$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft File: 276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json) Hash identifier: aSHqQdoaOyexB43b0AI9AhsY4vtjg2aZJR5eQzZEKd4= Subject key identifier: 88:62:8B:6B:C3:EF:80:21:C4:2A:04:82:D9:99:A0:83:45:19:84:2F Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft Manifest number: 076B Signing time: Wed 18 Jun 2025 21:25:59 +0000 Manifest this update: Wed 18 Jun 2025 21:25:59 +0000 Manifest next update: Wed 25 Jun 2025 21:25:59 +0000 Files and hashes: 1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: dYi0LdZBiMCXTeLINKwDokm/HmaZ2vEyxI6XmVJDv+c=) 2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: Jun 18 21:25:59 2025 GMT Not After : Jun 25 21:25:59 2025 GMT Subject: CN=68532ee7-3535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:2b:d9:2a:b5:20:de:d8:4c:c6:1a:69:82: 7f:1b:de:0b:3c:23:fc:5d:72:8b:b0:76:8e:b3:45: 32:86:b7:28:36:01:57:f7:cb:5d:d4:a1:bf:ea:60: a7:6c:2a:47:74:0d:c3:7d:14:e5:82:83:3f:fe:7d: 57:21:46:84:e0:73:b3:d8:07:f0:d9:2a:b4:8b:6f: de:c3:5c:5e:bd:8e:56:bf:16:40:ec:59:2c:9f:07: 53:34:7b:34:1f:c9:03:f3:96:87:b5:13:f5:7c:cc: c9:06:f2:7f:07:27:3a:6e:cb:ab:5e:7e:67:62:1b: f4:0a:4b:80:1b:f7:a8:45:1f:10:c6:bf:09:bc:52: c0:56:da:76:a4:9b:50:5d:fd:94:f3:7c:10:c0:8a: 93:11:f0:81:54:44:06:69:79:4b:a9:bb:2f:db:e0: 60:0c:59:ff:d3:0e:d8:7f:17:26:96:75:c4:0d:ea: 60:c7:7c:c9:40:0c:a4:94:6a:33:5a:74:3d:8b:6e: bb:8a:97:66:78:94:69:a1:18:d9:73:28:95:7f:66: 2b:4f:8e:01:99:e2:32:9a:db:19:f7:7e:d7:21:da: db:e9:b8:25:f4:31:61:90:d1:d6:cd:00:39:93:74: c2:bc:40:36:38:f7:40:59:34:8f:cf:15:16:a9:d8: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:62:8B:6B:C3:EF:80:21:C4:2A:04:82:D9:99:A0:83:45:19:84:2F X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ef:32:c8:06:83:1b:31:8e:24:4e:da:dc:9f:72:d4:ca:47: 1b:84:f6:ef:06:4a:0a:78:4a:5a:e2:6e:c2:be:3b:04:d0:30: a3:8a:ec:75:0f:35:e3:04:fa:44:a3:09:9e:dd:3b:16:af:36: b4:bb:2b:b3:62:b2:9d:03:8a:a0:f2:86:1a:6f:8a:5b:32:24: 31:b8:a2:6d:68:5d:1c:99:75:6f:0c:ca:0c:9a:7d:09:56:b0: c8:04:27:e4:8a:d3:b6:c9:01:4f:54:be:b2:42:36:b3:fe:20: 0c:36:d3:bd:d9:54:28:5c:91:93:1a:00:83:27:52:01:6b:69: a7:9f:77:b0:68:18:81:66:f6:65:8f:6a:76:15:54:21:89:2a: c5:f9:f1:d5:c7:83:49:7c:a4:66:9e:91:f6:00:32:9f:0e:1c: 4e:fd:49:97:e9:c3:bc:f3:b1:73:12:0b:dd:75:79:24:59:7e: b2:6f:e2:76:16:2d:63:18:ce:68:aa:df:74:fb:01:bf:11:62: 20:01:b5:69:a0:10:4e:9e:b8:6f:d0:d1:da:ad:c5:92:5f:c4: 4c:58:b2:a5:4f:f5:44:62:3f:1b:b6:e6:b6:bd:d5:06:24:fb: c3:79:7e:57:14:55:b2:d4:28:2d:a9:75:7a:f6:99:13:f3:57: 0c:56:0c:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjUwNjE4MjEyNTU5WhcNMjUwNjI1MjEyNTU5WjAYMRYwFAYD VQQDEw02ODUzMmVlNy0zNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ksr2Sq1IN7YTMYaaYJ/G94LPCP8XXKLsHaOs0UyhrcoNgFX98td1KG/6mCn bCpHdA3DfRTlgoM//n1XIUaE4HOz2Afw2Sq0i2/ew1xevY5WvxZA7FksnwdTNHs0 H8kD85aHtRP1fMzJBvJ/Byc6bsurXn5nYhv0CkuAG/eoRR8Qxr8JvFLAVtp2pJtQ Xf2U83wQwIqTEfCBVEQGaXlLqbsv2+BgDFn/0w7YfxcmlnXEDepgx3zJQAyklGoz WnQ9i267ipdmeJRpoRjZcyiVf2YrT44BmeIymtsZ937XIdrb6bgl9DFhkNHWzQA5 k3TCvEA2OPdAWTSPzxUWqdhA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhii2vD 74AhxCoEgtmZoINFGYQvMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7zLIBoMbMY4kTtrcn3LUykcbhPbvBkoKeEpa4m7CvjsE0DCjiux1 DzXjBPpEowme3TsWrza0uyuzYrKdA4qg8oYab4pbMiQxuKJtaF0cmXVvDMoMmn0J VrDIBCfkitO2yQFPVL6yQjaz/iAMNtO92VQoXJGTGgCDJ1IBa2mnn3ewaBiBZvZl j2p2FVQhiSrF+fHVx4NJfKRmnpH2ADKfDhxO/UmX6cO887FzEgvddXkkWX6yb+J2 Fi1jGM5oqt90+wG/EWIgAbVpoBBOnrhv0NHarcWSX8RMWLKlT/VEYj8btua2vdUG JPvDeX5XFFWy1CgtqXV69pkT81cMVgwC -----END CERTIFICATE-----Generated at Fri Jun 20 03:36:38 2025 by rpki-client