$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: YYdyzPzeoWDJUC4jo/Cx6y0ZnoNaDJ1eEIdsRjuKiag= Subject key identifier: 6E:C0:53:C9:8A:A7:29:E5:56:AE:28:CB:72:6B:A7:4D:CF:D3:C0:22 Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 0362 Signing time: Tue 17 Jun 2025 00:33:03 +0000 Manifest this update: Tue 17 Jun 2025 00:33:02 +0000 Manifest next update: Tue 24 Jun 2025 00:33:01 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: tDyPLDvOiBzrWqqSNn4DVIimmJUDummqPco3z0fyE8k=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: m/bIsnc72f+GKlsPAyrWqEs82wNRpWBNpwKZDStdnM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Jun 17 00:33:02 2025 GMT Not After : Jun 24 00:33:01 2025 GMT Subject: CN=6850b7bf-d969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:ff:08:4b:f5:a7:b9:58:b7:e0:0e:84:cc: ed:17:5b:fc:f8:89:1d:28:cc:54:73:d0:2e:06:d8: d1:ac:77:a4:ec:18:02:c1:ed:cb:9e:34:6b:62:8c: 88:8d:ac:cd:27:30:83:db:64:14:69:f5:e2:8a:7b: 71:40:c3:f2:39:3f:f3:19:c0:e6:89:a7:f3:4f:7c: 10:b8:d3:06:22:b6:ef:64:a9:56:62:83:fb:1c:f7: 6f:52:3e:92:93:fb:b4:c4:85:d6:85:15:23:d5:4c: e0:31:26:f2:48:1b:fb:13:fb:91:4f:24:cf:ae:51: 4f:b1:65:83:ad:ca:92:10:1c:5d:a0:47:19:ac:37: 09:f4:20:5e:4a:91:65:2e:57:37:6f:1d:9c:14:9f: 6f:27:3d:b5:22:56:4c:d9:95:97:30:f8:95:66:20: 92:dd:0d:d1:7c:9b:d6:2f:6b:ba:5c:ff:e2:9c:39: 07:7c:1d:65:33:da:41:ea:a8:7a:fc:d8:9c:78:f4: 16:96:16:1e:14:5a:75:22:f9:6c:89:cc:56:9e:55: 20:53:fc:a4:7c:27:de:9e:d1:4b:05:b6:d8:69:a1: ab:bb:24:6f:e5:51:9a:35:74:dc:b8:5e:3f:c9:0a: 58:7b:9b:ed:b4:20:2b:ab:f5:6c:07:44:f2:a2:db: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C0:53:C9:8A:A7:29:E5:56:AE:28:CB:72:6B:A7:4D:CF:D3:C0:22 X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:54:07:6e:8d:d6:da:4e:91:c1:1b:ed:3e:ab:e9:a3:b1:9c: 73:04:7c:a6:01:d6:c7:1e:87:bf:06:5b:58:a7:ab:dc:1b:14: fb:e6:58:8c:3e:8c:40:f9:ff:30:bf:3a:58:a1:24:72:95:80: da:a4:30:0d:83:86:9c:89:8b:52:cb:6f:e8:41:07:e3:11:10: 77:52:b3:e6:97:5f:10:62:ef:89:37:c1:53:e6:63:67:3e:aa: 96:dd:a6:6f:b7:a5:33:aa:9b:ce:cd:ee:9e:87:67:d2:e8:74: 5e:67:ad:d1:f2:82:c4:6a:d3:62:0b:1b:f7:0b:3b:bb:65:7c: fd:4f:52:8f:35:7a:a7:94:77:88:a4:d0:49:62:d9:67:8d:37: cf:0a:e5:fe:7d:4a:3f:b5:a0:56:ad:c5:2d:0c:8b:5d:65:c0: eb:26:ad:c3:0b:73:52:3e:44:26:83:75:40:31:3d:56:89:1c: 30:9d:78:07:3d:fb:62:b6:b5:26:27:5d:86:84:f1:79:10:dc: 19:d4:94:33:c8:4e:53:0e:a3:5e:6f:53:b8:77:8b:55:5b:a2: 14:c0:f9:10:d7:0b:a8:46:bb:51:e2:a6:84:1a:41:fd:5c:6a: ff:5b:fc:72:12:94:ab:63:bb:5a:9c:8c:8e:7f:3a:e3:b6:93: 99:af:0b:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjUwNjE3MDAzMzAyWhcNMjUwNjI0MDAzMzAxWjAYMRYwFAYD VQQDEw02ODUwYjdiZi1kOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqj/CEv1p7lYt+AOhMztF1v8+IkdKMxUc9AuBtjRrHek7BgCwe3LnjRrYoyI jazNJzCD22QUafXiintxQMPyOT/zGcDmiafzT3wQuNMGIrbvZKlWYoP7HPdvUj6S k/u0xIXWhRUj1UzgMSbySBv7E/uRTyTPrlFPsWWDrcqSEBxdoEcZrDcJ9CBeSpFl Llc3bx2cFJ9vJz21IlZM2ZWXMPiVZiCS3Q3RfJvWL2u6XP/inDkHfB1lM9pB6qh6 /NicePQWlhYeFFp1IvlsicxWnlUgU/ykfCfentFLBbbYaaGruyRv5VGaNXTcuF4/ yQpYe5vttCArq/VsB0TyotvsiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7AU8mK pynlVq4oy3Jrp03P08AiMB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoVAdujdbaTpHBG+0+q+mjsZxzBHymAdbHHoe/BltYp6vcGxT75liM PoxA+f8wvzpYoSRylYDapDANg4aciYtSy2/oQQfjERB3UrPml18QYu+JN8FT5mNn PqqW3aZvt6UzqpvOze6eh2fS6HReZ63R8oLEatNiCxv3Czu7ZXz9T1KPNXqnlHeI pNBJYtlnjTfPCuX+fUo/taBWrcUtDItdZcDrJq3DC3NSPkQmg3VAMT1WiRwwnXgH PftitrUmJ12GhPF5ENwZ1JQzyE5TDqNeb1O4d4tVW6IUwPkQ1wuoRrtR4qaEGkH9 XGr/W/xyEpSrY7tanIyOfzrjtpOZrwt0 -----END CERTIFICATE-----Generated at Wed Jun 18 15:04:37 2025 by rpki-client