$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft File: HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json) Hash identifier: TCkwkvNyhcwGlWevfqfbsnbCWweUu0Mgxc4k2TXYfBI= Subject key identifier: 32:B6:2E:9A:64:EB:5A:C9:90:07:03:E2:08:54:22:75:26:2C:B8:D0 Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0 Certificate issuer: /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft Manifest number: 03B2 Signing time: Tue 17 Jun 2025 00:17:22 +0000 Manifest this update: Tue 17 Jun 2025 00:17:22 +0000 Manifest next update: Tue 24 Jun 2025 00:17:22 +0000 Files and hashes: 1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: 8sYbspM/guovn+6+cqBbnf92H/XIknGnT8zKXTfp8FE=) 2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: H2GtJ0iPg0F8hSUg65wTV+ujzqji+9qmbwmD4ETHfZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0 Validity Not Before: Jun 17 00:17:22 2025 GMT Not After : Jun 24 00:17:22 2025 GMT Subject: CN=6850b412-d21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:1e:68:f5:d4:8b:e0:cc:f9:b0:5f:2d:ab: c3:13:35:78:f4:75:45:e0:ab:a5:42:c7:1e:72:7e: b2:e1:81:75:5d:58:9d:dc:a0:82:2b:db:31:6d:d0: 66:5a:38:e2:10:b9:9c:09:0a:ce:f0:89:2a:e8:c8: ec:34:41:55:8b:a5:8e:b8:8d:ff:f8:ee:2a:70:ea: 26:b5:33:2b:bc:c1:1b:88:c8:8e:45:85:c2:a3:d4: f8:69:78:52:27:f6:64:7e:b9:a2:f9:59:8b:4f:27: 90:de:20:d7:47:35:ef:37:21:3c:27:a7:dc:72:1c: ef:84:af:a1:79:bc:fb:0f:1c:0a:31:21:38:fe:f6: 25:41:dd:72:00:89:e1:c5:7a:a1:2b:68:a0:c9:9f: 56:26:79:c3:70:7c:43:8c:28:08:ac:1b:02:04:12: fd:82:8f:a4:82:8c:b5:f7:2c:a8:28:19:f5:f6:0d: b9:6c:e6:14:a3:90:9e:cb:99:6d:50:03:62:8f:1c: be:09:d5:bc:66:8e:a4:4a:44:c0:94:8e:14:6b:74: d9:b0:74:0f:54:39:fd:e8:58:48:9e:f2:16:05:12: 3d:49:a4:47:57:ea:c6:e0:aa:01:f4:04:c3:6c:65: 0b:8f:67:e7:96:bb:ab:1c:c2:4f:e8:e8:20:15:a6: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:2E:9A:64:EB:5A:C9:90:07:03:E2:08:54:22:75:26:2C:B8:D0 X509v3 Authority Key Identifier: keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:80:b9:86:c8:ce:80:89:7e:28:c0:06:7b:bf:1a:ac:fc:4e: 51:c0:cb:da:af:de:19:68:de:29:0d:32:81:3e:70:d6:92:36: 11:d6:f7:b8:21:39:ef:a4:95:d6:a3:c0:1d:f8:8e:76:36:72: 6c:09:83:da:48:63:d1:53:c1:17:81:e1:c5:dd:9e:f7:f7:40: e4:8c:9f:61:fa:87:44:dd:a0:b9:f6:dc:c1:05:45:b5:75:d4: 5d:42:87:5f:d4:11:64:54:0d:5a:16:84:df:98:98:20:1c:3e: e0:53:30:3f:ba:dc:8b:d1:4c:34:cd:4c:f9:a0:37:e3:aa:1d: 6a:fb:23:41:a9:ba:fb:06:26:ec:5c:0f:be:c6:1b:32:99:eb: f8:27:38:0e:3d:4e:57:2f:04:3d:1c:b5:20:6e:a6:44:e8:3e: ae:15:c7:1c:5b:6f:da:ff:0b:1a:fb:80:4c:96:c2:95:aa:c0: 91:b4:30:f8:28:f1:6f:73:06:44:13:fd:2e:45:2a:64:19:60: 39:df:e6:e2:f9:ab:1f:2e:4b:45:fa:72:7c:b4:9b:61:d0:e5: 0a:90:8e:d9:33:79:52:3b:b4:40:91:cc:fe:88:10:8f:17:7a: cb:fd:32:a9:b5:df:93:3d:5d:9c:fd:4f:e1:d0:d4:f2:5d:06: 81:46:d1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlEMUYxMTAvBgNVBAUTKDFDMEVCREMyODFEMDJGOURBMjRFQzExNzRCQTlDRjE4 NDU5QjkzRTAwHhcNMjUwNjE3MDAxNzIyWhcNMjUwNjI0MDAxNzIyWjAYMRYwFAYD VQQDEw02ODUwYjQxMi1kMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xAeaPXUi+DM+bBfLavDEzV49HVF4KulQscecn6y4YF1XVid3KCCK9sxbdBm WjjiELmcCQrO8Ikq6MjsNEFVi6WOuI3/+O4qcOomtTMrvMEbiMiORYXCo9T4aXhS J/Zkfrmi+VmLTyeQ3iDXRzXvNyE8J6fcchzvhK+hebz7DxwKMSE4/vYlQd1yAInh xXqhK2igyZ9WJnnDcHxDjCgIrBsCBBL9go+kgoy19yyoKBn19g25bOYUo5Cey5lt UANijxy+CdW8Zo6kSkTAlI4Ua3TZsHQPVDn96FhInvIWBRI9SaRHV+rG4KoB9ATD bGULj2fnlrurHMJP6OggFab8QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK2Lppk 61rJkAcD4ghUInUmLLjQMB8GA1UdIwQYMBaAFBwOvcKB0C+dok7BF0upzxhFm5Pg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUQxRi9EOTgyQ0I1RTk1 RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1MmlUc0VYUzZuUEdFV2Jr LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBNjl3b0hRTDUyaVRzRVhTNm5QR0VXYmstQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUQxRi9EOTgyQ0I1RTk1RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1 MmlUc0VYUzZuUEdFV2JrLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEgLmGyM6AiX4owAZ7vxqs/E5RwMvar94ZaN4pDTKBPnDWkjYR1ve4 ITnvpJXWo8Ad+I52NnJsCYPaSGPRU8EXgeHF3Z7390DkjJ9h+odE3aC59tzBBUW1 ddRdQodf1BFkVA1aFoTfmJggHD7gUzA/utyL0Uw0zUz5oDfjqh1q+yNBqbr7Bibs XA++xhsymev4JzgOPU5XLwQ9HLUgbqZE6D6uFcccW2/a/wsa+4BMlsKVqsCRtDD4 KPFvcwZEE/0uRSpkGWA53+bi+asfLktF+nJ8tJth0OUKkI7ZM3lSO7RAkcz+iBCP F3rL/TKptd+TPV2c/U/h0NTyXQaBRtF9 -----END CERTIFICATE-----Generated at Tue Jun 17 07:40:01 2025 by rpki-client