:c1:ad:da:f9:36:8e:11:62:f8:fa:bd:87: fa:87:d6:70:4e:f9:4a:1d:f3:65:ab:98:01:e2:a2:0c:98:42: 32:dc:22:9d:2d:e3:df:4b:5f:d0:4d:b9:7f:1c:93:50:f1:9e: 20:ae:28:6e:e6:81:a3:a8:98:8e:7a:7a:f9:76:3c:ed:8b:15: 7d:1e:d6:3a:06:9e:6b:3a:50:3f:6f:f7:6f:12:9c:30:f2:7d: 33:40:8b:3d:78:9f:aa:65:28:68:ea:03:c0:be:4e:d7:f9:8a: 79:41:e9:90:40:5f:6a:49:fc:27:59:e4:71:32:f4:b1:ec:ec: a8:1f:c5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwNzAyMjAxMTA5WhcNMjUwNzA5MjAxMTA5WjAYMRYwFAYD VQQDEw02ODY1OTI1ZC00ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNLWcuEa2tUsI1zObq8dkFW89FWri0PDdte8u9gOkF8ChPP0CmmRKRU/ORxL /innrFAsLY+Y9QCpYuiqBGGv6UkYimxYOae7QQBG1GTNLJAq5EFzmrrHik+PRTx+ J05ya17fJCaGECm0471sPuVwITotyG+DOYgds8PaDfD03M0PtMRONuOQaurP82+4 19FD1M1elqduv7YPFGMFhYVx9HY1ltOPUI6BxqIYhp1pHPrBBpMgMoIrJ7+Xhoj5 HTXxkF8DxByyHBElSDGwYafbFr75fsA1ZIg8flaOBsKK/bNXwlTz2VGfP09C7jzR wQu557ro3F94xP36kkEc260ieQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhfOHht T5nT5JSvTjRf/5nWG5ORMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN0lVDdw2dsYyGtJSIbjSQ2HqrK5j7GLq/Ai2BGgumRGa7yBxeQGxM xb7EVEZ4YAiEVvXa9mXVEbdq8VNfWUaQEZhwLBABPN3AgbcgyE3ihzpUlEnYqWEj ZjV++JUU7pq/G/3E0Vc/+2KBn5TQZSPMKrFFodIqtcKsJESrpTsfngBoqPbBrdr5 No4RYvj6vYf6h9ZwTvlKHfNlq5gB4qIMmEIy3CKdLePfS1/QTbl/HJNQ8Z4grihu 5oGjqJiOenr5djztixV9HtY6Bp5rOlA/b/dvEpww8n0zQIs9eJ+qZSho6gPAvk7X +Yp5QemQQF9qSfwnWeRxMvSx7OyoH8V0 -----END CERTIFICATE-----Generated at Wed Jul 2 23:18:27 2025 by rpki-client