$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: 2g2LJ8XTplmCn120ooLtNdgn80SR7dvKFNIGC+AWMEA= Subject key identifier: 0C:2B:19:4E:E0:FE:64:F1:16:C8:A9:8A:F3:77:FF:CF:6C:A4:9B:64 Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 075E Signing time: Mon 30 Jun 2025 21:54:54 +0000 Manifest this update: Mon 30 Jun 2025 21:54:53 +0000 Manifest next update: Mon 07 Jul 2025 21:54:53 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: znPUMrQk3nxIw8RHrCqEycOtVcr+5Ajmnp88+HlVy7U=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Jun 30 21:54:53 2025 GMT Not After : Jul 7 21:54:53 2025 GMT Subject: CN=686307ae-d1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b6:d8:88:7a:2d:61:d1:04:51:12:36:c4:73: b1:5f:aa:06:1c:83:1b:36:0c:3d:73:bf:06:e6:54: 74:1a:90:43:e0:7d:85:1e:82:ba:75:74:f0:91:20: bb:f2:8b:51:4b:9d:98:e1:96:f3:a9:72:66:79:8f: 6a:62:3c:19:5d:29:15:1f:18:78:bc:87:c3:7a:c7: e5:c6:2b:df:01:28:6f:dc:d2:d4:cb:bf:25:bd:a5: 8e:bd:7a:28:b9:8f:32:e8:2c:dd:d2:87:9c:53:75: 45:95:31:8a:72:5b:13:68:99:d2:75:b8:ae:e6:4d: b0:de:ab:e6:79:3a:84:86:5d:5e:7b:bc:0d:a3:de: dc:09:ed:d6:f5:98:2a:95:fa:16:90:42:fc:ce:81: e2:36:cf:af:a4:84:70:41:ad:09:03:7c:98:e6:41: 09:65:8c:42:a7:9b:2f:e9:eb:91:20:ec:bf:56:c7: dd:30:47:1c:b9:26:06:65:a1:55:5f:1e:66:a8:16: e3:8f:e2:92:d4:6b:b9:81:33:57:03:87:0a:63:62: 14:fe:a6:89:92:db:20:67:05:ed:5d:cd:20:34:79: 43:ac:c1:29:1f:9f:de:9f:57:10:f1:24:55:0e:61: e7:75:6a:a0:30:f1:0b:2a:58:e0:d5:43:f9:b9:39: af:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2B:19:4E:E0:FE:64:F1:16:C8:A9:8A:F3:77:FF:CF:6C:A4:9B:64 X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:94:21:d1:8c:7e:13:7a:6d:af:fd:5a:ec:65:bf:67:19:41: ae:00:9e:09:66:c8:7f:47:c8:06:31:65:70:de:b1:7c:97:90: 72:f6:88:05:78:1e:4b:e3:19:b8:fd:5c:79:1f:da:a0:b5:a4: b7:5f:cd:a1:11:a8:19:6b:ba:c5:ce:58:b0:bc:f7:74:2e:88: fe:94:ec:4f:43:9a:da:60:b6:c5:8b:b3:42:0f:8d:5b:28:85: f7:95:eb:96:54:25:69:6b:f7:1e:18:e3:0c:37:14:94:78:ee: 02:e5:5d:be:d8:b4:cb:36:b5:2c:bb:2f:0e:a7:c7:ad:48:0d: 5f:f2:0c:ec:f0:03:85:d1:c7:d4:7f:e8:3a:76:e0:7e:6c:c0: 75:57:8c:2d:4e:51:c9:b4:f7:54:d6:8c:bd:42:48:dd:fc:12: e6:e8:04:03:9c:c6:b8:39:14:69:fa:aa:23:5b:a4:ef:09:27: c8:c7:7e:34:d9:17:b1:2b:24:c6:98:94:07:91:ee:86:90:be: 55:e5:c9:9c:8c:c1:20:65:13:ff:38:d1:a7:32:bf:28:c5:01: c6:5e:2e:a9:a8:2d:87:ec:97:9a:66:6c:56:9a:fa:18:67:37: be:db:8b:19:45:58:76:12:8f:97:c7:e6:c3:2a:e1:54:3f:f4: c7:50:94:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwNjMwMjE1NDUzWhcNMjUwNzA3MjE1NDUzWjAYMRYwFAYD VQQDEw02ODYzMDdhZS1kMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bbYiHotYdEEURI2xHOxX6oGHIMbNgw9c78G5lR0GpBD4H2FHoK6dXTwkSC7 8otRS52Y4ZbzqXJmeY9qYjwZXSkVHxh4vIfDesflxivfAShv3NLUy78lvaWOvXoo uY8y6Czd0oecU3VFlTGKclsTaJnSdbiu5k2w3qvmeTqEhl1ee7wNo97cCe3W9Zgq lfoWkEL8zoHiNs+vpIRwQa0JA3yY5kEJZYxCp5sv6euRIOy/VsfdMEccuSYGZaFV Xx5mqBbjj+KS1Gu5gTNXA4cKY2IU/qaJktsgZwXtXc0gNHlDrMEpH5/en1cQ8SRV DmHndWqgMPELKljg1UP5uTmvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwrGU7g /mTxFsipivN3/89spJtkMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFlCHRjH4Tem2v/VrsZb9nGUGuAJ4JZsh/R8gGMWVw3rF8l5By9ogF eB5L4xm4/Vx5H9qgtaS3X82hEagZa7rFzliwvPd0Loj+lOxPQ5raYLbFi7NCD41b KIX3leuWVCVpa/ceGOMMNxSUeO4C5V2+2LTLNrUsuy8Op8etSA1f8gzs8AOF0cfU f+g6duB+bMB1V4wtTlHJtPdU1oy9Qkjd/BLm6AQDnMa4ORRp+qojW6TvCSfIx340 2RexKyTGmJQHke6GkL5V5cmcjMEgZRP/ONGnMr8oxQHGXi6pqC2H7JeaZmxWmvoY Zze+24sZRVh2Eo+Xx+bDKuFUP/THUJT3 -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:13 2025 by rpki-client