$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: +sga9SRcpHTdNNwbmcY922naJWVhW++l0l5npas4Dzs= Subject key identifier: 8C:21:42:CF:2D:82:94:21:38:20:4F:EB:3E:B7:24:21:EE:F9:29:B5 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1DDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1DCC Signing time: Sat 14 Jun 2025 16:04:45 +0000 Manifest this update: Sat 14 Jun 2025 16:04:45 +0000 Manifest next update: Sat 21 Jun 2025 16:04:45 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: 8qnFaUqXlEX1Joskym6bVaxRboY5TbCUB3ihBhDeUFI=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: 2edhdcxDL3hq/Y/5irWUYjIM2MnhCjcG113R+cVIiMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7642 (0x1dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Jun 14 16:04:45 2025 GMT Not After : Jun 21 16:04:45 2025 GMT Subject: CN=684d9d9d-b8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:d2:83:cb:8b:d8:75:9c:dd:29:7a:97:9a: b7:65:6a:aa:76:e1:78:74:91:f0:89:e2:9f:2c:43: bc:73:bf:60:06:53:e1:4c:db:79:ab:bc:e5:26:ba: 39:38:31:d2:09:26:ee:11:55:27:de:36:05:b6:6b: fa:28:a2:57:77:34:50:36:c1:2b:5c:11:a9:4d:d2: e8:f9:c2:82:cc:be:37:3d:c4:6d:bc:c0:9e:88:f5: bc:0a:71:96:c0:6c:b7:86:a9:5e:00:e5:12:47:93: e0:b4:90:55:ac:d2:88:77:70:d7:7c:0f:a9:31:b3: 52:1b:e3:e8:f6:b0:04:a4:72:5a:9f:2f:bb:da:d1: 51:b6:ba:f5:52:fa:31:ea:c7:d4:eb:b8:3a:f6:52: fc:61:17:fc:f2:b0:8a:c4:fa:db:12:18:9b:ce:b9: 8b:2c:0e:e1:54:54:34:20:53:c2:aa:86:26:58:fc: 55:c4:35:6f:e0:1b:da:6a:c5:9e:79:9d:a7:95:90: 0a:a0:37:9f:42:9b:91:b3:b9:6a:f9:47:18:7c:6b: bb:f0:19:9b:cb:b0:80:da:a9:e8:68:12:4b:2b:cf: 18:ea:b9:84:b5:8c:fa:53:43:bf:9f:c6:27:a7:b9: f8:43:54:eb:7b:22:6c:61:06:e6:e1:7f:e9:74:ff: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:21:42:CF:2D:82:94:21:38:20:4F:EB:3E:B7:24:21:EE:F9:29:B5 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:03:24:32:6b:76:df:c1:c9:a1:5c:44:6a:1b:8a:1f:43: de:3b:10:5a:a6:cc:67:a1:66:e4:c3:d5:ac:0a:ad:fc:ef:46: 9d:7b:b7:ec:3a:9f:a2:c2:c2:5d:75:cc:82:ea:0f:d3:f2:0d: 29:45:bd:80:c2:45:b6:c3:f3:ab:3c:0b:18:26:bb:7c:4a:36: 9e:7c:21:f9:09:f7:71:4f:91:61:24:11:51:a2:59:e3:36:b1: 86:6d:56:7e:23:b7:85:97:08:08:8a:4f:d8:ab:96:06:b0:d0: fe:bb:9c:a9:07:c2:88:ae:cc:1f:0e:14:ef:8e:81:ff:78:2c: 4e:a3:97:53:d7:e9:6a:6f:3d:56:52:c8:76:52:73:23:3a:87: 88:96:aa:dc:4d:af:b2:13:78:42:8f:21:e9:98:f2:b0:30:45: b1:fb:69:a2:2e:ad:b8:27:46:d3:c3:ce:60:0f:c3:d2:65:c7: cb:89:9c:28:6a:37:94:fb:d8:93:89:65:85:d3:e8:f2:0b:97: b5:f6:a8:2c:fe:9c:70:1b:e8:fa:5b:12:b2:d3:f9:f5:15:0c: 4f:0f:ea:15:1f:12:e3:3f:42:f9:98:fb:cd:ad:84:ea:8c:9d: 9a:b9:04:84:79:d4:af:a8:ba:30:77:3b:ce:03:73:5f:97:d2: 50:10:db:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwNjE0MTYwNDQ1WhcNMjUwNjIxMTYwNDQ1WjAYMRYwFAYD VQQDEw02ODRkOWQ5ZC1iOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAvSg8uL2HWc3Sl6l5q3ZWqqduF4dJHwieKfLEO8c79gBlPhTNt5q7zlJro5 ODHSCSbuEVUn3jYFtmv6KKJXdzRQNsErXBGpTdLo+cKCzL43PcRtvMCeiPW8CnGW wGy3hqleAOUSR5PgtJBVrNKId3DXfA+pMbNSG+Po9rAEpHJany+72tFRtrr1Uvox 6sfU67g69lL8YRf88rCKxPrbEhibzrmLLA7hVFQ0IFPCqoYmWPxVxDVv4BvaasWe eZ2nlZAKoDefQpuRs7lq+UcYfGu78Bmby7CA2qnoaBJLK88Y6rmEtYz6U0O/n8Yn p7n4Q1TreyJsYQbm4X/pdP/VRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwhQs8t gpQhOCBP6z63JCHu+Sm1MB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMYQMkMmt238HJoVxEahuKH0PeOxBapsxnoWbkw9WsCq3870ade7fs Op+iwsJddcyC6g/T8g0pRb2AwkW2w/OrPAsYJrt8SjaefCH5CfdxT5FhJBFRolnj NrGGbVZ+I7eFlwgIik/Yq5YGsND+u5ypB8KIrswfDhTvjoH/eCxOo5dT1+lqbz1W Ush2UnMjOoeIlqrcTa+yE3hCjyHpmPKwMEWx+2miLq24J0bTw85gD8PSZcfLiZwo ajeU+9iTiWWF0+jyC5e19qgs/pxwG+j6WxKy0/n1FQxPD+oVHxLjP0L5mPvNrYTq jJ2auQSEedSvqLowdzvOA3Nfl9JQENt9 -----END CERTIFICATE-----Generated at Sun Jun 15 09:56:44 2025 by rpki-client