$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: KRwGA9yzbY46Cr+suAM92gcf/cs53aKZ3oTihG1aukQ= Subject key identifier: 0F:4E:BD:13:C6:6D:ED:50:5E:AF:31:97:2A:19:6D:63:FE:61:B6:79 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01D8 Signing time: Sun 15 Jun 2025 02:04:22 +0000 Manifest this update: Sun 15 Jun 2025 02:04:22 +0000 Manifest next update: Sun 22 Jun 2025 02:04:22 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: ds7eut/ea754yApP88zbrPq82oPH7gWnCkfT/9cBrqc=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Jun 15 02:04:22 2025 GMT Not After : Jun 22 02:04:22 2025 GMT Subject: CN=684e2a26-f95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:be:d3:27:93:35:f1:f1:35:62:57:7a:b3: 39:68:75:2a:b9:38:c8:a4:3e:71:90:0d:29:56:8b: 08:d9:82:2a:de:96:15:a6:5b:07:fa:ba:e3:42:73: 7b:fe:88:31:e8:3c:5b:c7:18:22:d9:98:d5:98:51: 54:36:f5:d9:10:52:3a:fa:56:46:68:bc:5b:68:b0: 2d:a2:44:bd:d5:f9:20:4e:b9:48:bd:db:e7:23:23: 37:b9:48:e9:20:56:f7:9a:3e:2e:bf:b3:fd:ba:ca: 32:0c:a8:0d:9e:31:10:3b:d9:f8:41:4c:1a:cc:c1: e5:ea:be:35:ae:7b:da:a5:32:b6:d0:cd:dd:03:0c: 91:eb:7b:ba:d8:35:a2:cf:ba:d5:26:aa:cd:cc:b0: 99:7a:3f:a8:ce:b1:c6:3e:fa:7d:e6:c5:1e:e5:0d: 6a:3c:a1:27:38:c0:8e:2e:12:d8:5e:96:8a:3d:cd: a7:f1:50:3b:82:54:05:da:a2:27:0c:94:e4:ee:09: 1f:e0:6d:49:73:68:ae:11:fb:e8:f5:be:76:ed:21: 82:8c:42:ca:d4:90:99:5c:ca:d2:01:c6:82:2b:e0: 3e:d0:95:90:e2:33:6d:42:ae:58:97:33:56:ce:4c: 6d:9a:f0:c0:e4:97:c0:74:2e:b1:68:d6:9c:27:7e: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4E:BD:13:C6:6D:ED:50:5E:AF:31:97:2A:19:6D:63:FE:61:B6:79 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2a:6e:62:bb:26:63:6a:ff:67:06:70:be:11:01:56:ba:c0: 88:5c:70:11:f8:f6:4d:df:c4:b0:52:89:8f:41:84:c1:c9:f1: 21:5d:c8:0b:3d:d0:e4:64:f5:26:8f:28:f0:06:13:d5:f8:7f: da:49:aa:b9:64:11:75:14:95:14:56:57:db:b6:18:60:be:ff: 3b:4c:47:b4:37:07:1b:b1:de:23:fb:00:3f:6a:a7:58:81:fc: 74:66:c7:22:1b:97:58:f9:34:71:18:2e:ff:4a:71:ab:20:f5: ff:e4:06:97:07:27:87:8a:85:5f:9c:05:16:fc:66:6e:c4:27: b7:9a:e3:c6:18:47:67:c0:53:aa:75:15:cf:43:cf:a5:3a:e5: 55:84:af:5e:b8:25:9b:98:55:d8:86:70:8c:e1:b8:7f:39:84: b2:6d:fa:83:3c:9c:f6:da:46:6f:fb:9a:0d:37:1a:1c:8b:1e: bc:83:4a:ba:18:14:a0:ba:a6:3e:8c:fb:38:8d:69:b0:e5:0f: 20:7d:7d:5c:47:24:df:97:2d:ec:48:a5:c5:20:bd:15:1d:0e: 06:d1:48:a8:9e:af:4a:8d:3b:4c:d1:7e:ed:05:c6:ea:89:7c: dc:be:88:74:0f:23:cb:12:ae:75:d2:de:22:b1:03:bd:1c:92: 4f:57:a8:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNjE1MDIwNDIyWhcNMjUwNjIyMDIwNDIyWjAYMRYwFAYD VQQDEw02ODRlMmEyNi1mOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T++0yeTNfHxNWJXerM5aHUquTjIpD5xkA0pVosI2YIq3pYVplsH+rrjQnN7 /ogx6Dxbxxgi2ZjVmFFUNvXZEFI6+lZGaLxbaLAtokS91fkgTrlIvdvnIyM3uUjp IFb3mj4uv7P9usoyDKgNnjEQO9n4QUwazMHl6r41rnvapTK20M3dAwyR63u62DWi z7rVJqrNzLCZej+ozrHGPvp95sUe5Q1qPKEnOMCOLhLYXpaKPc2n8VA7glQF2qIn DJTk7gkf4G1Jc2iuEfvo9b527SGCjELK1JCZXMrSAcaCK+A+0JWQ4jNtQq5YlzNW zkxtmvDA5JfAdC6xaNacJ37yOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9OvRPG be1QXq8xlyoZbWP+YbZ5MB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIKm5iuyZjav9nBnC+EQFWusCIXHAR+PZN38SwUomPQYTByfEhXcgL PdDkZPUmjyjwBhPV+H/aSaq5ZBF1FJUUVlfbthhgvv87TEe0Nwcbsd4j+wA/aqdY gfx0ZsciG5dY+TRxGC7/SnGrIPX/5AaXByeHioVfnAUW/GZuxCe3muPGGEdnwFOq dRXPQ8+lOuVVhK9euCWbmFXYhnCM4bh/OYSybfqDPJz22kZv+5oNNxocix68g0q6 GBSguqY+jPs4jWmw5Q8gfX1cRyTfly3sSKXFIL0VHQ4G0Uionq9KjTtM0X7tBcbq iXzcvoh0DyPLEq510t4isQO9HJJPV6iI -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:02 2025 by rpki-client