$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: s3pYXCDSWwJuIlO4A255V2Gl25HhYkvds//I33CrNWQ= Subject key identifier: 5E:E6:A5:CF:20:22:85:D0:A3:01:CC:0D:04:D4:0A:E9:46:17:05:4E Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0A80 Signing time: Sat 14 Jun 2025 19:26:21 +0000 Manifest this update: Sat 14 Jun 2025 19:26:21 +0000 Manifest next update: Sat 21 Jun 2025 19:26:21 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: aF3lhlm2TWW5lNbculla/3IghAaIfejIbAYopP7uroY=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Jun 14 19:26:21 2025 GMT Not After : Jun 21 19:26:21 2025 GMT Subject: CN=684dccdd-db33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:47:e6:b8:24:05:f5:83:43:fc:42:12:2b: a0:31:db:76:16:26:b3:db:d8:88:85:07:90:5b:86: 8a:d9:6e:ab:73:38:31:00:6c:74:a7:39:2d:7f:1b: 5a:58:e5:2e:0b:c6:b4:0d:11:df:1b:bf:7c:66:7e: 08:0b:cc:af:e5:9a:51:ff:5c:b1:35:cd:01:a6:a8: 97:e0:ec:0a:e0:2c:4c:12:e6:9e:e7:5d:ad:60:37: 0e:ee:01:a4:76:19:cd:34:c7:9f:cd:8a:4b:19:e2: 11:0b:00:88:5b:00:16:f5:8f:15:9f:ea:87:a2:9c: d3:23:49:85:82:3c:d6:e8:83:c7:fd:f4:5d:95:93: 6d:10:1f:ba:58:1f:89:0e:de:0a:69:9c:3d:46:1d: 31:31:c1:32:fe:2b:0d:21:87:b4:14:8e:54:73:5e: 07:93:dd:8a:1e:e1:c9:3f:9f:5b:b0:13:43:28:b2: 81:91:c8:59:f6:53:71:f6:3e:1f:3f:39:2e:a2:49: 4a:21:0b:d8:3f:57:b6:a7:aa:3b:6e:b3:e3:e4:c8: 24:3a:68:e7:95:a5:96:51:dc:da:a5:ad:21:90:37: 40:74:bd:8f:a0:c7:e1:f7:fe:20:25:ac:85:b8:0f: 7e:e9:dd:e6:17:29:22:31:20:88:d5:ed:69:98:87: 4a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:A5:CF:20:22:85:D0:A3:01:CC:0D:04:D4:0A:E9:46:17:05:4E X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9e:76:a8:c3:4b:e1:0c:50:63:23:38:68:b9:cd:f2:de:55: 9b:cb:f1:f8:38:40:cf:b3:6a:50:3e:3a:83:18:86:27:8c:4f: 84:b3:88:cf:7a:d8:69:34:16:f0:7c:b1:32:7a:43:45:bb:69: f7:94:13:23:22:a6:94:c6:bd:b4:ce:c7:50:8a:fa:d4:e1:90: 63:4c:35:f3:44:96:7f:c6:82:8f:ab:da:fc:27:4b:10:da:5b: a5:4f:3f:2b:42:ff:16:b3:3a:76:14:fe:fa:13:72:13:15:60: 55:98:f8:e0:91:6d:94:af:d7:32:40:da:23:06:83:36:a2:41: bf:51:9f:58:94:d2:e8:cd:14:6f:7b:25:17:83:87:94:32:8f: 42:11:98:c0:72:4e:26:46:9a:6e:d8:2f:35:a3:cf:e0:f4:5c: 2a:70:17:de:c0:64:5a:ad:a5:ca:ba:5b:e4:16:75:37:be:56: 1e:b9:31:ad:ec:97:c9:db:cc:f8:0a:4c:74:de:ed:44:12:17: a7:11:f9:96:19:90:e7:1b:0a:92:1d:cc:a2:7c:09:ae:2a:55: 4a:98:a3:7c:ee:83:25:50:72:8c:38:27:7f:4a:ac:21:fc:8e: 08:b3:6e:a2:ca:dd:28:0d:28:3f:ce:cf:91:a7:23:9e:d6:ff: 1b:98:68:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwNjE0MTkyNjIxWhcNMjUwNjIxMTkyNjIxWjAYMRYwFAYD VQQDEw02ODRkY2NkZC1kYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7U1H5rgkBfWDQ/xCEiugMdt2Fiaz29iIhQeQW4aK2W6rczgxAGx0pzktfxta WOUuC8a0DRHfG798Zn4IC8yv5ZpR/1yxNc0BpqiX4OwK4CxMEuae512tYDcO7gGk dhnNNMefzYpLGeIRCwCIWwAW9Y8Vn+qHopzTI0mFgjzW6IPH/fRdlZNtEB+6WB+J Dt4KaZw9Rh0xMcEy/isNIYe0FI5Uc14Hk92KHuHJP59bsBNDKLKBkchZ9lNx9j4f PzkuoklKIQvYP1e2p6o7brPj5MgkOmjnlaWWUdzapa0hkDdAdL2PoMfh9/4gJayF uA9+6d3mFykiMSCI1e1pmIdKeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7mpc8g IoXQowHMDQTUCulGFwVOMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKnnaow0vhDFBjIzhouc3y3lWby/H4OEDPs2pQPjqDGIYnjE+Es4jP ethpNBbwfLEyekNFu2n3lBMjIqaUxr20zsdQivrU4ZBjTDXzRJZ/xoKPq9r8J0sQ 2lulTz8rQv8Wszp2FP76E3ITFWBVmPjgkW2Ur9cyQNojBoM2okG/UZ9YlNLozRRv eyUXg4eUMo9CEZjAck4mRppu2C81o8/g9FwqcBfewGRaraXKulvkFnU3vlYeuTGt 7JfJ28z4Ckx03u1EEhenEfmWGZDnGwqSHcyifAmuKlVKmKN87oMlUHKMOCd/Sqwh /I4Is26iyt0oDSg/zs+RpyOe1v8bmGhz -----END CERTIFICATE-----Generated at Sun Jun 15 10:16:11 2025 by rpki-client