$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json) Hash identifier: tmnoUNHIGXgGii0cgmhSByFP8zO8YNrwOXT/MJI+BSI= Subject key identifier: BA:31:8C:91:60:F8:1E:18:99:D2:55:43:64:31:21:B7:91:B9:BB:BD Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft Manifest number: 05C1 Signing time: Mon 16 Jun 2025 22:44:38 +0000 Manifest this update: Mon 16 Jun 2025 22:44:37 +0000 Manifest next update: Mon 23 Jun 2025 22:44:37 +0000 Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: 85ECax1vZ6C9PngZMg0hPMZj6eMs7HA2kLi5WSKHAOs=) 2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: E/ZSFb0w8l7IP55HohiEiKQ/xTqSgiZ1I0q7vfGX9Y0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Jun 16 22:44:37 2025 GMT Not After : Jun 23 22:44:37 2025 GMT Subject: CN=68509e56-0426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:b2:ad:78:84:34:9e:53:09:fa:86:5e:11: 1a:95:69:62:98:68:be:3e:da:24:99:bf:8e:1b:bc: e0:53:22:91:ab:74:3c:a0:35:db:da:3f:51:ff:85: b2:6c:b1:b9:38:e0:6d:8c:a2:a1:22:c7:c5:ea:c5: 4b:a3:be:5d:43:a3:d5:40:84:78:73:33:36:66:d4: 47:e2:67:71:d1:0a:61:e8:ec:7c:e1:f2:93:2c:21: 73:72:ae:89:17:24:7b:ae:96:50:a5:c3:bd:05:ef: db:cd:fb:b4:3a:fb:29:29:8a:c3:17:dd:4a:02:22: 51:78:31:ac:a0:00:83:45:8d:ec:5d:05:bc:11:71: dd:bf:3b:66:0a:a6:30:90:e0:b0:b6:e0:84:e3:f9: 14:10:ae:51:e5:9f:a0:32:ad:03:3e:35:8c:25:f5: 07:d1:e8:90:f0:6e:90:db:4f:9e:05:d0:7e:07:26: ad:42:12:be:ba:b3:ff:9f:52:dd:91:22:e3:14:34: 67:d9:08:15:02:04:40:bc:af:e4:9a:cb:26:58:d8: 77:08:12:fd:72:a0:0e:db:a3:fa:ae:3d:b8:34:26: a2:3c:65:fd:bb:20:50:82:9a:0f:aa:d0:b4:36:64: fb:a9:e5:14:8c:b2:32:82:37:91:e1:d8:98:2e:1b: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:31:8C:91:60:F8:1E:18:99:D2:55:43:64:31:21:B7:91:B9:BB:BD X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2b:d4:6b:77:68:c7:2e:b9:07:fa:42:c4:8e:11:21:dc:57: 37:08:f3:fe:63:03:61:d6:69:2e:55:e1:af:82:4d:59:e4:94: 7f:4d:8d:f1:7e:20:9b:c0:18:48:74:06:c5:9b:33:ee:d3:b4: 07:82:53:6b:78:9f:5b:83:02:11:ce:e4:8f:b7:d7:fc:6f:e1: 13:53:af:92:43:6d:80:92:26:dd:72:fd:49:ef:f5:08:31:f0: a0:5e:06:1e:a3:62:0c:0a:1c:5c:4b:9c:ba:ce:d5:15:6b:30: 3f:8d:e6:a0:eb:aa:4c:fd:44:88:05:8a:58:92:23:03:70:ef: e4:6b:e4:19:c9:18:40:9e:37:87:5b:df:5e:62:73:62:59:3e: 9f:19:85:0b:e2:83:e5:0d:8c:d0:ad:d3:1b:c5:73:01:d3:55: 08:80:82:de:90:a7:06:d0:2c:76:b8:08:58:58:b9:90:be:b3: da:21:96:a2:a9:f1:3e:4f:63:59:f1:05:95:cb:63:22:7f:87: 1e:51:8f:83:a7:18:24:af:4e:8f:b2:67:53:e6:4d:09:a9:12: d3:79:26:77:2f:66:f8:97:35:95:c1:02:ce:90:a5:4e:b7:fe: 89:7e:cb:04:f4:12:c4:3e:de:fd:6c:ca:e4:07:58:09:50:0e: 39:2c:f1:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUwNjE2MjI0NDM3WhcNMjUwNjIzMjI0NDM3WjAYMRYwFAYD VQQDEw02ODUwOWU1Ni0wNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0uyrXiENJ5TCfqGXhEalWlimGi+Ptokmb+OG7zgUyKRq3Q8oDXb2j9R/4Wy bLG5OOBtjKKhIsfF6sVLo75dQ6PVQIR4czM2ZtRH4mdx0Qph6Ox84fKTLCFzcq6J FyR7rpZQpcO9Be/bzfu0OvspKYrDF91KAiJReDGsoACDRY3sXQW8EXHdvztmCqYw kOCwtuCE4/kUEK5R5Z+gMq0DPjWMJfUH0eiQ8G6Q20+eBdB+ByatQhK+urP/n1Ld kSLjFDRn2QgVAgRAvK/kmssmWNh3CBL9cqAO26P6rj24NCaiPGX9uyBQgpoPqtC0 NmT7qeUUjLIygjeR4diYLhsGCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoxjJFg +B4YmdJVQ2QxIbeRubu9MB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMK9Rrd2jHLrkH+kLEjhEh3Fc3CPP+YwNh1mkuVeGvgk1Z5JR/TY3x fiCbwBhIdAbFmzPu07QHglNreJ9bgwIRzuSPt9f8b+ETU6+SQ22Akibdcv1J7/UI MfCgXgYeo2IMChxcS5y6ztUVazA/jeag66pM/USIBYpYkiMDcO/ka+QZyRhAnjeH W99eYnNiWT6fGYUL4oPlDYzQrdMbxXMB01UIgILekKcG0Cx2uAhYWLmQvrPaIZai qfE+T2NZ8QWVy2Mif4ceUY+Dpxgkr06PsmdT5k0JqRLTeSZ3L2b4lzWVwQLOkKVO t/6JfssE9BLEPt79bMrkB1gJUA45LPGk -----END CERTIFICATE-----Generated at Tue Jun 17 16:47:25 2025 by rpki-client