$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: zcdal1kNc9Oq0uyPxZPRnpQxngzo8JYkkIE878gP9JQ= Subject key identifier: B6:BF:4F:5C:7E:EE:89:78:96:7A:B5:B6:BE:10:44:73:8A:4F:AC:50 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 148E Signing time: Wed 02 Jul 2025 17:03:50 +0000 Manifest this update: Wed 02 Jul 2025 17:03:50 +0000 Manifest next update: Wed 09 Jul 2025 17:03:50 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: D6XUW1J2sYAO2y8NVt0iw5TfbTLRDh8W089xQOKSBr8=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5286 (0x14a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Jul 2 17:03:50 2025 GMT Not After : Jul 9 17:03:50 2025 GMT Subject: CN=68656676-8de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:ba:19:1b:9a:c9:ad:48:04:d8:b7:1a:33: c8:c4:da:20:2b:86:59:2e:7f:c0:56:0b:e2:99:30: 0e:57:85:5d:f8:48:2b:03:74:6c:de:95:c0:0b:05: bb:0c:3b:a9:19:7b:9c:9a:f2:85:a4:e9:98:4b:06: 77:8c:04:c8:5b:7c:cb:e1:73:d3:bd:2a:84:92:df: 01:69:d3:f1:02:fc:33:23:62:59:0e:4c:4a:eb:56: 6b:03:94:6d:71:7d:ca:cc:4f:9a:25:e0:1a:2c:20: 1e:00:16:25:86:1a:fa:28:9c:ef:39:9c:d3:84:52: 23:b9:e0:c5:d9:c0:97:a2:14:c7:e0:e5:9b:f7:02: 00:10:02:e3:09:68:91:0a:e9:b4:c1:ce:4e:6d:84: 80:bb:8f:4e:20:1e:0a:eb:14:fd:5d:a3:7a:33:c0: 95:fd:81:ea:c4:50:b1:d5:28:0a:43:28:3f:a9:49: e6:dd:b7:cf:0b:d2:2f:e4:82:f6:93:3a:48:e0:6f: 2f:9d:5a:00:d2:b9:6c:a4:7d:1c:ea:bd:e1:20:53: ef:64:99:e7:49:88:9d:6e:d6:1c:88:b7:11:af:8c: 85:32:ad:57:d7:15:49:e1:19:a8:b9:5d:be:52:f9: dd:d6:58:91:33:7c:95:98:34:86:81:ba:7c:b2:90: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BF:4F:5C:7E:EE:89:78:96:7A:B5:B6:BE:10:44:73:8A:4F:AC:50 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:19:97:20:16:9c:da:7e:de:b2:98:26:fe:03:4b:ca:88:aa: 76:c8:3f:e8:4e:5c:dc:48:9d:cc:12:a2:00:e6:31:3c:35:b0: 3b:93:ca:ee:38:3a:b2:88:3e:79:3e:9e:a0:d6:bd:c5:7a:0e: 3b:b8:87:9e:12:01:7d:01:e5:b3:45:4a:4b:a1:21:3b:2a:61: f4:3b:4d:fc:92:25:50:6c:26:59:97:5d:f4:c2:7b:12:3f:a7: e2:1d:86:6d:2c:f2:ec:5b:29:4e:cf:90:8b:61:df:a5:e4:f9: 13:5b:4b:7a:d9:48:5b:b2:0b:83:af:af:06:2b:b7:17:a7:e7: 9b:5b:0c:2b:48:05:a0:af:f6:10:02:22:0b:62:ae:5b:f2:54: 3f:d1:6a:8b:9d:01:dc:06:64:7a:46:99:c0:3e:84:7a:c0:38: dd:dd:33:bd:aa:7b:79:bd:0d:72:f5:b9:fa:9a:48:e3:73:ad: ee:f8:26:44:1f:8f:a9:af:58:dc:43:c6:79:75:be:c5:93:20: f2:a8:65:47:52:f5:41:d5:70:6d:0b:d2:28:8a:34:55:53:02: f0:61:53:ae:34:ad:7b:18:f8:72:ed:4a:29:be:4a:61:5b:3e: da:db:1e:a9:2e:44:a6:72:af:ec:d3:5d:15:9e:fc:5b:ed:b9: 39:03:57:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNzAyMTcwMzUwWhcNMjUwNzA5MTcwMzUwWjAYMRYwFAYD VQQDEw02ODY1NjY3Ni04ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJm6GRuaya1IBNi3GjPIxNogK4ZZLn/AVgvimTAOV4Vd+EgrA3Rs3pXACwW7 DDupGXucmvKFpOmYSwZ3jATIW3zL4XPTvSqEkt8BadPxAvwzI2JZDkxK61ZrA5Rt cX3KzE+aJeAaLCAeABYlhhr6KJzvOZzThFIjueDF2cCXohTH4OWb9wIAEALjCWiR Cum0wc5ObYSAu49OIB4K6xT9XaN6M8CV/YHqxFCx1SgKQyg/qUnm3bfPC9Iv5IL2 kzpI4G8vnVoA0rlspH0c6r3hIFPvZJnnSYidbtYciLcRr4yFMq1X1xVJ4RmouV2+ Uvnd1liRM3yVmDSGgbp8spCklwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa/T1x+ 7ol4lnq1tr4QRHOKT6xQMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIGZcgFpzaft6ymCb+A0vKiKp2yD/oTlzcSJ3MEqIA5jE8NbA7k8ru ODqyiD55Pp6g1r3Feg47uIeeEgF9AeWzRUpLoSE7KmH0O038kiVQbCZZl130wnsS P6fiHYZtLPLsWylOz5CLYd+l5PkTW0t62UhbsguDr68GK7cXp+ebWwwrSAWgr/YQ AiILYq5b8lQ/0WqLnQHcBmR6RpnAPoR6wDjd3TO9qnt5vQ1y9bn6mkjjc63u+CZE H4+pr1jcQ8Z5db7FkyDyqGVHUvVB1XBtC9IoijRVUwLwYVOuNK17GPhy7Uopvkph Wz7a2x6pLkSmcq/s010Vnvxb7bk5A1cr -----END CERTIFICATE-----Generated at Thu Jul 3 12:02:24 2025 by rpki-client