$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: uPvGGZ4roX9d7JkDmo039opVON+8P7mhnmx9hYlE1HA= Subject key identifier: D2:37:EE:EF:94:6C:F7:83:24:D6:D9:C3:50:88:3D:A9:FF:A9:36:BE Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 17E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 17E8 Signing time: Wed 02 Jul 2025 16:40:18 +0000 Manifest this update: Wed 02 Jul 2025 16:40:17 +0000 Manifest next update: Wed 09 Jul 2025 16:40:17 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: yQdUXjzvIORYLp538KUCPb6Gavuew/mPf0Rjp3JaL2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6120 (0x17e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: Jul 2 16:40:17 2025 GMT Not After : Jul 9 16:40:17 2025 GMT Subject: CN=686560f2-6c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:e4:44:a5:74:6c:53:db:bc:b9:72:3d:10: be:73:6b:fa:1d:52:61:66:a3:76:78:52:16:4f:34: fb:8c:c8:39:d3:7d:7f:77:d3:25:26:00:47:3e:ec: 41:76:32:a6:5a:d2:b2:42:8d:13:ae:99:55:94:05: c8:6d:29:24:9b:87:54:7b:20:cf:6d:57:d3:b8:22: f8:6c:41:af:91:e4:27:08:69:06:3f:c2:7b:ca:10: b0:e9:d3:76:33:be:b5:cc:58:b2:0a:1a:6f:ca:85: f1:58:26:c0:ea:0a:18:6b:7c:94:b6:8e:2a:51:eb: 17:39:0d:f7:78:9d:d7:6a:29:14:ee:9e:72:e7:7a: 1d:a4:ae:3a:16:93:6e:47:b8:81:b3:b6:e4:f6:41: d1:fa:7a:87:85:fa:ae:3d:48:b2:18:5b:fc:6f:d1: 89:5f:ce:b4:90:c1:51:87:e1:c1:f1:19:35:0e:28: 9a:9a:10:be:a0:38:eb:88:58:dd:39:45:14:1e:13: e9:bd:46:94:d7:af:e7:03:ec:0c:fd:3c:71:a6:e6: 0b:b8:88:d4:64:a1:53:6b:fd:ff:bf:e5:a1:24:79: 55:3f:6e:22:09:14:2b:99:d0:ea:9e:ff:47:0f:57: 3b:94:b6:a5:6a:6f:2a:2b:eb:ec:c2:af:d6:7d:bf: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:EE:EF:94:6C:F7:83:24:D6:D9:C3:50:88:3D:A9:FF:A9:36:BE X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:80:01:97:99:4c:d3:2c:4f:2f:3e:a9:dd:08:0d:97:e7:49: cd:c4:66:f9:2c:e5:95:6f:d7:4d:b9:6c:39:b8:d9:5a:0f:7a: d9:8d:38:11:b5:a5:c3:39:74:22:95:29:2e:0f:84:29:26:fa: 65:b7:68:13:61:2d:3a:1f:74:99:90:8f:94:22:01:98:1f:9f: 59:f3:69:56:1a:90:11:77:4d:5c:71:21:b6:97:ef:0a:4a:33: 46:3e:e3:74:0b:14:47:27:dc:15:8a:e7:20:30:44:df:d1:00: 64:3e:d4:c8:07:f4:72:b8:76:82:0a:1f:d6:25:5d:c0:32:a7: 61:4f:ac:52:d5:04:01:9b:ea:77:c8:50:82:97:15:dd:8b:7d: 31:b4:4a:65:d7:0d:63:e7:49:d9:dc:39:c3:83:f3:08:e4:21: 10:af:50:d6:e2:b5:bd:ea:c1:5c:e1:b0:1e:4c:a4:cd:ca:4a: f9:c3:fc:55:64:5e:4d:91:af:fa:57:04:91:6a:66:99:a2:a3: dd:26:26:2c:1c:2f:63:e8:4f:d2:89:a8:d5:1d:4d:96:2d:52: c2:e9:af:e5:55:11:48:bd:67:e1:28:bd:9b:77:2d:ca:f3:3d: 8e:2a:b3:aa:fd:d9:88:46:e4:a8:e5:00:85:3a:b1:ba:46:b6: ec:3c:1b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjUwNzAyMTY0MDE3WhcNMjUwNzA5MTY0MDE3WjAYMRYwFAYD VQQDEw02ODY1NjBmMi02YzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm1DkRKV0bFPbvLlyPRC+c2v6HVJhZqN2eFIWTzT7jMg5031/d9MlJgBHPuxB djKmWtKyQo0TrplVlAXIbSkkm4dUeyDPbVfTuCL4bEGvkeQnCGkGP8J7yhCw6dN2 M761zFiyChpvyoXxWCbA6goYa3yUto4qUesXOQ33eJ3XaikU7p5y53odpK46FpNu R7iBs7bk9kHR+nqHhfquPUiyGFv8b9GJX860kMFRh+HB8Rk1DiiamhC+oDjriFjd OUUUHhPpvUaU16/nA+wM/TxxpuYLuIjUZKFTa/3/v+WhJHlVP24iCRQrmdDqnv9H D1c7lLalam8qK+vswq/Wfb9JawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI37u+U bPeDJNbZw1CIPan/qTa+MB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZgAGXmUzTLE8vPqndCA2X50nNxGb5LOWVb9dNuWw5uNlaD3rZjTgR taXDOXQilSkuD4QpJvplt2gTYS06H3SZkI+UIgGYH59Z82lWGpARd01ccSG2l+8K SjNGPuN0CxRHJ9wViucgMETf0QBkPtTIB/RyuHaCCh/WJV3AMqdhT6xS1QQBm+p3 yFCClxXdi30xtEpl1w1j50nZ3DnDg/MI5CEQr1DW4rW96sFc4bAeTKTNykr5w/xV ZF5Nka/6VwSRamaZoqPdJiYsHC9j6E/SiajVHU2WLVLC6a/lVRFIvWfhKL2bdy3K 8z2OKrOq/dmIRuSo5QCFOrG6RrbsPBue -----END CERTIFICATE-----Generated at Thu Jul 3 10:16:48 2025 by rpki-client