$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: sIso+lyqRtzyFsTWuRgI1wXIKyH01SZFljfNaC+rocY= Subject key identifier: 12:84:3C:79:6C:A6:4A:C7:6B:EB:F7:6E:2E:E1:35:B6:92:FD:BB:35 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: DA Signing time: Fri 13 Jun 2025 04:34:26 +0000 Manifest this update: Fri 13 Jun 2025 04:34:26 +0000 Manifest next update: Fri 20 Jun 2025 04:34:25 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: glrbNYqr7qLl6J9w7QeodvTZYgIC6VyVUocemGrEQhc=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Jun 13 04:34:26 2025 GMT Not After : Jun 20 04:34:25 2025 GMT Subject: CN=684baa52-fc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:9f:7c:3e:ae:d6:d3:f3:57:75:8a:7a:1d: 66:0e:b9:3b:df:18:e5:d3:22:03:40:c5:c3:34:e4: d2:bf:67:f2:cd:7a:78:91:0d:f8:fa:e4:8e:36:21: 3e:5a:47:34:fd:44:33:c1:dc:5c:d8:c9:d9:29:20: af:0b:6a:b1:ca:0b:27:e3:52:8d:38:5e:38:7a:42: 69:10:4c:be:61:54:24:7a:44:00:82:4e:05:d2:10: b3:ed:69:36:62:1f:38:dd:aa:c0:3b:a6:01:54:23: f5:5a:7e:b0:71:c8:4e:c5:80:41:0e:38:47:ed:7a: 64:cc:f0:a0:17:e6:43:87:7b:e2:f0:89:68:49:e1: 95:ce:a5:61:f3:df:32:6b:d4:20:bf:5f:69:3d:73: 81:52:e4:9b:b2:cc:26:62:0c:84:7f:c3:06:7b:2a: 83:1b:09:eb:2d:93:36:f6:d9:ad:8e:8d:5d:b2:a2: 4d:a2:8c:bd:57:39:7c:c7:2f:d6:35:5a:00:e5:6d: 1a:e2:cd:a2:3b:cc:d3:a7:0c:d2:67:d1:bc:1d:91: 5d:50:73:8e:28:a3:07:94:1a:79:8d:f5:29:40:a2: 7c:23:4a:43:fc:ef:63:af:a9:7c:ff:7d:74:ca:9a: ad:1b:f2:c8:44:5b:6e:3b:44:e2:71:04:82:8d:09: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:84:3C:79:6C:A6:4A:C7:6B:EB:F7:6E:2E:E1:35:B6:92:FD:BB:35 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f2:07:d4:f9:78:0c:00:fa:36:17:be:02:20:e9:db:b4:04: 29:db:ce:4d:d9:a0:a4:69:0d:92:c4:f5:ec:cb:c0:6e:aa:03: 0c:cb:1b:4b:5d:f6:1e:b4:41:dc:45:47:ca:a1:a8:0d:79:27: 5b:5d:db:b6:2a:4f:ea:d0:3a:67:7f:2d:5e:b3:97:90:be:78: e1:34:47:b4:0a:44:ec:d0:52:4b:9a:e8:02:be:36:fe:cc:c9: 3c:18:6e:d8:92:89:b7:fc:be:97:e8:8d:13:54:51:de:50:9b: 9d:86:6e:72:e0:42:aa:c0:c8:af:7e:94:46:64:14:21:02:f2: 4c:39:b8:0d:b8:c5:99:42:32:d4:82:71:ba:67:65:d6:fe:31: 72:8e:11:ba:b9:6d:93:19:72:b6:02:a7:ec:69:80:a1:f8:6c: 93:a2:73:06:f8:72:77:c2:9d:7d:8c:14:c0:66:49:be:67:d1: 41:d5:a6:38:23:79:9b:6e:ec:be:46:9c:c3:3c:3c:a3:2d:f7: 0b:98:06:63:20:16:f0:4d:cb:92:e7:f9:1e:1c:08:01:80:23: 59:99:0f:a8:1b:8f:e9:50:2d:9d:fc:5c:00:45:d8:5a:6c:a0: 37:c9:84:7a:f6:12:e5:6e:0d:a0:c6:73:0d:82:e5:4a:2e:18: c3:30:f7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwNjEzMDQzNDI2WhcNMjUwNjIwMDQzNDI1WjAYMRYwFAYD VQQDEw02ODRiYWE1Mi1mYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPOffD6u1tPzV3WKeh1mDrk73xjl0yIDQMXDNOTSv2fyzXp4kQ34+uSONiE+ Wkc0/UQzwdxc2MnZKSCvC2qxygsn41KNOF44ekJpEEy+YVQkekQAgk4F0hCz7Wk2 Yh843arAO6YBVCP1Wn6wcchOxYBBDjhH7XpkzPCgF+ZDh3vi8IloSeGVzqVh898y a9Qgv19pPXOBUuSbsswmYgyEf8MGeyqDGwnrLZM29tmtjo1dsqJNooy9Vzl8xy/W NVoA5W0a4s2iO8zTpwzSZ9G8HZFdUHOOKKMHlBp5jfUpQKJ8I0pD/O9jr6l8/310 ypqtG/LIRFtuO0TicQSCjQkJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKEPHls pkrHa+v3bi7hNbaS/bs1MB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs8gfU+XgMAPo2F74CIOnbtAQp285N2aCkaQ2SxPXsy8BuqgMMyxtL XfYetEHcRUfKoagNeSdbXdu2Kk/q0Dpnfy1es5eQvnjhNEe0CkTs0FJLmugCvjb+ zMk8GG7Ykom3/L6X6I0TVFHeUJudhm5y4EKqwMivfpRGZBQhAvJMObgNuMWZQjLU gnG6Z2XW/jFyjhG6uW2TGXK2AqfsaYCh+GyTonMG+HJ3wp19jBTAZkm+Z9FB1aY4 I3mbbuy+RpzDPDyjLfcLmAZjIBbwTcuS5/keHAgBgCNZmQ+oG4/pUC2d/FwARdha bKA3yYR69hLlbg2gxnMNguVKLhjDMPfd -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:39 2025 by rpki-client