$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: CKXtMpB/HwcXDwiiubQoPtUFf5i9alRRWtA6o31XJsk= Subject key identifier: BA:0B:0B:73:07:01:CF:0F:04:13:CC:0A:1E:84:19:63:E4:C2:AA:84 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0B8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0B88 Signing time: Thu 12 Jun 2025 18:49:36 +0000 Manifest this update: Thu 12 Jun 2025 18:49:35 +0000 Manifest next update: Thu 19 Jun 2025 18:49:35 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: XVcrneMjavFH8NFNB4fuSxfPghOsATcsKFZBWGrJzfk=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2958 (0xb8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Jun 12 18:49:35 2025 GMT Not After : Jun 19 18:49:35 2025 GMT Subject: CN=684b2140-fff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c8:b4:3a:50:06:fc:59:31:a2:ef:fa:c1:62: af:1c:a0:63:17:bd:6c:a7:77:a0:65:c8:cb:a5:f0: fb:af:02:0b:1b:27:83:05:65:19:43:84:a6:c2:c4: 8e:9a:33:f8:89:9f:72:ce:fe:88:60:e3:5e:67:4c: 08:a7:23:25:1c:ae:c5:31:a6:ea:e9:2e:f9:a1:c3: db:d8:62:35:0e:65:3e:4a:bc:c0:19:f9:38:61:2c: 80:74:eb:1b:d2:6c:20:b1:b7:e3:5c:67:a9:79:96: d6:a2:61:d1:0a:f7:ae:77:5f:be:29:75:97:23:1e: 75:5e:28:af:b7:4c:86:bd:7c:3b:a0:e9:9d:17:39: 7a:9b:81:18:dc:24:33:c1:2e:df:03:5b:72:dc:73: b8:07:92:3c:a7:2b:53:65:db:f3:46:10:d2:36:62: e8:84:55:15:f6:4d:76:7d:20:92:7a:37:c7:88:68: 8f:e6:0b:f4:86:19:a8:9d:4b:b7:fc:21:9f:4d:51: c6:9a:c4:9a:ce:57:61:6a:77:62:15:7a:23:0b:36: fa:2c:0a:32:48:8a:08:00:0a:37:bb:5b:a1:73:72: e2:4b:bd:ed:2d:12:a0:12:e6:a6:f3:ad:15:bd:d9: d1:51:9c:44:1a:47:0c:d4:78:22:76:8e:d3:a0:9a: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0B:0B:73:07:01:CF:0F:04:13:CC:0A:1E:84:19:63:E4:C2:AA:84 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:ed:af:1e:0e:fc:2b:b4:b2:74:c4:74:1e:e7:9f:99:81:98: d7:21:85:b9:bd:5f:05:17:f8:33:c3:ff:36:b6:e5:a1:0e:22: a4:84:44:3c:ae:9b:15:2d:bc:4b:a1:fb:e4:ab:6b:1c:eb:49: 88:f4:9d:2b:07:55:51:42:bc:8a:38:4a:ce:9d:a0:6a:6a:f9: b3:4e:43:78:09:69:34:65:38:20:9f:1b:e4:07:ef:0f:4a:bd: e2:f1:09:57:24:d4:ee:31:b6:89:af:3d:2a:4c:da:b8:16:41: b3:f9:fe:73:2f:54:f6:10:8a:ca:4c:4e:e3:9a:59:2e:7e:c4: 95:43:82:c4:4b:d0:b5:14:79:82:7d:c1:bb:5d:f4:15:69:9d: 8f:f7:b8:99:00:89:96:4e:de:b3:5e:61:01:64:c5:80:ea:30: 98:dd:da:c1:27:09:ec:c1:2e:53:e6:87:80:a1:03:f9:50:84: d1:d6:19:c4:55:34:fd:df:54:4b:05:13:d6:56:16:53:ab:ab: e5:2b:1f:3e:3b:09:07:51:f8:eb:82:0b:05:fb:1e:cb:71:c9: 16:e6:47:79:67:a7:22:60:e4:31:b7:17:01:3d:8a:ad:e3:1e: 86:e6:18:06:9c:b6:48:ff:58:9c:84:6e:d2:23:38:e6:bf:02: 3c:9c:a4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUwNjEyMTg0OTM1WhcNMjUwNjE5MTg0OTM1WjAYMRYwFAYD VQQDEw02ODRiMjE0MC1mZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Mi0OlAG/Fkxou/6wWKvHKBjF71sp3egZcjLpfD7rwILGyeDBWUZQ4SmwsSO mjP4iZ9yzv6IYONeZ0wIpyMlHK7FMabq6S75ocPb2GI1DmU+SrzAGfk4YSyAdOsb 0mwgsbfjXGepeZbWomHRCveud1++KXWXIx51Xiivt0yGvXw7oOmdFzl6m4EY3CQz wS7fA1ty3HO4B5I8pytTZdvzRhDSNmLohFUV9k12fSCSejfHiGiP5gv0hhmonUu3 /CGfTVHGmsSazldhandiFXojCzb6LAoySIoIAAo3u1uhc3LiS73tLRKgEuam860V vdnRUZxEGkcM1Hgido7ToJoJnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoLC3MH Ac8PBBPMCh6EGWPkwqqEMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE7a8eDvwrtLJ0xHQe55+ZgZjXIYW5vV8FF/gzw/82tuWhDiKkhEQ8 rpsVLbxLofvkq2sc60mI9J0rB1VRQryKOErOnaBqavmzTkN4CWk0ZTggnxvkB+8P Sr3i8QlXJNTuMbaJrz0qTNq4FkGz+f5zL1T2EIrKTE7jmlkufsSVQ4LES9C1FHmC fcG7XfQVaZ2P97iZAImWTt6zXmEBZMWA6jCY3drBJwnswS5T5oeAoQP5UITR1hnE VTT931RLBRPWVhZTq6vlKx8+OwkHUfjrggsF+x7LcckW5kd5Z6ciYOQxtxcBPYqt 4x6G5hgGnLZI/1ichG7SIzjmvwI8nKTF -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:41 2025 by rpki-client