$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft File: h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json) Hash identifier: gCTkvrj4rkiONq7MiIp32vaK2xVBmfy0RUjnrkwa7Kw= Subject key identifier: 4E:A3:53:B4:C2:B5:04:0B:BB:F6:56:52:DB:EB:1E:FF:7C:32:22:C2 Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE Certificate issuer: /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft Manifest number: 01E9 Signing time: Sun 29 Jun 2025 02:01:11 +0000 Manifest this update: Sun 29 Jun 2025 02:01:11 +0000 Manifest next update: Sun 06 Jul 2025 02:01:11 +0000 Files and hashes: 1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: AXEUakL8kp+H/RBcvRFGZkEzXpFQDssrTB0cYA+6DyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE Validity Not Before: Jun 29 02:01:11 2025 GMT Not After : Jul 6 02:01:11 2025 GMT Subject: CN=68609e67-fbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:e7:3d:70:79:76:d9:74:71:05:1d:9b:ed: 44:19:20:86:ce:8e:7b:5f:bd:c8:0e:80:8a:18:6f: 78:c9:f4:24:0a:c2:c9:b3:1b:74:ca:b2:ce:86:9d: dc:c6:99:76:90:4d:a5:90:42:06:26:d2:03:48:e6: 33:eb:dd:df:d7:c0:9a:15:f9:c5:5c:eb:b6:bf:cb: fc:4a:2c:23:27:52:92:0e:b8:e7:bc:87:3f:ec:95: 2c:f8:65:46:68:dc:00:e0:a1:ec:47:58:a2:e5:12: eb:2a:9c:0d:a5:46:ac:23:e8:3e:15:36:dd:8b:36: 66:31:cb:94:5a:2f:9c:d1:ee:73:55:a5:cc:2b:d5: 03:c3:b8:90:24:6d:c6:4e:95:0b:0c:62:57:ae:f8: 0a:39:53:5e:77:4a:a1:66:8a:a5:9a:80:53:b8:fa: 9c:61:e6:c2:b9:7d:ea:09:e6:b6:5d:de:88:bb:f9: 8f:49:a7:e6:99:cd:b9:43:11:f8:b8:8e:25:ce:d1: f5:d9:93:33:02:e8:2c:62:2e:85:d6:ce:8b:91:dc: ca:24:a1:19:bc:95:24:03:22:f7:ca:15:e8:38:38: 71:87:7e:ae:da:6f:25:6b:b5:0f:c2:7a:00:8a:7d: f4:d1:d6:e3:70:d7:b5:09:3e:5c:2e:7c:e1:0f:f5: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A3:53:B4:C2:B5:04:0B:BB:F6:56:52:DB:EB:1E:FF:7C:32:22:C2 X509v3 Authority Key Identifier: keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ce:4e:3b:79:f3:47:de:ff:f8:13:35:f0:2a:8f:d0:b2:6a: 0e:af:e0:f1:bd:a4:e5:79:52:a3:d9:75:96:f7:e1:45:96:1d: 43:04:42:cd:9c:26:e8:e2:aa:95:a1:c6:17:ee:f0:15:7a:21: e3:47:5d:2a:04:88:ac:e2:37:21:d6:b8:5d:c1:0e:15:a7:fc: 82:7a:e3:6c:f7:e9:4e:19:2a:fb:6b:8f:a9:1d:9a:fd:9e:4c: 3f:15:4d:6c:e0:68:d7:81:13:f4:7a:ee:7d:52:7d:cd:66:16: 60:12:9a:a6:79:d8:74:6d:a7:a6:5b:b8:47:74:1e:c7:2b:60: a0:24:27:db:0f:12:78:66:40:ea:70:b2:33:16:46:e5:f3:49: 77:4b:10:45:bf:c0:3a:1d:d7:46:f1:0b:6e:22:5c:17:1f:50: 7e:13:4e:a4:93:44:ea:6e:0f:70:78:ec:7f:b7:f5:42:37:9c: d6:e6:12:9f:bc:83:ce:c3:ef:e1:d2:aa:f7:94:40:e0:4b:8c: e8:2e:08:df:d4:8c:11:d1:e9:dc:1f:77:3c:a2:88:15:68:c0: b6:db:4a:fb:81:3b:5f:a0:12:8c:8a:46:a6:fc:ae:e8:25:45: 73:f3:d0:73:86:e4:c5:f6:8a:5a:be:3f:f6:4c:39:e7:0a:2e: ee:1d:e1:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFNEIxMTAvBgNVBAUTKDg3NjI0MEMxNzQyNUUwRjNFMkUxNTc2Q0RGNEI3OURC QkZBQjU1RUUwHhcNMjUwNjI5MDIwMTExWhcNMjUwNzA2MDIwMTExWjAYMRYwFAYD VQQDEw02ODYwOWU2Ny1mYmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5DnPXB5dtl0cQUdm+1EGSCGzo57X73IDoCKGG94yfQkCsLJsxt0yrLOhp3c xpl2kE2lkEIGJtIDSOYz693f18CaFfnFXOu2v8v8SiwjJ1KSDrjnvIc/7JUs+GVG aNwA4KHsR1ii5RLrKpwNpUasI+g+FTbdizZmMcuUWi+c0e5zVaXMK9UDw7iQJG3G TpULDGJXrvgKOVNed0qhZoqlmoBTuPqcYebCuX3qCea2Xd6Iu/mPSafmmc25QxH4 uI4lztH12ZMzAugsYi6F1s6LkdzKJKEZvJUkAyL3yhXoODhxh36u2m8la7UPwnoA in300dbjcNe1CT5cLnzhD/WZ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6jU7TC tQQLu/ZWUtvrHv98MiLCMB8GA1UdIwQYMBaAFIdiQMF0JeDz4uFXbN9Ledu/q1Xu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkU0Qi9DMTQwMTZCNDhE N0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQUGk0VmRzMzB0NTI3LXJW ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gySkF3WFFsNFBQaTRWZHMzMHQ1MjctclZlNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkU0Qi9DMTQwMTZCNDhEN0YxMUVEQjdEQjg1NENDNEY5QUUwMi9oMkpBd1hRbDRQ UGk0VmRzMzB0NTI3LXJWZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByzk47efNH3v/4EzXwKo/QsmoOr+DxvaTleVKj2XWW9+FFlh1DBELN nCbo4qqVocYX7vAVeiHjR10qBIis4jch1rhdwQ4Vp/yCeuNs9+lOGSr7a4+pHZr9 nkw/FU1s4GjXgRP0eu59Un3NZhZgEpqmedh0baemW7hHdB7HK2CgJCfbDxJ4ZkDq cLIzFkbl80l3SxBFv8A6HddG8QtuIlwXH1B+E06kk0Tqbg9weOx/t/VCN5zW5hKf vIPOw+/h0qr3lEDgS4zoLgjf1IwR0encH3c8oogVaMC220r7gTtfoBKMikam/K7o JUVz89BzhuTF9opavj/2TDnnCi7uHeGi -----END CERTIFICATE-----Generated at Sun Jun 29 20:50:59 2025 by rpki-client