$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: bSYLJMwcHKWoMP7OqQeDeBuaeJ0XIvZaO/WXxyNF+Ig= Subject key identifier: 6C:83:0C:C5:3C:34:CB:4B:57:54:7E:39:43:98:A4:8B:CF:91:48:60 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 019B Signing time: Fri 13 Jun 2025 02:24:27 +0000 Manifest this update: Fri 13 Jun 2025 02:24:26 +0000 Manifest next update: Fri 20 Jun 2025 02:24:26 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: YMXj73WOyML/GYl5p+ldObRiS5+4LCmoZc4yjgszlJU=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Jun 13 02:24:26 2025 GMT Not After : Jun 20 02:24:26 2025 GMT Subject: CN=684b8bda-ecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:90:75:44:4e:70:16:3b:0e:ef:84:78:34:b0: 23:a6:3d:d5:65:8a:3a:71:ad:9b:7f:a2:0b:0d:6d: 65:55:52:34:b5:a2:4a:94:ec:ea:94:2e:36:80:78: d0:6e:d4:e0:47:e1:d2:2a:cf:6f:b3:f0:74:4d:fa: 64:e8:57:85:4f:2c:c4:54:9f:1d:ee:32:e2:59:b4: 78:24:a5:3c:44:b3:1c:fb:1a:50:6f:57:81:8f:e8: be:8d:a8:90:e6:bf:2e:b2:d3:32:5d:a2:7b:2b:2a: bb:2c:95:f7:da:17:fa:b3:54:bc:ce:d4:c3:79:a2: 99:d7:4c:c9:c8:3f:30:1f:8a:ba:ed:22:fe:5f:d1: a2:c5:ce:3a:b9:b2:cf:38:ab:2f:91:4a:76:84:b1: dc:f9:6e:83:a5:ac:bb:6a:9e:d2:1a:86:15:03:cd: eb:30:4b:24:eb:4f:02:1b:ad:2d:3b:a1:a1:f8:58: 46:c2:9b:e8:0e:99:37:a9:91:c7:7b:28:3e:08:c7: c8:32:45:91:b2:eb:29:aa:3a:df:33:fd:66:dd:ba: 21:d6:92:99:78:9d:6d:15:f5:6e:5d:a2:78:b2:c3: bf:c7:6c:73:2e:97:3f:2d:ff:70:52:35:fe:3b:90: 54:69:dd:82:9c:0d:b5:6a:ec:1f:f6:f2:01:4d:9a: 82:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:83:0C:C5:3C:34:CB:4B:57:54:7E:39:43:98:A4:8B:CF:91:48:60 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:08:09:2d:c9:ca:b7:ac:06:24:d8:ef:1f:b2:89:b5:08:e7: fb:0c:d3:ff:45:06:7e:a3:8a:74:e5:71:04:00:d7:e0:ca:0b: e5:b3:74:60:d2:bc:4a:f6:05:7c:37:95:69:a2:4c:0e:4a:c3: 87:62:bb:e6:bd:41:99:a1:08:75:a7:e6:a9:42:5b:27:f2:ae: 51:24:63:ae:19:12:1d:ce:4f:d1:3c:78:5f:34:d9:06:5b:bd: 2a:22:0a:35:31:8b:5d:5c:24:1e:99:4d:7e:06:5d:3d:af:e9: e8:5f:ab:90:a4:17:e5:1c:94:c8:be:d8:4b:4a:31:a7:e5:85: 81:c9:41:6c:56:08:11:81:9d:77:5d:4f:bf:16:65:ab:a0:e7: 19:53:e8:8f:3a:a2:3c:63:79:a6:01:2f:f5:37:66:af:10:2a: e0:bb:33:0b:e4:4f:ed:4c:34:d8:a6:ea:bd:16:e7:6f:cc:bf: 31:99:c6:c4:c7:f2:7a:07:ab:2e:1c:ce:4a:f0:ec:8d:ad:f4: 5c:96:c3:e1:d2:99:6d:99:ad:a6:04:62:85:ea:f2:c7:a4:03: 25:ad:3b:82:cb:f7:a4:21:76:1e:b4:4a:42:48:00:f5:eb:e0: e7:2c:66:28:51:a6:3e:bb:7a:a0:dc:df:ec:7b:e1:49:ca:d4: 6d:29:a7:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwNjEzMDIyNDI2WhcNMjUwNjIwMDIyNDI2WjAYMRYwFAYD VQQDEw02ODRiOGJkYS1lY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25B1RE5wFjsO74R4NLAjpj3VZYo6ca2bf6ILDW1lVVI0taJKlOzqlC42gHjQ btTgR+HSKs9vs/B0Tfpk6FeFTyzEVJ8d7jLiWbR4JKU8RLMc+xpQb1eBj+i+jaiQ 5r8ustMyXaJ7Kyq7LJX32hf6s1S8ztTDeaKZ10zJyD8wH4q67SL+X9Gixc46ubLP OKsvkUp2hLHc+W6Dpay7ap7SGoYVA83rMEsk608CG60tO6Gh+FhGwpvoDpk3qZHH eyg+CMfIMkWRsuspqjrfM/1m3boh1pKZeJ1tFfVuXaJ4ssO/x2xzLpc/Lf9wUjX+ O5BUad2CnA21auwf9vIBTZqCDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyDDMU8 NMtLV1R+OUOYpIvPkUhgMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcCAktycq3rAYk2O8fsom1COf7DNP/RQZ+o4p05XEEANfgygvls3Rg 0rxK9gV8N5VpokwOSsOHYrvmvUGZoQh1p+apQlsn8q5RJGOuGRIdzk/RPHhfNNkG W70qIgo1MYtdXCQemU1+Bl09r+noX6uQpBflHJTIvthLSjGn5YWByUFsVggRgZ13 XU+/FmWroOcZU+iPOqI8Y3mmAS/1N2avECrguzML5E/tTDTYpuq9FudvzL8xmcbE x/J6B6suHM5K8OyNrfRclsPh0pltma2mBGKF6vLHpAMlrTuCy/ekIXYetEpCSAD1 6+DnLGYoUaY+u3qg3N/se+FJytRtKaea -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:39 2025 by rpki-client