$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft File: 1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json) Hash identifier: VWuNetoCgN/7Skv9WhsRmFbISb+k/n+9JB1pauDTayQ= Subject key identifier: B2:3E:DD:C7:61:66:FB:84:DF:00:00:BA:8D:61:EA:0A:B2:D1:9E:72 Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 Certificate issuer: /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft Manifest number: 0B16 Signing time: Thu 12 Jun 2025 19:02:16 +0000 Manifest this update: Thu 12 Jun 2025 19:02:15 +0000 Manifest next update: Thu 19 Jun 2025 19:02:15 +0000 Files and hashes: 1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: oA+2sv7bBU++9XU2yjnCyYy8E+dOvyT1Mb2oF88NT9M=) 2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: m3vliiEgyQOK9cLamk8Seg9r2MS0Thb0iCeLTBZTTaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Validity Not Before: Jun 12 19:02:15 2025 GMT Not After : Jun 19 19:02:15 2025 GMT Subject: CN=684b2438-bce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:7a:eb:30:d1:dd:70:67:ed:ab:07:8b:26: 44:76:64:a7:92:80:55:39:58:38:c1:9c:15:a6:1f: dd:a0:7a:16:aa:a9:14:2b:b3:06:5c:b1:89:a5:2b: df:0b:74:f5:c3:c5:a1:7f:38:91:0d:5c:56:b7:1c: 38:cb:04:16:52:12:14:53:4b:db:b0:cd:90:80:2d: aa:9b:d4:0e:aa:0f:d0:c0:88:50:bf:0f:75:36:65: b9:f3:73:35:6a:71:78:01:7c:da:0e:82:0a:22:cd: 92:86:af:8b:0d:10:81:72:79:a4:23:60:68:15:91: 39:06:a9:a8:43:b5:5c:70:72:17:2e:c5:80:5c:9b: e2:99:06:ee:02:76:7e:f5:88:df:c6:0e:16:a0:f5: 0f:d3:fd:2a:80:4f:64:95:f2:07:3a:c6:7b:e4:b8: 85:c6:69:6d:61:85:f7:2e:d8:b7:b9:48:f7:87:27: 2b:8e:15:90:b9:a2:ba:dc:ca:f0:ea:9a:32:b7:be: 2c:05:25:74:0f:c4:db:3a:50:98:30:bd:b3:c5:f9: e5:d8:5d:83:cc:9f:ba:1f:73:9b:c4:3b:6d:83:72: 94:3c:20:00:f7:79:3b:bd:54:8c:85:98:a9:2a:88: b5:63:d4:1b:b7:b3:91:3a:75:ce:69:b6:88:e0:35: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3E:DD:C7:61:66:FB:84:DF:00:00:BA:8D:61:EA:0A:B2:D1:9E:72 X509v3 Authority Key Identifier: keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:d8:30:df:a8:b1:0b:33:69:2c:20:ac:e0:92:d2:0b:96:e1: 62:4b:8e:9d:63:f2:d8:2e:72:ff:5c:3e:eb:28:48:71:4a:74: c4:1a:9f:01:29:a8:88:5b:bb:ed:15:9e:96:88:b3:9c:60:13: 92:5d:ac:36:04:aa:f0:a7:b5:e7:8d:6c:17:d7:89:9d:6d:a1: ef:9c:91:ec:99:a2:aa:bd:9f:d0:f3:43:e7:8e:1a:e9:29:b3: 3d:2a:8c:88:27:22:76:b7:f5:ef:63:36:27:51:fd:78:59:3d: 50:d9:7e:24:45:fd:84:94:d4:f8:7c:c0:aa:9c:a3:4c:71:3e: 9a:89:fd:34:cf:59:55:44:9d:4e:ea:4d:0c:87:09:3f:4b:03: d8:84:23:cc:c8:84:40:54:67:c1:06:1e:59:c1:1b:ee:96:11: 28:b7:4c:6e:32:c1:4b:01:10:f1:c7:ac:1f:53:87:1a:04:44: 58:16:95:98:ab:5b:23:45:91:70:05:5c:f4:0f:eb:2c:d3:ac: 0f:f2:4a:c7:be:c2:f4:37:1c:c6:79:0e:4a:c9:b4:21:5e:f7: ab:b5:59:6f:b5:c6:6e:54:48:fe:fd:9f:de:f4:d4:e4:61:a6: e2:d0:c4:d7:99:39:30:43:62:33:24:c4:71:e9:40:57:7b:f5: 6c:a5:79:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MDUxMTAvBgNVBAUTKEQ2MTgzQTYxNjdFQzJFNEE3MjQ3MDcwRjFGMEIzOUI2 QjlDOTUzRTEwHhcNMjUwNjEyMTkwMjE1WhcNMjUwNjE5MTkwMjE1WjAYMRYwFAYD VQQDEw02ODRiMjQzOC1iY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy166zDR3XBn7asHiyZEdmSnkoBVOVg4wZwVph/doHoWqqkUK7MGXLGJpSvf C3T1w8WhfziRDVxWtxw4ywQWUhIUU0vbsM2QgC2qm9QOqg/QwIhQvw91NmW583M1 anF4AXzaDoIKIs2Shq+LDRCBcnmkI2BoFZE5BqmoQ7VccHIXLsWAXJvimQbuAnZ+ 9Yjfxg4WoPUP0/0qgE9klfIHOsZ75LiFxmltYYX3Lti3uUj3hycrjhWQuaK63Mrw 6poyt74sBSV0D8TbOlCYML2zxfnl2F2DzJ+6H3ObxDttg3KUPCAA93k7vVSMhZip Koi1Y9Qbt7OROnXOabaI4DVtOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI+3cdh ZvuE3wAAuo1h6gqy0Z5yMB8GA1UdIwQYMBaAFNYYOmFn7C5KckcHDx8LOba5yVPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcwNS8zM0ZBRTZGNDQw Q0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xrcHlSd2NQSHdzNXRybkpV LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZzZZV2ZzTGtweVJ3Y1BId3M1dHJuSlUtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcwNS8zM0ZBRTZGNDQwQ0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xr cHlSd2NQSHdzNXRybkpVLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO2DDfqLELM2ksIKzgktILluFiS46dY/LYLnL/XD7rKEhxSnTEGp8B KaiIW7vtFZ6WiLOcYBOSXaw2BKrwp7XnjWwX14mdbaHvnJHsmaKqvZ/Q80Pnjhrp KbM9KoyIJyJ2t/XvYzYnUf14WT1Q2X4kRf2ElNT4fMCqnKNMcT6aif00z1lVRJ1O 6k0Mhwk/SwPYhCPMyIRAVGfBBh5ZwRvulhEot0xuMsFLARDxx6wfU4caBERYFpWY q1sjRZFwBVz0D+ss06wP8krHvsL0NxzGeQ5KybQhXvertVlvtcZuVEj+/Z/e9NTk Yabi0MTXmTkwQ2IzJMRx6UBXe/VspXmd -----END CERTIFICATE-----Generated at Sat Jun 14 17:22:50 2025 by rpki-client