$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: feBXLxSBU5iA7zIWBm/+l+3SM+ync2A7YmrvV3dM+sQ= Subject key identifier: 97:93:B4:4E:A6:04:8A:D6:6E:4C:84:BD:73:85:94:6C:C2:AC:BB:BB Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C4C Signing time: Sat 14 Jun 2025 18:15:35 +0000 Manifest this update: Sat 14 Jun 2025 18:15:34 +0000 Manifest next update: Sat 21 Jun 2025 18:15:34 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: qwXyqESaeNYC8Tl/NXofVdZrcyNsQgYUyICCdJyqmdo=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Jun 14 18:15:34 2025 GMT Not After : Jun 21 18:15:34 2025 GMT Subject: CN=684dbc46-5910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:8c:1c:00:d9:6f:14:fa:56:5d:de:01:21: 63:4e:79:ca:c7:3b:b2:fd:ad:fe:6d:0b:5e:1e:9a: c8:05:b4:6c:d0:ec:68:58:41:49:aa:1b:e6:72:44: b5:d6:68:0b:13:80:cc:34:65:16:ce:7f:ff:e0:f9: c7:db:d0:20:bd:96:ab:09:e4:8d:73:4d:f0:70:1a: da:43:05:09:d9:4c:69:cc:5b:20:8b:71:95:ab:fb: 37:0a:aa:5d:69:0d:e8:c6:46:78:26:26:36:55:90: 9a:d0:b1:66:88:fa:02:93:6c:69:95:49:5a:52:3d: 32:b3:99:80:7a:ba:05:63:0e:4d:3e:9a:d2:16:2f: 5f:06:35:26:41:b9:dd:ee:eb:e6:cb:b4:78:0b:98: 75:03:5b:80:ac:d2:61:54:11:b1:fb:d0:4a:07:e0: 68:4a:aa:dc:9d:20:2c:94:1e:68:8a:1d:82:dd:c6: 2c:3d:63:9b:ff:38:fd:ad:ba:e8:23:d5:59:79:32: 4f:c6:28:71:b4:5a:61:fe:db:79:ce:ce:52:12:e2: 80:de:3b:be:15:b9:bd:1d:a5:8b:18:68:7c:74:b2: 9e:1c:92:9d:ca:dc:7e:a6:e0:51:1e:d6:f0:eb:39: e2:24:8c:f7:2b:d8:35:d6:a7:89:4a:34:69:97:7e: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:B4:4E:A6:04:8A:D6:6E:4C:84:BD:73:85:94:6C:C2:AC:BB:BB X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d0:6e:5d:8a:f3:15:dd:ca:45:91:23:44:e2:15:57:ea:87: 48:ab:73:b5:3c:17:5a:30:92:7f:9a:43:3b:b5:a2:ac:05:69: 9d:d0:09:4f:93:f0:29:39:c5:c0:f4:90:de:cb:12:02:33:88: 7a:1e:da:a9:f1:8e:22:27:69:c2:52:e4:39:0f:e6:d7:52:94: 28:f5:d7:96:fe:ca:ab:32:50:2a:5d:95:0d:e7:d8:f5:e0:e6: 80:b1:1d:23:e6:c8:04:f6:c2:bf:8e:c0:00:06:89:6a:33:23: 35:c8:7d:10:d4:e1:8a:04:55:48:37:6f:f3:40:54:7c:23:d7: f2:b1:17:86:b0:05:3d:61:be:a5:33:87:42:52:9e:d8:07:08: 34:c6:0b:b4:0c:5f:27:3b:0e:d3:45:1b:a4:3a:80:e1:c7:31: 69:06:f1:e2:86:a9:f8:d9:49:5e:61:a9:cf:38:ff:a9:bf:30: fc:c3:f9:9d:fe:19:9a:7a:60:b4:85:a7:04:bc:0c:89:fb:d0: 0c:4b:e2:29:f1:cb:23:2b:29:58:d2:0a:86:7a:71:34:1d:32: 04:96:19:4e:6e:e7:3a:ab:17:bb:48:3d:e6:07:9e:bc:05:09: 98:fa:77:96:3c:b8:46:66:bc:5c:b4:59:4b:d2:17:54:ff:50: cb:7d:8f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUwNjE0MTgxNTM0WhcNMjUwNjIxMTgxNTM0WjAYMRYwFAYD VQQDEw02ODRkYmM0Ni01OTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxguMHADZbxT6Vl3eASFjTnnKxzuy/a3+bQteHprIBbRs0OxoWEFJqhvmckS1 1mgLE4DMNGUWzn//4PnH29AgvZarCeSNc03wcBraQwUJ2UxpzFsgi3GVq/s3Cqpd aQ3oxkZ4JiY2VZCa0LFmiPoCk2xplUlaUj0ys5mAeroFYw5NPprSFi9fBjUmQbnd 7uvmy7R4C5h1A1uArNJhVBGx+9BKB+BoSqrcnSAslB5oih2C3cYsPWOb/zj9rbro I9VZeTJPxihxtFph/tt5zs5SEuKA3ju+Fbm9HaWLGGh8dLKeHJKdytx+puBRHtbw 6zniJIz3K9g11qeJSjRpl34UXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeTtE6m BIrWbkyEvXOFlGzCrLu7MB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0G5divMV3cpFkSNE4hVX6odIq3O1PBdaMJJ/mkM7taKsBWmd0AlP k/ApOcXA9JDeyxICM4h6Htqp8Y4iJ2nCUuQ5D+bXUpQo9deW/sqrMlAqXZUN59j1 4OaAsR0j5sgE9sK/jsAABolqMyM1yH0Q1OGKBFVIN2/zQFR8I9fysReGsAU9Yb6l M4dCUp7YBwg0xgu0DF8nOw7TRRukOoDhxzFpBvHihqn42UleYanPOP+pvzD8w/md /hmaemC0hacEvAyJ+9AMS+Ip8csjKylY0gqGenE0HTIElhlObuc6qxe7SD3mB568 BQmY+neWPLhGZrxctFlL0hdU/1DLfY8e -----END CERTIFICATE-----Generated at Mon Jun 16 09:23:15 2025 by rpki-client