$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: O//lhVkM41n7JHlHnD2G5n2dzJi97G5Xk5bddQResBs= Subject key identifier: 2F:99:8D:DB:D3:26:61:E6:A5:6B:8B:B5:A4:45:8B:88:42:83:86:9C Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B0B Signing time: Mon 16 Jun 2025 19:10:57 +0000 Manifest this update: Mon 16 Jun 2025 19:10:56 +0000 Manifest next update: Mon 23 Jun 2025 19:10:56 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: +1mNUXGxll5SUr7FCobVUXxzsTWVnAiWwtHgs9s8fik=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Jun 16 19:10:56 2025 GMT Not After : Jun 23 19:10:56 2025 GMT Subject: CN=68506c40-88c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:db:84:6a:d1:cf:70:88:7c:f3:88:a6:41: cf:7d:76:31:66:97:de:d2:34:41:e2:82:35:e9:5f: db:85:17:b9:03:a9:47:7d:4e:f4:48:fa:c5:e3:53: d4:76:e4:14:9e:f1:35:b9:47:a8:e0:37:fc:7c:69: 84:f3:c9:8a:18:bd:ba:e8:8b:4e:1e:4c:2c:85:1c: 1f:dc:cc:75:d0:74:ca:1f:9c:a4:99:df:af:63:cb: 49:cb:33:d2:43:7f:0e:c1:1e:25:74:28:25:05:45: 75:cc:6d:df:02:07:34:a0:81:b6:a9:fb:59:2d:62: 18:98:f9:7d:d1:1c:6e:5f:61:b2:9f:83:2d:b5:ca: bc:2a:cb:6c:5b:7a:47:9b:28:f2:74:4f:6c:bf:f2: 7e:f4:47:4e:cd:de:23:df:3b:bf:2d:5a:df:f3:90: de:38:5f:d7:8e:15:02:70:a7:1c:a9:a0:c8:71:11: ab:69:3d:9f:b8:4d:65:e8:d4:ec:03:c7:c6:82:51: 77:8d:34:e1:b8:31:bb:ea:f0:9c:6c:46:c3:de:fb: 14:ad:e8:47:3a:e1:35:c8:09:a2:06:95:26:a1:12: 22:15:80:df:77:8b:68:35:39:b7:68:b5:3e:03:9d: f5:ed:92:80:c8:27:9b:a8:b4:09:42:4e:d5:22:fc: 98:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:8D:DB:D3:26:61:E6:A5:6B:8B:B5:A4:45:8B:88:42:83:86:9C X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ea:75:5d:68:9f:75:ab:aa:db:76:30:2a:8b:a8:04:97:db: 65:f7:f1:ed:7b:81:59:69:67:f6:44:3a:6d:79:26:4c:08:bb: 58:78:75:ab:be:1f:e8:60:1c:96:88:b4:0c:1e:06:64:e5:6a: ef:00:19:6e:c1:a5:37:f9:6a:fd:a5:b5:1d:12:ce:e5:7f:14: 6c:ad:1f:c3:fc:c8:22:91:ae:21:c9:6e:d0:71:c7:12:46:8c: 5f:93:46:dc:99:94:c6:2e:3c:cb:05:89:0b:f3:5f:de:ae:fb: e3:11:d6:75:25:0b:0e:b3:bc:7f:d8:83:5c:ad:58:50:ca:41: 9b:26:32:de:64:8f:b5:94:75:18:a8:5e:ce:41:4c:bd:1e:65: 65:bf:1e:f1:82:ad:1d:7f:0d:9a:0c:9c:69:9a:38:fe:8d:bc: 03:65:41:55:0a:47:06:24:dc:bc:3a:3f:b8:1d:eb:d7:a7:77: 73:ea:4f:c0:c7:42:1f:c8:8c:25:0e:53:92:3c:6e:9a:5b:c5: 95:4c:0a:c2:5a:50:2a:35:c7:24:c9:fb:24:6a:71:62:9b:a0: fc:b1:5e:22:d1:50:34:c7:a4:6c:81:4e:e5:56:5a:46:80:55: ea:38:bd:c5:0d:1d:47:e5:da:9a:bb:7a:57:79:c8:58:2d:0a: ed:43:de:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwNjE2MTkxMDU2WhcNMjUwNjIzMTkxMDU2WjAYMRYwFAYD VQQDEw02ODUwNmM0MC04OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweXbhGrRz3CIfPOIpkHPfXYxZpfe0jRB4oI16V/bhRe5A6lHfU70SPrF41PU duQUnvE1uUeo4Df8fGmE88mKGL266ItOHkwshRwf3Mx10HTKH5ykmd+vY8tJyzPS Q38OwR4ldCglBUV1zG3fAgc0oIG2qftZLWIYmPl90RxuX2Gyn4Mttcq8KstsW3pH myjydE9sv/J+9EdOzd4j3zu/LVrf85DeOF/XjhUCcKccqaDIcRGraT2fuE1l6NTs A8fGglF3jTThuDG76vCcbEbD3vsUrehHOuE1yAmiBpUmoRIiFYDfd4toNTm3aLU+ A5317ZKAyCebqLQJQk7VIvyYFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+ZjdvT JmHmpWuLtaRFi4hCg4acMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe6nVdaJ91q6rbdjAqi6gEl9tl9/Hte4FZaWf2RDpteSZMCLtYeHWr vh/oYByWiLQMHgZk5WrvABluwaU3+Wr9pbUdEs7lfxRsrR/D/Mgika4hyW7QcccS Roxfk0bcmZTGLjzLBYkL81/ervvjEdZ1JQsOs7x/2INcrVhQykGbJjLeZI+1lHUY qF7OQUy9HmVlvx7xgq0dfw2aDJxpmjj+jbwDZUFVCkcGJNy8Oj+4HevXp3dz6k/A x0IfyIwlDlOSPG6aW8WVTArCWlAqNcckyfskanFim6D8sV4i0VA0x6RsgU7lVlpG gFXqOL3FDR1H5dqau3pXechYLQrtQ94T -----END CERTIFICATE-----Generated at Wed Jun 18 04:44:43 2025 by rpki-client