$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: kPinWo1qGTjNFHULZPQNAqI/pyg4sX4Joob7Gby8Svg= Subject key identifier: 7F:69:BC:E9:2A:29:35:E2:43:EF:5A:ED:22:99:63:20:B2:07:26:EC Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 34AA Signing time: Fri 08 Aug 2025 15:11:52 +0000 Manifest this update: Fri 08 Aug 2025 15:11:52 +0000 Manifest next update: Fri 15 Aug 2025 15:11:52 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: uB7mAA+zvJdBPRjcRqPKDdL0vpZRoMCODoXSVIdryGk=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Aug 8 15:11:52 2025 GMT Not After : Aug 15 15:11:52 2025 GMT Subject: CN=689613b8-cf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:9a:52:2a:c0:d8:bf:95:4d:ef:ce:1d:2f: da:5c:21:d4:42:77:ce:cb:92:50:d3:08:ca:aa:e0: b1:01:11:fe:26:2a:1c:a1:56:2a:3f:a8:34:f2:34: 38:32:5e:6e:05:70:d6:f8:cb:c6:ca:f2:dc:e7:e1: 70:38:dd:b3:81:e5:ee:13:78:d3:9e:6e:d9:03:ad: 6a:ed:61:2e:59:68:2f:28:31:80:c8:70:ca:b0:d3: b3:64:c2:1f:af:8f:86:3c:14:1a:1d:ce:86:93:92: f2:1a:52:0a:27:1e:0f:a6:6f:c9:d3:a0:85:a5:93: a8:d7:9f:c1:cb:97:f7:a1:64:b5:f5:44:92:3c:38: 85:ac:50:66:13:f2:9d:4f:a8:02:35:bc:3e:86:02: d0:b6:ec:74:0a:c1:1d:a1:7e:2d:95:47:8a:fc:27: f6:f5:db:91:7d:8a:94:13:38:43:51:91:11:ba:4c: b1:f6:e7:3b:94:ac:8a:95:2b:9f:8f:a6:a8:b4:98: cc:6a:fb:76:db:86:80:48:76:b0:3d:e1:3a:7e:cb: 61:85:eb:0f:29:51:1d:39:ba:59:87:63:ea:4c:f2: 2d:91:9b:bf:b9:14:5a:b2:ad:f0:cb:ad:e6:58:22: 4c:a6:b3:05:aa:2c:0f:11:8c:97:28:17:35:a9:5e: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:BC:E9:2A:29:35:E2:43:EF:5A:ED:22:99:63:20:B2:07:26:EC X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:48:2d:aa:be:95:23:02:84:da:71:ab:c1:ca:be:c0:ca:86: 5d:0e:db:c8:ba:a7:50:c7:a7:d8:58:48:6f:c0:78:1f:45:a7: 54:8b:d5:1b:d9:6f:be:a5:5b:29:c2:23:15:91:f7:26:60:c6: 9e:78:b0:e5:94:97:f1:8c:09:9f:58:e5:1c:15:88:bf:4b:cc: 5c:b4:b6:ce:17:b2:9a:4a:2e:72:24:ca:82:32:1f:64:a4:74: 09:33:6b:ee:9b:93:63:ad:f1:84:4f:93:fc:c0:06:3f:b6:92: 04:0a:ba:8b:04:93:80:f9:5f:e8:96:f8:bd:4b:32:5f:cd:97: a4:11:20:fb:c0:da:fe:60:13:7b:cf:54:9c:15:77:1d:cd:1b: 99:70:e7:3a:3c:60:5b:4b:0e:9a:bd:9a:36:15:d1:00:ec:b8: 08:f5:78:5a:3e:e8:44:a3:05:b6:fb:62:23:0a:5e:5f:89:6c: a6:cc:42:aa:ea:28:bd:e8:ca:9f:90:d9:4a:27:61:4a:06:c7: c2:1c:e1:8a:a7:6e:e0:2c:0d:f9:38:2e:71:42:f9:b1:5f:96: 98:e2:45:ae:55:14:ab:88:e9:61:54:b9:66:5d:27:37:31:91: da:ea:98:d5:d8:79:44:69:73:96:7a:64:5d:1e:dc:b7:99:64: 30:13:a5:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUwODA4MTUxMTUyWhcNMjUwODE1MTUxMTUyWjAYMRYwFAYD VQQDEw02ODk2MTNiOC1jZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTKaUirA2L+VTe/OHS/aXCHUQnfOy5JQ0wjKquCxARH+JiocoVYqP6g08jQ4 Ml5uBXDW+MvGyvLc5+FwON2zgeXuE3jTnm7ZA61q7WEuWWgvKDGAyHDKsNOzZMIf r4+GPBQaHc6Gk5LyGlIKJx4Ppm/J06CFpZOo15/By5f3oWS19USSPDiFrFBmE/Kd T6gCNbw+hgLQtux0CsEdoX4tlUeK/Cf29duRfYqUEzhDUZERukyx9uc7lKyKlSuf j6aotJjMavt224aASHawPeE6fsthhesPKVEdObpZh2PqTPItkZu/uRRasq3wy63m WCJMprMFqiwPEYyXKBc1qV6T2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9pvOkq KTXiQ+9a7SKZYyCyBybsMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgSC2qvpUjAoTacavByr7AyoZdDtvIuqdQx6fYWEhvwHgfRadUi9Ub 2W++pVspwiMVkfcmYMaeeLDllJfxjAmfWOUcFYi/S8xctLbOF7KaSi5yJMqCMh9k pHQJM2vum5NjrfGET5P8wAY/tpIECrqLBJOA+V/olvi9SzJfzZekESD7wNr+YBN7 z1ScFXcdzRuZcOc6PGBbSw6avZo2FdEA7LgI9XhaPuhEowW2+2IjCl5fiWymzEKq 6ii96MqfkNlKJ2FKBsfCHOGKp27gLA35OC5xQvmxX5aY4kWuVRSriOlhVLlmXSc3 MZHa6pjV2HlEaXOWemRdHty3mWQwE6UG -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:56 2025 by rpki-client