$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: j4j9RDWHydz6AXo9wCmevnfPNMJm5zc95kf+yMpTr18= Subject key identifier: E3:97:07:97:48:CA:52:DA:D3:AD:F3:28:5F:20:47:46:8A:99:8F:7D Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B29 Signing time: Wed 02 Jul 2025 16:24:54 +0000 Manifest this update: Wed 02 Jul 2025 16:24:54 +0000 Manifest next update: Wed 09 Jul 2025 16:24:54 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: gYKPV97Hd5xG3vHwJmQemVNaPJ0rfFJAG8H1PCy5sHc=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7019 (0x1b6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Jul 2 16:24:54 2025 GMT Not After : Jul 9 16:24:54 2025 GMT Subject: CN=68655d56-b830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:0a:1e:96:94:80:7d:74:fe:04:40:25:00: 7b:b9:16:56:81:8e:94:87:8e:96:90:e0:83:98:41: 25:38:84:44:06:e5:1d:65:7b:21:d9:97:cb:ae:2c: 81:1a:73:fb:88:93:67:7c:36:99:e9:8d:da:68:ea: 78:c5:fb:67:86:bd:fa:c7:a2:2a:27:16:29:3d:cd: 3e:17:8a:5a:45:8c:8e:3c:2f:e8:b7:b6:17:dc:47: 7d:86:20:9d:e3:ca:eb:9c:24:e6:78:47:0d:d1:68: 6d:31:cb:00:ec:6a:0d:b0:8c:4b:34:78:e5:68:66: e1:b9:be:a6:c6:a1:b6:d0:1a:02:5c:63:12:4f:26: c5:45:ec:c3:34:6c:4f:cc:14:31:71:c4:bd:4f:c8: 8b:67:d0:8b:5c:d2:b8:ec:cd:43:b4:94:73:e4:a3: 4d:01:cc:44:ef:e1:a0:a7:a4:85:f7:82:7c:65:13: d2:55:46:a1:27:7c:92:43:a9:90:e8:65:33:2a:67: 9e:59:49:ac:e2:77:ef:28:de:cf:76:d1:75:c4:a0: 8d:be:3b:fa:dc:d8:b7:72:e0:53:73:14:5e:73:f0: ea:ee:f3:48:05:4d:98:ce:13:2f:1e:83:92:d3:a4: 0e:2e:c4:a1:e7:d8:12:4d:3c:a2:67:c7:ee:b1:b5: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:97:07:97:48:CA:52:DA:D3:AD:F3:28:5F:20:47:46:8A:99:8F:7D X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f4:98:ec:7a:11:71:04:ed:b0:eb:ec:58:2d:68:8c:ee:71: 70:b7:3e:6a:2f:31:40:66:64:13:f2:88:5b:a3:b9:5e:8f:25: 09:10:dc:2a:4e:53:87:d8:4c:b6:cb:7e:2c:6d:bd:9c:d7:23: 1d:28:46:09:e1:61:b6:80:a9:e6:5f:db:ff:d1:a1:ae:95:01: 81:b9:30:34:07:67:57:f5:ba:14:38:d1:ca:6e:a0:96:8d:51: 63:9e:13:fa:26:a9:49:ad:64:0d:fc:7b:68:f1:ae:b6:fe:42: 1a:ec:ce:e7:cc:ec:ac:4d:6c:5c:18:90:b0:c9:c2:c3:89:a9: ff:d2:0a:57:11:15:44:b3:ea:92:ef:ac:88:99:52:ed:f5:ba: 5a:0f:d9:8f:29:d9:2c:20:b5:77:95:39:b7:e0:58:3e:7a:ac: d2:5a:6c:c8:05:0d:d2:0e:3e:a2:5f:2f:63:d3:f0:72:f6:5e: d5:8a:89:e6:dd:bd:ed:ec:4c:f6:ba:37:d1:be:96:9a:91:32: b3:d5:fe:6a:26:6a:64:cb:14:3b:53:92:75:da:a6:65:80:49: 9c:ad:2d:3a:b8:92:31:a9:b3:2f:30:07:ef:38:5e:e9:3b:ec: e5:42:1b:ee:4c:28:ff:2c:f0:db:49:c6:58:20:b4:5c:de:99: 61:87:74:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNzAyMTYyNDU0WhcNMjUwNzA5MTYyNDU0WjAYMRYwFAYD VQQDEw02ODY1NWQ1Ni1iODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYIKHpaUgH10/gRAJQB7uRZWgY6Uh46WkOCDmEElOIREBuUdZXsh2ZfLriyB GnP7iJNnfDaZ6Y3aaOp4xftnhr36x6IqJxYpPc0+F4paRYyOPC/ot7YX3Ed9hiCd 48rrnCTmeEcN0WhtMcsA7GoNsIxLNHjlaGbhub6mxqG20BoCXGMSTybFRezDNGxP zBQxccS9T8iLZ9CLXNK47M1DtJRz5KNNAcxE7+Ggp6SF94J8ZRPSVUahJ3ySQ6mQ 6GUzKmeeWUms4nfvKN7PdtF1xKCNvjv63Ni3cuBTcxRec/Dq7vNIBU2YzhMvHoOS 06QOLsSh59gSTTyiZ8fusbWxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOXB5dI ylLa063zKF8gR0aKmY99MB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc9JjsehFxBO2w6+xYLWiM7nFwtz5qLzFAZmQT8ohbo7lejyUJENwq TlOH2Ey2y34sbb2c1yMdKEYJ4WG2gKnmX9v/0aGulQGBuTA0B2dX9boUONHKbqCW jVFjnhP6JqlJrWQN/Hto8a62/kIa7M7nzOysTWxcGJCwycLDian/0gpXERVEs+qS 76yImVLt9bpaD9mPKdksILV3lTm34Fg+eqzSWmzIBQ3SDj6iXy9j0/By9l7Vionm 3b3t7Ez2ujfRvpaakTKz1f5qJmpkyxQ7U5J12qZlgEmcrS06uJIxqbMvMAfvOF7p O+zlQhvuTCj/LPDbScZYILRc3plhh3QB -----END CERTIFICATE-----Generated at Thu Jul 3 08:02:30 2025 by rpki-client