$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json) Hash identifier: 9Z8Yyo0AsowI8rATmv12s/yyzw8KtLRvDZreWFq7FDw= Subject key identifier: 0A:AB:5A:72:75:E6:90:F1:3D:46:52:A5:D1:1F:72:54:F5:89:1C:E1 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft Manifest number: 056D Signing time: Thu 12 Jun 2025 22:57:02 +0000 Manifest this update: Thu 12 Jun 2025 22:57:01 +0000 Manifest next update: Thu 19 Jun 2025 22:57:01 +0000 Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: aOVRBbGGYmJ/AwqSBFKAFkUEIPaVW0mrDndRztpwYLE=) 2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: uFNNtsVKGrVOfxCqtFLk0MfQv5FVtYeu4lj2O4PA2Ig=) 3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: Dqt0GvAw9X9y8Ef/O7ERED07Rd+HbqI7uD9ujxO75Dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Jun 12 22:57:01 2025 GMT Not After : Jun 19 22:57:01 2025 GMT Subject: CN=684b5b3d-be48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:d3:d1:0d:eb:98:f6:a1:fc:7d:99:b7:64: b0:8d:0a:5e:d6:45:2d:52:92:49:10:6b:07:df:5f: 72:f8:21:68:00:2a:2e:cb:87:06:47:2f:b9:68:31: bc:23:87:14:9a:12:cc:4f:7e:79:b8:13:14:ed:d9: 5a:b1:6b:46:92:60:5c:06:f9:7e:b2:1c:1e:bc:d0: fb:c0:6f:96:9d:ff:21:7d:b1:b7:11:32:57:16:a8: 3d:69:ec:d2:02:92:62:4e:85:3c:87:a0:98:1c:f4: 5a:35:d6:77:99:b0:bd:20:92:34:23:1f:93:e2:ab: ba:bd:50:5d:26:48:9c:20:c1:79:64:16:a6:dd:bb: d9:b6:fb:78:54:f1:ad:9d:01:c2:d7:0c:e6:e4:87: f0:f8:03:b6:e7:e7:05:08:b4:04:95:0b:55:ae:e5: 03:da:57:5e:26:b4:45:8c:4b:c5:13:17:d8:d0:96: 7d:3d:8e:23:91:db:e6:e9:ce:95:dd:9f:2c:59:38: ef:74:1f:e6:06:60:52:4b:05:2b:a4:bb:92:2b:9c: 67:90:63:eb:e4:3a:e3:19:0b:be:a1:79:fb:b4:42: 7e:21:96:60:24:91:c0:b5:8e:7a:f0:78:a6:9e:ba: d0:07:03:f2:08:e3:23:78:b7:26:38:32:83:ae:78: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AB:5A:72:75:E6:90:F1:3D:46:52:A5:D1:1F:72:54:F5:89:1C:E1 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1c:be:4d:28:ea:ac:c9:71:60:f5:f0:29:23:a8:60:58:ac: 17:15:7c:ad:19:ab:66:55:9d:b1:6a:af:09:7e:4d:11:44:bb: 99:7f:99:31:8a:61:96:fc:b4:32:f5:9a:64:af:a3:f1:20:13: 30:56:64:cc:34:60:ea:ae:f0:9e:30:74:08:d4:82:1c:7e:47: 3f:36:93:bb:fb:12:3c:de:2a:28:f3:ee:6f:ff:ee:18:db:e4: 71:0b:22:b4:f7:aa:db:d8:9e:75:e3:d1:12:23:e2:f7:42:fa: bb:41:87:f2:94:eb:22:26:50:bd:bc:c3:a0:c1:e2:2b:f2:b9: 02:3b:8b:b8:e4:f5:52:3b:5c:89:c8:63:24:b6:18:4a:f0:59: f9:b3:5f:2b:28:06:59:79:42:aa:74:20:41:66:f6:18:10:57: 3b:24:71:f1:36:85:9d:83:c2:42:11:d5:8b:78:fd:e9:ac:c2: a8:1a:3c:15:94:d2:ce:7c:81:5c:fc:dc:a3:81:c3:f8:e9:73: c7:4d:8d:45:dc:9a:08:64:25:2b:6d:36:78:d2:f1:c0:61:d3: 9d:7a:8c:fd:cf:04:cf:9d:6a:ad:31:c3:2d:1d:b2:cf:e8:a9: 6d:55:93:bf:e6:68:44:5f:f1:fa:16:0f:10:06:8b:99:5f:87: d5:cd:06:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjUwNjEyMjI1NzAxWhcNMjUwNjE5MjI1NzAxWjAYMRYwFAYD VQQDEw02ODRiNWIzZC1iZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYTT0Q3rmPah/H2Zt2SwjQpe1kUtUpJJEGsH319y+CFoACouy4cGRy+5aDG8 I4cUmhLMT355uBMU7dlasWtGkmBcBvl+shwevND7wG+Wnf8hfbG3ETJXFqg9aezS ApJiToU8h6CYHPRaNdZ3mbC9IJI0Ix+T4qu6vVBdJkicIMF5ZBam3bvZtvt4VPGt nQHC1wzm5Ifw+AO25+cFCLQElQtVruUD2ldeJrRFjEvFExfY0JZ9PY4jkdvm6c6V 3Z8sWTjvdB/mBmBSSwUrpLuSK5xnkGPr5DrjGQu+oXn7tEJ+IZZgJJHAtY568Him nrrQBwPyCOMjeLcmODKDrnhhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqrWnJ1 5pDxPUZSpdEfclT1iRzhMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHL5NKOqsyXFg9fApI6hgWKwXFXytGatmVZ2xaq8Jfk0RRLuZf5kx imGW/LQy9Zpkr6PxIBMwVmTMNGDqrvCeMHQI1IIcfkc/NpO7+xI83ioo8+5v/+4Y 2+RxCyK096rb2J5149ESI+L3Qvq7QYfylOsiJlC9vMOgweIr8rkCO4u45PVSO1yJ yGMkthhK8Fn5s18rKAZZeUKqdCBBZvYYEFc7JHHxNoWdg8JCEdWLeP3prMKoGjwV lNLOfIFc/NyjgcP46XPHTY1F3JoIZCUrbTZ40vHAYdOdeoz9zwTPnWqtMcMtHbLP 6KltVZO/5mhEX/H6Fg8QBouZX4fVzQbL -----END CERTIFICATE-----Generated at Sat Jun 14 19:13:04 2025 by rpki-client