$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: kJkGpEKfmWwx7tp1fuixQmatbrYIziJIT3TAi8GCHgo= Subject key identifier: 09:CA:52:0C:3D:54:0C:DD:A9:05:A3:44:FF:94:03:48:D9:28:0E:1A Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 01FF Signing time: Thu 03 Jul 2025 02:29:11 +0000 Manifest this update: Thu 03 Jul 2025 02:29:10 +0000 Manifest next update: Thu 10 Jul 2025 02:29:10 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: K7NjHO3Hf1O3KaeW6v9WvUP7fDuHqsA1He/O0U5a1a8=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: f6YvpcInK7aMZI/gTlnIjzNzS2LMqoG/bSzJ7lAf9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: Jul 3 02:29:10 2025 GMT Not After : Jul 10 02:29:10 2025 GMT Subject: CN=6865eaf6-008e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:4d:80:21:2d:17:3a:30:99:bc:61:34:17: 9d:8c:9f:d2:da:b0:8d:af:2e:c3:3a:60:43:7e:aa: 5a:b1:c5:3f:d3:d9:ab:23:f2:a1:4c:db:23:2f:78: e7:0e:8f:8b:89:1b:ce:d9:f7:3e:f3:27:a8:30:36: 3e:3a:ec:ad:96:94:e5:13:72:b7:90:8d:2a:b3:49: da:ac:8b:cd:aa:c8:12:b3:d5:e9:37:8d:f4:83:95: 9d:6e:a6:55:8d:aa:56:46:46:3c:9a:51:56:8b:4f: cf:c6:a2:ca:fd:06:cd:41:9b:10:f9:4b:e1:0d:46: 4f:c9:40:cc:b5:c1:d9:61:0b:5d:e3:68:68:a9:5c: a7:8e:4d:65:0e:1a:35:74:30:8a:38:18:9f:c9:e9: be:7a:05:48:59:ef:7e:bc:1c:e8:06:a5:d2:17:11: c9:3c:a3:4e:41:99:77:b5:7f:8f:33:46:5f:d8:42: 06:72:3f:1d:53:04:10:d1:83:83:b0:c2:35:6b:2a: 4d:a1:4c:66:1a:38:d3:ce:ea:10:a5:7c:17:48:e7: c6:42:8d:29:77:53:56:43:16:8c:68:b1:7c:3a:53: 08:70:12:5e:3e:49:57:8a:90:13:4c:ec:4b:31:1d: 0b:d5:98:bb:de:2f:58:4d:f5:9c:64:54:4b:7a:57: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:52:0C:3D:54:0C:DD:A9:05:A3:44:FF:94:03:48:D9:28:0E:1A X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7c:cb:36:2f:a0:b0:22:d6:56:e4:9b:02:82:28:1e:7f:77: da:14:1e:56:a5:3c:5a:aa:31:06:45:86:ae:c9:05:f9:3d:40: e8:8a:88:67:67:a8:2d:ad:4e:53:cf:65:d3:82:e9:28:5f:bd: 8a:0f:3c:82:fa:8d:7f:46:b0:57:9d:53:58:f2:c4:cf:9d:02: a5:72:41:72:55:0e:18:bd:fb:50:f2:e1:46:8f:4d:3a:ff:a9: 32:16:f4:9b:16:50:78:34:d6:52:0e:4e:d8:ab:72:ab:45:94: 5f:e2:c6:1e:b6:be:a9:b1:08:7f:84:96:c9:d1:a8:d0:dd:1d: b2:08:35:fe:cc:e7:4b:63:26:de:54:7c:5a:2f:0e:91:36:ca: b1:b2:87:55:42:d4:ce:bc:a8:fc:6d:92:90:55:f2:6b:89:c0: 55:ed:c9:a4:8e:b3:e3:93:c1:d1:a1:1e:cb:ec:d1:0a:b3:31: 67:a9:18:32:0c:09:2f:ac:3c:9e:6d:e7:10:c5:0b:f8:80:56: f6:59:b1:d2:6b:64:3e:78:94:49:4a:bb:7f:04:fe:88:22:35: 43:24:76:31:cb:49:5b:8f:e8:81:4b:68:58:7f:dc:90:6d:d1: 20:ba:78:ff:88:d6:f5:e7:0b:a5:98:c1:9f:4c:15:14:f6:e2: 82:4c:46:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjUwNzAzMDIyOTEwWhcNMjUwNzEwMDIyOTEwWjAYMRYwFAYD VQQDEw02ODY1ZWFmNi0wMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS1NgCEtFzowmbxhNBedjJ/S2rCNry7DOmBDfqpascU/09mrI/KhTNsjL3jn Do+LiRvO2fc+8yeoMDY+OuytlpTlE3K3kI0qs0narIvNqsgSs9XpN430g5WdbqZV japWRkY8mlFWi0/PxqLK/QbNQZsQ+UvhDUZPyUDMtcHZYQtd42hoqVynjk1lDho1 dDCKOBifyem+egVIWe9+vBzoBqXSFxHJPKNOQZl3tX+PM0Zf2EIGcj8dUwQQ0YOD sMI1aypNoUxmGjjTzuoQpXwXSOfGQo0pd1NWQxaMaLF8OlMIcBJePklXipATTOxL MR0L1Zi73i9YTfWcZFRLeldAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnKUgw9 VAzdqQWjRP+UA0jZKA4aMB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2fMs2L6CwItZW5JsCgigef3faFB5WpTxaqjEGRYauyQX5PUDoiohn Z6gtrU5Tz2XTgukoX72KDzyC+o1/RrBXnVNY8sTPnQKlckFyVQ4YvftQ8uFGj006 /6kyFvSbFlB4NNZSDk7Yq3KrRZRf4sYetr6psQh/hJbJ0ajQ3R2yCDX+zOdLYybe VHxaLw6RNsqxsodVQtTOvKj8bZKQVfJricBV7cmkjrPjk8HRoR7L7NEKszFnqRgy DAkvrDyebecQxQv4gFb2WbHSa2Q+eJRJSrt/BP6IIjVDJHYxy0lbj+iBS2hYf9yQ bdEgunj/iNb15wulmMGfTBUU9uKCTEbV -----END CERTIFICATE-----Generated at Fri Jul 4 06:20:27 2025 by rpki-client