$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: e5+JHEePjZUL/nRzT3XK3O85VUTeFouwqrvxTUqaA1o= Subject key identifier: D6:E5:3D:3F:C1:0D:AA:9E:CD:B8:C5:6D:27:43:69:2E:63:DB:F5:D5 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 0671 Signing time: Mon 16 Jun 2025 22:05:10 +0000 Manifest this update: Mon 16 Jun 2025 22:05:10 +0000 Manifest next update: Mon 23 Jun 2025 22:05:10 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: wGeV3l1xzdWGngE+TqQlZZGLo82nEwrT+uXsaViDys4=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: bzwAo1vTwZtUvpqV0SE31TfJe7tyOs8AEfKtkNJnl48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Jun 16 22:05:10 2025 GMT Not After : Jun 23 22:05:10 2025 GMT Subject: CN=68509516-5330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:54:32:46:f3:41:91:12:76:06:f5:d0:31: 1f:85:b6:61:81:89:5e:93:be:4c:bc:c1:07:7c:3e: c7:05:44:8a:66:fd:2b:63:2c:3c:73:46:9f:4e:d9: 00:c6:23:5e:c4:cb:f4:50:a2:ca:72:ce:59:c9:59: 30:1b:6e:83:f5:84:f9:b7:92:da:42:45:8d:96:ce: c7:02:54:1c:c9:8a:45:f6:b3:61:79:ae:84:8f:09: ff:ff:a5:39:18:f4:f1:39:67:64:f3:14:4d:f6:f2: f6:2d:35:7c:c8:44:c5:74:8a:f1:40:19:e3:2e:ff: 22:98:e4:6d:ad:89:ff:e2:bc:b2:c3:f4:2f:f5:a6: 60:43:d7:84:3e:67:af:56:37:46:eb:6c:13:2b:f6: e4:be:c3:da:b3:24:ba:88:e5:fe:2d:4f:0c:e2:26: f4:b5:5b:9d:e6:35:8b:b1:86:53:73:e9:ae:7e:1e: a9:de:6e:be:2f:95:c2:46:4b:d1:c3:5e:fc:97:77: e7:1e:a0:a0:fa:3a:c6:e7:05:04:7d:9e:30:cb:83: 84:d2:e8:77:20:2a:8e:9b:0f:8f:4b:b8:10:44:77: da:6c:b4:da:af:a9:c7:b9:59:87:b8:62:70:5a:0f: 84:98:92:52:b1:c0:36:86:a1:26:e8:62:4e:6a:6a: df:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E5:3D:3F:C1:0D:AA:9E:CD:B8:C5:6D:27:43:69:2E:63:DB:F5:D5 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ec:39:f0:80:06:21:6c:5c:81:ea:fa:ab:01:77:05:25:93: 0e:1f:b2:17:2a:eb:a4:b2:21:09:a4:ec:fe:a3:2a:ff:32:8b: 71:ac:e5:8d:d1:35:a1:6f:ef:65:dd:a8:de:85:7d:82:be:c3: 0f:d5:9c:f2:12:9b:14:d9:03:34:39:11:83:17:a4:e0:17:32: ba:42:0e:0a:df:0f:62:2c:24:8e:c5:29:b6:8f:cf:9c:cb:17: c1:e1:a1:a5:0a:92:b6:67:cc:73:2a:21:ac:b7:71:04:e2:40: cf:86:b5:39:64:55:9f:19:13:2e:86:ac:0f:51:47:14:9b:76: c5:50:9c:0a:fb:37:bc:a1:a0:59:a2:f3:4f:18:30:c9:7e:86: 3c:96:41:3a:0f:7c:3a:1d:04:48:3b:b1:fc:72:da:3d:a3:bc: 22:fc:5a:80:b2:71:ac:d2:be:c9:a1:ff:c6:7f:a1:2e:15:ca: 82:69:16:4b:0f:10:83:13:0d:b5:6b:b7:fc:39:e3:ee:a6:e1: 94:da:c5:d2:97:33:02:98:c0:ba:de:eb:c8:01:0b:8f:ca:e1: 2d:8e:97:bc:de:a2:4c:ab:2b:57:8e:53:14:da:8d:42:63:35: 1a:49:d7:38:18:7b:8c:21:96:f9:fc:49:5e:08:c3:84:56:1d: 12:bd:89:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjUwNjE2MjIwNTEwWhcNMjUwNjIzMjIwNTEwWjAYMRYwFAYD VQQDEw02ODUwOTUxNi01MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKVUMkbzQZESdgb10DEfhbZhgYlek75MvMEHfD7HBUSKZv0rYyw8c0afTtkA xiNexMv0UKLKcs5ZyVkwG26D9YT5t5LaQkWNls7HAlQcyYpF9rNhea6Ejwn//6U5 GPTxOWdk8xRN9vL2LTV8yETFdIrxQBnjLv8imORtrYn/4ryyw/Qv9aZgQ9eEPmev VjdG62wTK/bkvsPasyS6iOX+LU8M4ib0tVud5jWLsYZTc+mufh6p3m6+L5XCRkvR w178l3fnHqCg+jrG5wUEfZ4wy4OE0uh3ICqOmw+PS7gQRHfabLTar6nHuVmHuGJw Wg+EmJJSscA2hqEm6GJOamrfQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNblPT/B DaqezbjFbSdDaS5j2/XVMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7DnwgAYhbFyB6vqrAXcFJZMOH7IXKuuksiEJpOz+oyr/MotxrOWN 0TWhb+9l3ajehX2CvsMP1ZzyEpsU2QM0ORGDF6TgFzK6Qg4K3w9iLCSOxSm2j8+c yxfB4aGlCpK2Z8xzKiGst3EE4kDPhrU5ZFWfGRMuhqwPUUcUm3bFUJwK+ze8oaBZ ovNPGDDJfoY8lkE6D3w6HQRIO7H8cto9o7wi/FqAsnGs0r7Jof/Gf6EuFcqCaRZL DxCDEw21a7f8OePupuGU2sXSlzMCmMC63uvIAQuPyuEtjpe83qJMqytXjlMU2o1C YzUaSdc4GHuMIZb5/EleCMOEVh0SvYkB -----END CERTIFICATE-----Generated at Wed Jun 18 22:14:26 2025 by rpki-client