$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: Ff0u1D1ksCS5G65CWKKr5bA+CmdYkN7j2BiQfChWqFo= Subject key identifier: A8:81:7A:EC:82:26:AA:7E:40:60:40:FC:74:3E:7B:F9:B8:43:10:E3 Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 0188 Signing time: Tue 17 Jun 2025 02:42:08 +0000 Manifest this update: Tue 17 Jun 2025 02:42:08 +0000 Manifest next update: Tue 24 Jun 2025 02:42:08 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: uCRoAx0AJI5i4LnXRAfwZgbSBkyU2zkN2yh3o44wetI=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: jsmEuKgoeYiJY/PhkO97a7NHRngriTFFOmRBgoLfjbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Jun 17 02:42:08 2025 GMT Not After : Jun 24 02:42:08 2025 GMT Subject: CN=6850d600-86ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:37:f6:bd:ce:40:10:66:37:22:6b:91:8c: 0d:f1:1a:35:b2:0f:49:f5:8d:78:04:e3:d0:38:f2: 75:8b:41:e9:31:1e:67:a5:cd:28:c3:bb:02:23:5d: 81:6b:0d:05:3e:74:94:64:93:5a:26:c6:fc:a5:14: ea:9e:73:c7:4f:b6:fa:ce:f0:7b:58:d4:58:77:6b: 52:9f:a8:4c:5c:b5:4a:e6:aa:bc:d3:06:d9:17:78: 91:51:a1:de:ba:66:72:d6:47:9f:bc:78:b5:df:a7: 61:c6:5c:c6:d0:60:d5:4f:39:45:d6:1e:b3:70:4e: 4f:b6:aa:53:06:68:90:14:e0:a3:40:98:3c:53:d1: c7:6d:2f:01:c5:7c:c1:8d:dd:76:6b:46:12:0d:d5: 88:20:c2:77:9b:a6:b5:96:3a:b5:bd:d1:02:b0:60: eb:0a:b5:02:55:dd:45:0d:c5:f0:c7:9f:35:b3:aa: 8b:9b:0f:4b:32:92:9e:de:7c:a9:ef:d0:7b:55:38: 29:c8:69:b1:ab:4b:9c:a3:ec:85:0d:99:39:0e:62: d6:7a:91:e8:38:c6:fb:09:23:35:47:75:7a:da:92: 5a:e0:55:46:f6:68:96:05:4f:51:b5:18:33:d5:0c: a7:b5:1b:0f:bd:8b:cb:33:37:4a:10:cc:eb:59:f9: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:7A:EC:82:26:AA:7E:40:60:40:FC:74:3E:7B:F9:B8:43:10:E3 X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a2:4d:25:13:61:1b:77:9f:bb:17:20:39:f9:1a:42:9c:4f: 9d:09:e4:12:06:8b:a3:8e:1f:d5:d3:b0:d5:99:51:e3:ac:1f: 16:98:92:9c:47:5e:ab:08:a8:46:c6:9b:68:88:34:14:ea:31: 24:f0:73:da:6a:52:00:2d:7f:00:92:fa:82:6e:e8:5f:1c:79: de:34:1b:cd:a5:29:f8:b9:6c:4b:d3:ef:37:89:76:d6:0c:14: 8e:26:fb:bb:8f:3d:be:ad:e3:ca:bd:b7:6d:d3:45:35:90:5a: 93:3b:34:b4:02:8b:8b:9f:84:55:dc:16:57:16:7c:b9:17:5b: 65:71:d1:5a:94:ed:81:99:35:01:76:43:ee:92:d6:1f:4b:9c: 7f:79:62:f6:bc:99:77:e4:47:a0:e0:6b:b1:95:5f:e7:be:80: 09:19:9c:32:df:6a:8f:95:e3:28:f4:4d:6d:f0:f8:26:1c:86: 2f:2b:84:44:65:1d:24:3f:e8:47:cd:14:42:a4:fb:60:19:cf: 75:5a:d6:20:66:0f:ed:d0:95:56:60:22:66:0e:38:22:e9:4c: 13:52:66:99:f3:dc:65:96:00:b8:8e:97:dd:62:6e:0e:7d:29: db:b6:a4:00:f5:69:1c:2e:31:ba:6b:85:ac:80:b5:ac:07:58: 01:d8:a0:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUwNjE3MDI0MjA4WhcNMjUwNjI0MDI0MjA4WjAYMRYwFAYD VQQDEw02ODUwZDYwMC04NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5U39r3OQBBmNyJrkYwN8Ro1sg9J9Y14BOPQOPJ1i0HpMR5npc0ow7sCI12B aw0FPnSUZJNaJsb8pRTqnnPHT7b6zvB7WNRYd2tSn6hMXLVK5qq80wbZF3iRUaHe umZy1kefvHi136dhxlzG0GDVTzlF1h6zcE5PtqpTBmiQFOCjQJg8U9HHbS8BxXzB jd12a0YSDdWIIMJ3m6a1ljq1vdECsGDrCrUCVd1FDcXwx581s6qLmw9LMpKe3nyp 79B7VTgpyGmxq0uco+yFDZk5DmLWepHoOMb7CSM1R3V62pJa4FVG9miWBU9RtRgz 1QyntRsPvYvLMzdKEMzrWfmz6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiBeuyC Jqp+QGBA/HQ+e/m4QxDjMB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcok0lE2Ebd5+7FyA5+RpCnE+dCeQSBoujjh/V07DVmVHjrB8WmJKc R16rCKhGxptoiDQU6jEk8HPaalIALX8AkvqCbuhfHHneNBvNpSn4uWxL0+83iXbW DBSOJvu7jz2+rePKvbdt00U1kFqTOzS0AouLn4RV3BZXFny5F1tlcdFalO2BmTUB dkPuktYfS5x/eWL2vJl35Eeg4GuxlV/nvoAJGZwy32qPleMo9E1t8PgmHIYvK4RE ZR0kP+hHzRRCpPtgGc91WtYgZg/t0JVWYCJmDjgi6UwTUmaZ89xllgC4jpfdYm4O fSnbtqQA9WkcLjG6a4WsgLWsB1gB2KAX -----END CERTIFICATE-----Generated at Thu Jun 19 04:31:26 2025 by rpki-client