$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: biiJSCNE6bmyI93e58ZP19yjK5KojBj9FZHdwjnTENI= Subject key identifier: E1:3C:E8:6D:9B:94:C8:29:A4:50:FA:3B:CF:9B:88:46:B0:9D:49:DE Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 3498 Signing time: Wed 18 Jun 2025 14:21:37 +0000 Manifest this update: Wed 18 Jun 2025 14:21:37 +0000 Manifest next update: Wed 25 Jun 2025 14:21:37 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: HO6iIG2rxaXhDbEo/xO+m1e1zy7YjH3eXpg/uWN/7vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Validity Not Before: Jun 18 14:21:37 2025 GMT Not After : Jun 25 14:21:37 2025 GMT Subject: CN=6852cb71-de13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:02:4b:84:a5:98:a6:ad:c8:9b:36:70:b3: 08:11:3e:a5:cc:16:5e:45:41:36:4e:04:48:e0:54: 29:54:62:80:d5:39:84:ef:c9:18:17:07:ed:e8:7e: 7b:9f:79:62:ec:6d:b4:ea:ec:35:5d:17:09:e0:a8: 5a:d1:6f:59:3f:94:1d:8b:2b:e8:39:d6:d0:e0:ba: 43:2e:91:dd:d5:7d:09:c8:c2:a3:33:55:63:4e:95: ff:93:21:39:a8:f6:f0:a4:ad:38:ec:9e:f9:b3:0b: 4c:5b:32:d9:3e:f6:1e:c1:1e:ba:20:0e:a2:7a:04: 32:90:f1:29:16:b3:2a:2a:db:4c:c2:94:9e:dc:26: 99:68:16:2b:ff:20:d9:6a:96:ad:38:73:e4:6c:25: 53:a8:18:a0:0c:1e:99:4e:a8:46:f1:f3:b3:4a:29: 55:5c:87:49:04:61:9a:62:80:84:fc:03:2a:55:37: 19:b4:8b:1c:b1:cb:07:45:b0:5d:c7:c3:95:97:f9: 2b:c8:8f:64:93:e6:2a:95:14:ef:db:41:e0:c4:fc: 8d:f0:b1:e3:b2:b2:d0:50:cc:cf:8a:fd:36:36:83: 66:e1:d2:a6:d2:41:4f:5e:8a:ca:fc:7a:55:2e:27: 36:58:15:46:e3:de:7a:96:ca:d0:46:ef:bc:b8:a2: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:E8:6D:9B:94:C8:29:A4:50:FA:3B:CF:9B:88:46:B0:9D:49:DE X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:63:86:03:69:4b:dc:c2:fe:1d:59:aa:bc:c0:69:4e:2f:5c: a5:8e:33:49:45:41:34:75:74:4b:ca:18:2d:eb:34:01:b4:e6: 8f:5f:da:5c:e1:61:98:d0:7c:5a:f5:12:5d:88:74:3e:8b:65: 05:55:4c:6f:a4:3d:5c:47:02:a5:b1:df:2a:7b:16:ff:e4:22: 9e:3d:2c:a4:e2:71:cc:f4:49:29:8c:ea:bb:c2:8f:3b:6d:3d: 5f:43:99:05:a2:ec:0e:61:94:2f:9e:7e:3f:49:f8:39:4a:57: 81:e7:2d:fc:cc:62:84:92:dd:df:cb:07:19:96:1b:0c:6e:ea: 0b:bc:e7:a2:20:39:50:ac:d1:29:31:4e:f2:cd:78:6b:40:a5: fa:a0:71:b9:2f:31:14:a0:13:02:73:e4:1a:1c:7a:7b:27:e7: c5:84:04:51:4e:02:1c:ba:26:bd:95:f2:d1:1d:2e:05:b3:6a: 7b:0c:fe:44:54:93:b6:ed:a4:a8:12:d1:4c:c4:06:8a:4c:3b: 6c:91:85:53:87:5d:77:7d:5c:1f:59:5e:ca:24:a6:d7:41:cf: 4e:49:13:35:6c:5e:9f:0c:33:c9:bf:5e:1f:75:60:79:dc:44: 7e:d4:81:0f:7c:44:52:f7:55:e7:07:02:aa:cc:71:c2:ab:33: 19:b1:8d:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjUwNjE4MTQyMTM3WhcNMjUwNjI1MTQyMTM3WjAYMRYwFAYD VQQDEw02ODUyY2I3MS1kZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBQCS4SlmKatyJs2cLMIET6lzBZeRUE2TgRI4FQpVGKA1TmE78kYFwft6H57 n3li7G206uw1XRcJ4Kha0W9ZP5QdiyvoOdbQ4LpDLpHd1X0JyMKjM1VjTpX/kyE5 qPbwpK047J75swtMWzLZPvYewR66IA6iegQykPEpFrMqKttMwpSe3CaZaBYr/yDZ apatOHPkbCVTqBigDB6ZTqhG8fOzSilVXIdJBGGaYoCE/AMqVTcZtIscscsHRbBd x8OVl/kryI9kk+YqlRTv20HgxPyN8LHjsrLQUMzPiv02NoNm4dKm0kFPXorK/HpV Lic2WBVG4956lsrQRu+8uKJXFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOE86G2b lMgppFD6O8+biEawnUneMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALY4YDaUvcwv4dWaq8wGlOL1yljjNJRUE0dXRLyhgt6zQBtOaPX9pc 4WGY0Hxa9RJdiHQ+i2UFVUxvpD1cRwKlsd8qexb/5CKePSyk4nHM9EkpjOq7wo87 bT1fQ5kFouwOYZQvnn4/Sfg5SleB5y38zGKEkt3fywcZlhsMbuoLvOeiIDlQrNEp MU7yzXhrQKX6oHG5LzEUoBMCc+QaHHp7J+fFhARRTgIcuia9lfLRHS4Fs2p7DP5E VJO27aSoEtFMxAaKTDtskYVTh113fVwfWV7KJKbXQc9OSRM1bF6fDDPJv14fdWB5 3ER+1IEPfERS91XnBwKqzHHCqzMZsY1l -----END CERTIFICATE-----Generated at Thu Jun 19 02:40:56 2025 by rpki-client