$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: NYLmGgR5IJEDXc1usElZRzzIqQ1yg+sNx6Q3FMnSW90= Subject key identifier: AA:64:2A:EE:15:E2:4B:D0:F9:F2:9F:5D:E4:03:7E:82:A4:0F:9D:64 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: BD Signing time: Fri 13 Jun 2025 05:08:06 +0000 Manifest this update: Fri 13 Jun 2025 05:08:05 +0000 Manifest next update: Fri 20 Jun 2025 05:08:05 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: 2zQJL3dar3637WopZ8ZQnqA91Ib1uZIHbJUSqmfSc7s=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Jun 13 05:08:05 2025 GMT Not After : Jun 20 05:08:05 2025 GMT Subject: CN=684bb235-b86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b1:4b:03:a7:8d:99:fe:25:67:97:0c:7d:c1: 14:cc:38:8a:b9:b3:69:c5:2d:a7:38:e3:64:aa:dc: f8:07:3f:4a:ae:4e:b1:3d:86:d1:e4:9b:af:1a:18: 65:d7:4b:f8:87:f9:d8:6b:cc:c6:3c:3c:8e:e0:37: 6e:da:a0:ce:ae:f3:e6:c2:95:62:0a:96:6d:f7:94: 5d:e8:59:cb:ff:ea:76:60:a3:83:66:e8:ff:b6:a5: 40:6d:67:fb:e0:da:bb:50:1c:ac:ac:45:2f:ae:0b: c3:02:b3:3f:6f:7f:80:6b:09:b2:73:18:94:66:f6: 25:fe:b7:04:84:57:b6:e6:7a:db:31:92:12:04:cb: 04:7d:49:1e:9b:c6:c4:18:6c:47:93:c6:b1:2a:64: ca:ea:f9:45:65:5f:6d:14:28:1c:14:f6:7b:cd:78: 0f:20:36:c3:fa:e3:61:86:d3:91:88:2e:d8:2e:4d: 9e:7e:46:7b:8b:61:08:dc:a7:44:46:36:b3:3c:d8: f7:25:18:81:b4:65:42:da:5b:e5:f8:71:9a:2a:0c: 8e:d9:91:e9:c0:ad:4d:7f:d0:dc:30:80:df:71:e8: ab:e5:0c:62:1c:87:bc:ba:d3:b8:aa:55:2c:5f:5e: 86:97:3e:e3:f0:14:ce:f1:6b:7c:16:63:3b:6d:99: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:64:2A:EE:15:E2:4B:D0:F9:F2:9F:5D:E4:03:7E:82:A4:0F:9D:64 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:23:81:b8:b5:5b:56:d3:67:c2:93:34:96:45:19:04:98:b1: f9:2e:73:4d:2f:6b:56:2e:6a:1b:ee:f0:6d:88:db:51:28:30: 81:66:eb:76:d5:19:f2:a6:70:b1:60:5c:9b:7a:84:de:8d:2c: 21:d0:0e:27:8c:b3:94:49:7b:47:ad:9c:3b:61:84:e6:00:22: 44:a4:d0:88:d6:11:33:40:16:fa:ba:0b:f5:2c:a9:9f:32:e4: 38:3c:ab:87:92:ff:51:7b:14:28:7e:ac:fa:91:f0:8c:9f:02: 99:ea:03:a8:e2:ac:82:63:2e:2f:80:3e:8c:07:75:a3:6b:a8: df:43:74:55:7a:93:3d:97:d7:74:c0:b6:2d:c1:2b:bd:11:2c: 6b:54:03:fd:68:5b:10:7a:0e:b0:50:7c:94:b6:9a:29:40:35: 0d:60:09:43:f5:39:52:81:b1:66:aa:f8:c1:22:57:b3:0b:45: 1b:1d:e5:c4:d3:26:e2:0e:ed:0e:7b:86:27:63:3e:58:06:bd: f4:33:6d:42:66:65:25:7a:bf:c8:52:04:93:01:22:8f:e8:95: 07:53:f9:86:70:2f:cb:3b:31:7c:0d:11:00:29:f8:1b:1e:f1: 7e:d1:ec:3c:09:b4:c5:7e:24:dc:48:73:2d:45:83:ef:16:84: 8e:c4:17:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwNjEzMDUwODA1WhcNMjUwNjIwMDUwODA1WjAYMRYwFAYD VQQDEw02ODRiYjIzNS1iODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57FLA6eNmf4lZ5cMfcEUzDiKubNpxS2nOONkqtz4Bz9Krk6xPYbR5JuvGhhl 10v4h/nYa8zGPDyO4Ddu2qDOrvPmwpViCpZt95Rd6FnL/+p2YKODZuj/tqVAbWf7 4Nq7UBysrEUvrgvDArM/b3+AawmycxiUZvYl/rcEhFe25nrbMZISBMsEfUkem8bE GGxHk8axKmTK6vlFZV9tFCgcFPZ7zXgPIDbD+uNhhtORiC7YLk2efkZ7i2EI3KdE RjazPNj3JRiBtGVC2lvl+HGaKgyO2ZHpwK1Nf9DcMIDfceir5QxiHIe8utO4qlUs X16Glz7j8BTO8Wt8FmM7bZmKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpkKu4V 4kvQ+fKfXeQDfoKkD51kMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3I4G4tVtW02fCkzSWRRkEmLH5LnNNL2tWLmob7vBtiNtRKDCBZut2 1RnypnCxYFybeoTejSwh0A4njLOUSXtHrZw7YYTmACJEpNCI1hEzQBb6ugv1LKmf MuQ4PKuHkv9RexQofqz6kfCMnwKZ6gOo4qyCYy4vgD6MB3Wja6jfQ3RVepM9l9d0 wLYtwSu9ESxrVAP9aFsQeg6wUHyUtpopQDUNYAlD9TlSgbFmqvjBIlezC0UbHeXE 0ybiDu0Oe4YnYz5YBr30M21CZmUler/IUgSTASKP6JUHU/mGcC/LOzF8DREAKfgb HvF+0ew8CbTFfiTcSHMtRYPvFoSOxBf6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:57 2025 by rpki-client