$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: 3SNInOeyGWdaJeFZRJatmmhuS6W9CZAweE3r9ChPpeg= Subject key identifier: 88:D2:2C:30:3B:40:5C:C2:38:13:D9:85:57:E9:60:76:18:54:9B:0E Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: 9D Signing time: Tue 17 Jun 2025 05:14:00 +0000 Manifest this update: Tue 17 Jun 2025 05:14:00 +0000 Manifest next update: Tue 24 Jun 2025 05:14:00 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: 2vD31hrbnQIDwAQ1TCxVeyFCZnv3H4y+Bvgid5B5ejw=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: PY7lM6CHVV+AnVQlApq2F15tXj0v5hwGoyhPHySPg1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: Jun 17 05:14:00 2025 GMT Not After : Jun 24 05:14:00 2025 GMT Subject: CN=6850f998-14fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:ff:84:f2:95:ce:f1:4e:22:31:ce:99:c1: 55:d5:3c:ad:6b:7e:c5:5e:ee:5b:16:29:c9:51:4f: 4b:09:43:47:d0:d0:8f:9d:3e:8c:a1:b8:c0:0e:98: a9:09:d3:3a:f3:d6:12:29:ff:c5:8d:ee:98:6a:42: ab:ed:de:c1:a6:9d:24:c5:d2:2a:a1:12:b6:ce:f7: 8e:d4:52:8c:60:bb:9c:fc:bc:4f:09:75:80:be:80: 29:b3:a9:5f:eb:17:75:28:e8:66:e6:45:4c:a3:ed: 42:54:96:2e:08:61:b9:59:34:13:30:dc:02:22:5b: 31:f3:80:c5:38:81:2f:44:e4:5d:9f:a9:54:69:82: d4:16:66:08:a3:b8:70:a2:23:8e:64:34:9d:26:b0: 93:66:95:13:0a:5d:52:3c:f7:bb:2c:00:43:f5:2a: ce:31:1d:95:50:9c:3b:d1:38:1f:8e:2b:3b:3d:59: c0:b9:a2:79:95:43:c6:b3:dd:ba:57:e8:af:bd:65: 51:68:b2:93:33:ae:6a:6a:d7:c8:f1:99:a5:fb:70: ef:8a:1d:30:1c:e9:5e:48:45:7c:e9:09:cc:cd:e8: dc:34:6f:44:47:51:00:4c:8c:90:e2:e3:3f:a3:c7: ef:60:89:f4:15:15:cb:e4:18:58:38:18:27:68:e5: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D2:2C:30:3B:40:5C:C2:38:13:D9:85:57:E9:60:76:18:54:9B:0E X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4e:58:79:3e:fd:b5:84:da:92:b1:0b:90:a1:cf:d8:1c:21: 57:5b:87:b1:4b:6b:f9:5f:2a:8c:4b:3e:09:28:c0:e5:fc:b8: 3d:9d:18:68:04:f5:ab:e2:f6:3f:3c:b6:2f:03:d4:9b:71:c4: 27:03:e7:41:90:24:1b:fa:76:60:4c:57:93:4a:5f:77:82:ea: 9f:96:fb:4b:7f:14:d7:05:39:5f:01:24:f6:28:4c:57:38:67: 16:46:e4:21:cd:31:30:ac:15:f0:f1:ea:c5:0a:0e:cb:86:80: e3:98:db:f9:69:b5:2c:5e:03:17:fb:10:70:ec:15:11:e7:88: 00:5f:47:d8:4d:36:78:26:42:a8:b9:7e:7f:f3:bf:02:b3:af: d5:16:59:ce:9a:7a:a9:5c:48:4f:65:37:47:28:7b:20:7c:2e: 74:df:db:a5:c5:20:d8:22:a9:41:54:fc:55:6b:6a:f3:fc:42: b4:d8:1f:f0:e9:5e:a5:36:92:30:51:41:6d:5c:7a:ca:59:cc: b6:0f:47:4c:8f:a8:93:a1:d7:6f:61:0f:11:28:d2:9b:e5:6d: 95:21:c7:2f:78:2a:98:6d:f2:cb:45:bd:77:8b:81:66:ab:5b: 74:57:26:12:e6:fc:5b:1e:1b:d9:69:bc:70:23:d2:d6:49:cb: d0:9c:37:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUwNjE3MDUxNDAwWhcNMjUwNjI0MDUxNDAwWjAYMRYwFAYD VQQDEw02ODUwZjk5OC0xNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6T/hPKVzvFOIjHOmcFV1Tyta37FXu5bFinJUU9LCUNH0NCPnT6MobjADpip CdM689YSKf/Fje6YakKr7d7Bpp0kxdIqoRK2zveO1FKMYLuc/LxPCXWAvoAps6lf 6xd1KOhm5kVMo+1CVJYuCGG5WTQTMNwCIlsx84DFOIEvRORdn6lUaYLUFmYIo7hw oiOOZDSdJrCTZpUTCl1SPPe7LABD9SrOMR2VUJw70Tgfjis7PVnAuaJ5lUPGs926 V+ivvWVRaLKTM65qatfI8Zml+3Dvih0wHOleSEV86QnMzejcNG9ER1EATIyQ4uM/ o8fvYIn0FRXL5BhYOBgnaOWjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjSLDA7 QFzCOBPZhVfpYHYYVJsOMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTlh5Pv21hNqSsQuQoc/YHCFXW4exS2v5XyqMSz4JKMDl/Lg9nRho BPWr4vY/PLYvA9SbccQnA+dBkCQb+nZgTFeTSl93guqflvtLfxTXBTlfAST2KExX OGcWRuQhzTEwrBXw8erFCg7LhoDjmNv5abUsXgMX+xBw7BUR54gAX0fYTTZ4JkKo uX5/878Cs6/VFlnOmnqpXEhPZTdHKHsgfC5039ulxSDYIqlBVPxVa2rz/EK02B/w 6V6lNpIwUUFtXHrKWcy2D0dMj6iToddvYQ8RKNKb5W2VIccveCqYbfLLRb13i4Fm q1t0VyYS5vxbHhvZabxwI9LWScvQnDfS -----END CERTIFICATE-----Generated at Wed Jun 18 16:36:27 2025 by rpki-client