$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: MvaO07XpGLvki0i/8Ws1NfQ60AO/zC4nmBCwPq7BPQc= Subject key identifier: 73:E9:9D:17:25:4B:DD:00:4A:BB:0C:D6:D9:D2:76:8D:7A:02:D4:C8 Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 0122 Signing time: Fri 13 Jun 2025 03:43:08 +0000 Manifest this update: Fri 13 Jun 2025 03:43:08 +0000 Manifest next update: Fri 20 Jun 2025 03:43:08 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: JP7ZRlmwExP7P5+15y8NQWoM3HEVOIgLVylC1Y6C0NE=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Jun 13 03:43:08 2025 GMT Not After : Jun 20 03:43:08 2025 GMT Subject: CN=684b9e4c-17bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:09:3a:2d:06:ed:5c:34:f8:38:4f:ee:dc:65: 79:66:bf:65:15:e5:0f:9a:ec:6d:07:0c:a1:5a:1e: 9f:02:1d:fd:99:5b:0e:75:51:f4:e5:57:f9:47:f4: fd:98:66:63:d3:0f:b7:94:37:75:b3:cd:9f:a9:6c: f3:bc:a6:50:b1:70:38:83:76:1b:0e:e6:cc:52:6e: 0f:0c:38:71:68:58:ab:91:77:d6:19:1f:40:9a:a0: 3d:40:8d:71:98:18:11:20:2f:84:db:9c:b5:0b:e1: 4f:05:60:d8:49:c3:31:ea:34:19:0a:04:2c:46:82: 5a:c2:0b:f3:16:d2:7c:51:5e:a1:9d:c3:19:20:a3: 3d:a3:57:c1:47:9d:41:ce:07:89:cd:59:8d:50:86: d4:26:fa:e9:82:69:2d:7b:88:ee:03:dd:66:2a:d0: b5:1e:e6:98:14:de:d4:d0:9f:27:43:ed:aa:38:a4: b7:3b:f2:6c:1e:6d:b3:de:13:d7:bd:c1:8f:66:d3: 34:53:f7:cc:71:41:bb:df:ed:61:33:5a:35:e0:33: 66:56:dc:40:28:a4:b0:d3:72:9c:82:6f:3e:ab:bf: 2c:15:3f:18:b4:cf:93:34:7e:ed:25:62:99:85:c0: 5c:e2:bb:7c:05:76:df:36:8f:32:e2:75:84:be:bc: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E9:9D:17:25:4B:DD:00:4A:BB:0C:D6:D9:D2:76:8D:7A:02:D4:C8 X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:37:c2:32:67:7e:d5:a1:79:a1:55:de:9e:97:1a:6f:b5:df: d6:b7:df:96:bc:04:63:8d:64:9b:e6:ce:42:e9:53:e0:ab:ab: 78:df:80:ca:78:c9:d6:7c:44:bf:2a:00:4f:53:8f:dd:6f:54: a2:41:95:fe:fc:62:9b:17:a2:e2:e5:4f:4e:47:6b:6a:9e:d9: 84:a7:c6:10:19:87:12:fa:f6:b8:2c:9e:65:f8:e9:5a:49:2c: 0b:08:f2:29:2f:0a:9e:a3:04:5b:ad:9d:14:ac:e5:6e:e3:e0: d9:c5:ee:dd:8e:9d:21:2c:54:a6:5b:d8:10:99:d4:0b:4e:99: 14:0a:d9:31:d9:72:06:1d:02:95:23:f3:18:f2:33:35:a1:a2: 60:90:10:34:08:a9:dc:f0:9b:2b:de:28:54:0f:78:54:4d:cc: 31:fb:55:14:dc:b3:d2:22:38:c8:a1:45:d0:10:77:6a:60:47: 27:8d:2b:e9:37:93:e0:55:17:db:f5:c5:b8:1b:55:04:97:4c: cd:de:74:2f:5d:3f:52:4c:3b:29:29:7f:41:b7:3b:e2:45:59: 3a:cf:92:7a:83:a2:79:ab:ad:35:91:84:1d:98:e9:10:da:7e: bb:7c:b2:80:60:11:e5:8c:eb:31:86:0f:a5:6d:2d:51:87:b8: 48:23:a2:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjUwNjEzMDM0MzA4WhcNMjUwNjIwMDM0MzA4WjAYMRYwFAYD VQQDEw02ODRiOWU0Yy0xN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Qk6LQbtXDT4OE/u3GV5Zr9lFeUPmuxtBwyhWh6fAh39mVsOdVH05Vf5R/T9 mGZj0w+3lDd1s82fqWzzvKZQsXA4g3YbDubMUm4PDDhxaFirkXfWGR9AmqA9QI1x mBgRIC+E25y1C+FPBWDYScMx6jQZCgQsRoJawgvzFtJ8UV6hncMZIKM9o1fBR51B zgeJzVmNUIbUJvrpgmkte4juA91mKtC1HuaYFN7U0J8nQ+2qOKS3O/JsHm2z3hPX vcGPZtM0U/fMcUG73+1hM1o14DNmVtxAKKSw03Kcgm8+q78sFT8YtM+TNH7tJWKZ hcBc4rt8BXbfNo8y4nWEvryRgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPpnRcl S90ASrsM1tnSdo16AtTIMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXN8IyZ37VoXmhVd6elxpvtd/Wt9+WvARjjWSb5s5C6VPgq6t434DK eMnWfES/KgBPU4/db1SiQZX+/GKbF6Li5U9OR2tqntmEp8YQGYcS+va4LJ5l+Ola SSwLCPIpLwqeowRbrZ0UrOVu4+DZxe7djp0hLFSmW9gQmdQLTpkUCtkx2XIGHQKV I/MY8jM1oaJgkBA0CKnc8Jsr3ihUD3hUTcwx+1UU3LPSIjjIoUXQEHdqYEcnjSvp N5PgVRfb9cW4G1UEl0zN3nQvXT9STDspKX9BtzviRVk6z5J6g6J5q601kYQdmOkQ 2n67fLKAYBHljOsxhg+lbS1Rh7hII6Iq -----END CERTIFICATE-----Generated at Sat Jun 14 17:28:00 2025 by rpki-client