$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft File: Ht151WWBY19_MpfG0nDHN0l4nj0.mft (raw, json) Hash identifier: BLJDiEPTjAPeIeeG5GufwjsEvAhAxMLAocSoMAk3jAs= Subject key identifier: 90:9A:10:54:8F:E9:1C:5A:A1:E4:89:AE:9F:8A:CE:F9:C2:82:E4:BD Authority key identifier: 1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D Certificate issuer: /CN=A9185D6E/serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft Manifest number: 0587 Signing time: Wed 18 Jun 2025 23:08:41 +0000 Manifest this update: Wed 18 Jun 2025 23:08:41 +0000 Manifest next update: Wed 25 Jun 2025 23:08:40 +0000 Files and hashes: 1: Ht151WWBY19_MpfG0nDHN0l4nj0.crl (hash: uoZfRyssfCwn6UTm5+5Oth+DtYwzlk5fBxhWBY2DIYo=) 2: 23331070F9FB11EB8CFF5E7DC4F9AE02.roa (hash: F+k1pgKAm7HpOhKtY5/4J+QSbulAvGQUTiDf7IqkyBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=1EDD79D56581635F7F3297C6D270C73749789E3D Validity Not Before: Jun 18 23:08:41 2025 GMT Not After : Jun 25 23:08:40 2025 GMT Subject: CN=685346f9-5eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:fa:62:f9:31:08:b4:54:5c:88:bd:10:8b: 55:95:b7:44:38:39:33:e0:15:27:c1:f3:15:fc:cf: 72:3c:ed:e1:5e:66:98:6c:b6:1c:9e:18:38:45:02: 79:b3:ae:13:5c:9d:de:4a:f6:9d:5d:09:79:9c:20: 79:54:e8:36:54:ee:fa:20:a6:d9:b9:c7:99:5b:31: 5d:5a:3b:f7:69:c3:b5:52:11:47:cc:60:fb:3f:d1: c5:56:1d:28:f7:23:dc:90:3a:1b:a0:87:d7:78:98: b8:67:13:84:e8:79:4a:dc:23:12:db:f4:95:9e:f7: 0d:ef:8b:c0:f8:dd:74:d5:8f:6b:c0:0f:8d:55:69: 19:52:46:27:f9:d3:12:ce:fd:4a:73:5f:1b:84:05: 5d:3d:a1:08:0e:5f:d3:c2:eb:73:3c:19:9c:5b:47: 10:c0:35:eb:ab:46:c7:02:82:94:b0:8d:f9:34:51: 91:e1:15:bd:ec:9e:29:01:2b:9d:fe:08:c7:3d:b1: a8:db:85:fb:e4:b0:c3:95:0f:40:df:d0:df:15:67: 4c:6b:2d:ad:d7:e1:ab:7c:28:78:cd:ae:ea:90:f3: d1:97:68:d8:3c:70:7b:e9:40:ae:7d:91:b2:00:54: 44:17:3a:e9:32:0f:e1:47:3d:60:dc:df:38:64:4b: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:10:54:8F:E9:1C:5A:A1:E4:89:AE:9F:8A:CE:F9:C2:82:E4:BD X509v3 Authority Key Identifier: keyid:1E:DD:79:D5:65:81:63:5F:7F:32:97:C6:D2:70:C7:37:49:78:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht151WWBY19_MpfG0nDHN0l4nj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/56E9A7A4DFF111EB894F3067C4F9AE02/Ht151WWBY19_MpfG0nDHN0l4nj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:70:3c:49:fb:71:e5:1d:b9:41:c8:28:2e:38:c5:b2:06:2c: 15:d5:ed:04:4d:93:43:a8:24:34:4f:03:43:96:55:c7:98:32: 38:47:c6:57:99:f9:19:1f:2c:e7:24:b4:8e:af:57:62:05:cf: 1e:21:26:52:c3:51:8c:cd:c5:be:09:5b:19:e0:cb:cb:ae:af: 1a:2d:cd:17:b8:e1:14:55:6a:06:55:af:6d:75:15:f8:3c:59: 38:fd:cb:6f:06:12:96:cc:5b:13:1e:eb:99:5d:79:17:b6:e7: 24:98:b8:68:42:f8:68:33:f0:72:61:15:60:05:cc:db:c0:59: aa:b9:46:2c:7c:91:5e:c4:6d:dc:f5:3c:9b:f9:3d:95:8e:12: 24:26:20:8f:b1:dc:2f:57:19:6f:f7:3b:d4:bc:2c:3e:29:c9: 31:92:af:ba:c6:e9:c8:5d:5b:0c:df:45:8b:04:c0:f8:b4:67: 2d:ce:3a:d5:d5:cb:5f:82:11:f6:80:7f:7b:70:8e:42:97:a9: cf:ec:62:9a:be:0e:21:2f:f5:04:ea:09:a4:c0:2f:3b:1e:45: 5f:91:8c:43:6d:72:0e:61:13:8b:85:f5:5c:46:17:10:9f:5f: dd:01:d5:2b:8e:ef:7a:9a:23:53:60:a0:3c:d1:c7:a1:5f:09: 96:b9:4e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDFFREQ3OUQ1NjU4MTYzNUY3RjMyOTdDNkQyNzBDNzM3 NDk3ODlFM0QwHhcNMjUwNjE4MjMwODQxWhcNMjUwNjI1MjMwODQwWjAYMRYwFAYD VQQDEw02ODUzNDZmOS01ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQ/6YvkxCLRUXIi9EItVlbdEODkz4BUnwfMV/M9yPO3hXmaYbLYcnhg4RQJ5 s64TXJ3eSvadXQl5nCB5VOg2VO76IKbZuceZWzFdWjv3acO1UhFHzGD7P9HFVh0o 9yPckDoboIfXeJi4ZxOE6HlK3CMS2/SVnvcN74vA+N101Y9rwA+NVWkZUkYn+dMS zv1Kc18bhAVdPaEIDl/TwutzPBmcW0cQwDXrq0bHAoKUsI35NFGR4RW97J4pASud /gjHPbGo24X75LDDlQ9A39DfFWdMay2t1+GrfCh4za7qkPPRl2jYPHB76UCufZGy AFREFzrpMg/hRz1g3N84ZEvK5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCaEFSP 6RxaoeSJrp+KzvnCguS9MB8GA1UdIwQYMBaAFB7dedVlgWNffzKXxtJwxzdJeJ49 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS81NkU5QTdBNERG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkxOV9NcGZHMG5ESE4wbDRu ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0MTUxV1dCWTE5X01wZkcwbkRITjBsNG5qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS81NkU5QTdBNERGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9IdDE1MVdXQlkx OV9NcGZHMG5ESE4wbDRuajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvcDxJ+3HlHblByCguOMWyBiwV1e0ETZNDqCQ0TwNDllXHmDI4R8ZX mfkZHyznJLSOr1diBc8eISZSw1GMzcW+CVsZ4MvLrq8aLc0XuOEUVWoGVa9tdRX4 PFk4/ctvBhKWzFsTHuuZXXkXtuckmLhoQvhoM/ByYRVgBczbwFmquUYsfJFexG3c 9Tyb+T2VjhIkJiCPsdwvVxlv9zvUvCw+Kckxkq+6xunIXVsM30WLBMD4tGctzjrV 1ctfghH2gH97cI5Cl6nP7GKavg4hL/UE6gmkwC87HkVfkYxDbXIOYROLhfVcRhcQ n1/dAdUrju96miNTYKA80cehXwmWuU4P -----END CERTIFICATE-----Generated at Thu Jun 19 22:04:40 2025 by rpki-client