$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: wUypkMx6snG7RrgG5Wf+A0j3sINy6z3vjmuFcDycbSA= Subject key identifier: 93:52:67:51:09:55:72:71:28:55:0D:B9:65:FE:D8:21:4D:E7:6A:36 Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0601 Signing time: Mon 16 Jun 2025 22:32:41 +0000 Manifest this update: Mon 16 Jun 2025 22:32:41 +0000 Manifest next update: Mon 23 Jun 2025 22:32:41 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: NGmwk/tJYC0Pf52xMZQ+2HCX49NQPBN92M73wKeRG1k=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Jun 16 22:32:41 2025 GMT Not After : Jun 23 22:32:41 2025 GMT Subject: CN=68509b89-7647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:83:2e:24:3f:1e:ce:04:97:3f:d8:eb:43:79: 13:53:99:cf:14:ae:be:71:3a:d3:68:4b:a4:66:77: fe:91:3c:68:e8:79:19:34:fc:2b:b4:2a:4b:93:14: 03:28:a2:eb:ed:22:83:50:95:00:b9:f9:b3:31:b1: 50:91:63:ea:85:07:21:e9:1d:6d:a4:4b:e2:53:91: 80:38:eb:f7:35:e5:69:7d:04:72:a9:53:93:45:9c: 23:20:04:38:ca:2b:f5:d5:e4:ed:01:5e:f5:2a:83: 4f:b6:e8:5e:82:d9:b0:1e:90:5d:61:f5:ed:b2:6b: 91:b7:af:7d:62:ec:15:f7:58:db:24:fa:f3:b5:0b: 3d:b7:7e:75:c0:04:07:c3:c2:3b:57:b5:1c:1d:02: 80:83:1f:69:ee:0f:7f:dd:b5:14:bf:b3:98:ab:e3: 3f:c5:49:f6:a4:74:3d:13:4c:b0:e2:f7:46:29:81: 79:bd:b2:28:70:b5:a2:38:66:95:43:4d:2d:88:9d: a4:d5:b4:b0:59:d2:43:7e:a1:13:34:5e:6d:e8:d6: da:e1:b2:32:82:ef:a0:b1:3b:6d:f6:54:33:64:48: c8:e0:5a:12:dc:c4:7e:ac:0f:25:be:32:42:61:bf: 55:18:ca:47:d5:eb:67:4c:d0:06:8f:33:75:25:fb: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:52:67:51:09:55:72:71:28:55:0D:B9:65:FE:D8:21:4D:E7:6A:36 X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:9d:32:ca:a7:ce:56:c6:aa:e0:51:72:68:82:de:3f:97:ac: 40:6c:dc:f0:bd:98:cb:99:fc:82:e4:1c:8a:7b:92:3c:9e:fa: 9d:da:98:ea:ff:95:8c:a0:ab:c5:70:5b:ad:de:ce:7e:75:0e: 17:d3:38:ed:88:a3:a7:72:c5:06:ee:ad:a5:35:30:5f:73:27: df:b4:57:21:ce:f2:f4:56:ed:95:f4:72:e5:b3:b4:9a:81:0d: 68:cc:10:8a:45:7d:fb:6e:e8:f8:9f:7a:71:d0:f8:bc:34:1e: f2:a5:7d:21:c6:9a:d0:48:74:39:d3:20:23:fb:a5:f1:6b:08: 64:c7:76:69:50:aa:d8:90:d2:1e:b4:5e:bf:dc:01:2d:51:02: 48:48:12:e1:7b:bf:2c:3d:d7:be:67:2d:69:ff:db:d0:a4:34: bb:01:74:6d:06:85:f2:84:98:8d:5a:62:7f:1e:a6:40:47:91: 63:2f:60:de:cc:db:20:cd:96:50:58:0e:58:5e:86:5f:91:64: 51:d8:99:3d:7e:f8:40:93:8a:62:d9:bd:bb:a8:9b:71:cf:0b: 85:7e:4a:9a:2b:22:f2:13:f9:39:7e:9e:22:a9:ff:43:b1:8b: cc:2f:51:64:79:43:a0:74:2f:9d:b0:b8:a1:63:47:cc:52:61: 42:19:96:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUwNjE2MjIzMjQxWhcNMjUwNjIzMjIzMjQxWjAYMRYwFAYD VQQDEw02ODUwOWI4OS03NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYMuJD8ezgSXP9jrQ3kTU5nPFK6+cTrTaEukZnf+kTxo6HkZNPwrtCpLkxQD KKLr7SKDUJUAufmzMbFQkWPqhQch6R1tpEviU5GAOOv3NeVpfQRyqVOTRZwjIAQ4 yiv11eTtAV71KoNPtuhegtmwHpBdYfXtsmuRt699YuwV91jbJPrztQs9t351wAQH w8I7V7UcHQKAgx9p7g9/3bUUv7OYq+M/xUn2pHQ9E0yw4vdGKYF5vbIocLWiOGaV Q00tiJ2k1bSwWdJDfqETNF5t6Nba4bIygu+gsTtt9lQzZEjI4FoS3MR+rA8lvjJC Yb9VGMpH1etnTNAGjzN1JftQrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNSZ1EJ VXJxKFUNuWX+2CFN52o2MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJnTLKp85WxqrgUXJogt4/l6xAbNzwvZjLmfyC5ByKe5I8nvqd2pjq /5WMoKvFcFut3s5+dQ4X0zjtiKOncsUG7q2lNTBfcyfftFchzvL0Vu2V9HLls7Sa gQ1ozBCKRX37buj4n3px0Pi8NB7ypX0hxprQSHQ50yAj+6Xxawhkx3ZpUKrYkNIe tF6/3AEtUQJISBLhe78sPde+Zy1p/9vQpDS7AXRtBoXyhJiNWmJ/HqZAR5FjL2De zNsgzZZQWA5YXoZfkWRR2Jk9fvhAk4pi2b27qJtxzwuFfkqaKyLyE/k5fp4iqf9D sYvML1FkeUOgdC+dsLihY0fMUmFCGZZn -----END CERTIFICATE-----Generated at Wed Jun 18 21:28:45 2025 by rpki-client