$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json) Hash identifier: 1Qnpcvjel3YTu8YckbR+aXkAzD6cniUnfZI9+d3uk/o= Subject key identifier: 2C:3E:03:C8:46:17:A8:B9:E5:2F:A8:62:FC:4E:CA:F0:0C:95:E7:05 Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft Manifest number: 0956 Signing time: Sat 14 Jun 2025 20:01:55 +0000 Manifest this update: Sat 14 Jun 2025 20:01:54 +0000 Manifest next update: Sat 21 Jun 2025 20:01:54 +0000 Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: en+wRAIuA9Cf5wlyli8/Lai034+54W9CPwH84Sl/SgE=) 2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: wci0Xfqzo59Y8jWuwf9OlzNgtFeflA2lDlymuLqWFus=) 3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: vQbCuWQwTDhbmdI3t8jm44MzJ+6k3uWJJXIQLGrnQxI=) 4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: dKpKNCrURAsBv07U8aimKZSBpZKUHuEP819khAXBuFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Validity Not Before: Jun 14 20:01:54 2025 GMT Not After : Jun 21 20:01:54 2025 GMT Subject: CN=684dd532-e2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:80:29:42:e7:ab:d0:79:8d:5c:df:d5:bb: d5:56:ef:70:9d:ee:48:5e:96:1b:09:71:2d:e1:9b: 12:50:da:6d:34:6c:3e:3a:4a:e6:19:6d:3c:5a:67: 2f:bf:5a:96:18:e5:3d:89:e1:c1:b5:69:f9:e1:b6: a3:25:8f:07:9d:ae:82:9c:64:5b:f2:98:18:5e:97: 70:0c:bf:f6:5c:43:27:30:b2:f4:c3:a0:d0:0a:d8: 05:28:63:bb:cd:f6:42:02:e5:3b:a8:1e:1b:8b:18: 93:87:d2:84:03:c1:ac:3d:2a:3c:20:1b:94:6f:67: ab:a4:83:54:31:08:1f:77:f0:62:e3:ab:74:e6:37: f4:29:b5:91:28:86:43:d5:34:07:5d:f2:20:c2:3e: 82:35:2d:ee:05:4d:c8:7e:85:2d:18:b7:a9:ef:81: be:78:04:a2:23:d6:bf:ee:af:f4:eb:5f:46:6f:09: 18:8f:54:77:88:9a:22:72:80:6e:89:7c:bb:87:8b: f1:49:a3:03:33:f8:b8:02:bd:83:07:3b:e6:a8:95: 84:1a:89:96:69:8d:f3:09:4f:a6:a9:fc:9a:94:43: ac:e2:95:2b:37:cf:04:22:05:19:b1:12:88:ab:1c: 25:ba:28:86:b6:f6:9b:82:b6:8c:c5:58:5b:64:33: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3E:03:C8:46:17:A8:B9:E5:2F:A8:62:FC:4E:CA:F0:0C:95:E7:05 X509v3 Authority Key Identifier: keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bd:1d:28:31:cf:2c:2b:e9:2e:04:8f:63:2a:51:55:e8:b4: e2:0a:e9:54:d6:02:4b:47:47:9c:6c:05:72:a9:66:7d:8d:08: d0:de:73:6b:d2:05:59:53:85:e9:db:72:50:68:d4:6d:78:31: d3:d0:29:ad:aa:f6:a4:38:94:5e:f2:f7:60:ad:9c:7d:e8:ae: df:bd:d3:7c:e0:a8:96:7d:49:a8:42:81:97:3f:95:bb:57:f5: d4:39:d2:62:16:dc:47:75:49:84:0a:0f:09:d3:f3:68:9e:4a: cb:0c:c2:d8:4e:00:9e:ed:11:52:fa:88:6a:5c:a0:40:75:b2: 04:a5:c7:16:8e:ab:12:bd:fc:e6:c7:7c:07:6a:82:f7:8c:e5: 17:e4:1c:1c:22:f7:6a:a2:cc:ee:3d:b2:92:c6:d0:bc:be:36: 6d:4a:8f:9c:cf:c1:d1:52:f0:dd:ac:27:78:d4:a8:e9:62:45: a2:7d:07:4d:ec:c3:d2:10:aa:0d:f5:6a:1e:79:fb:f8:25:83: 9d:ab:07:b3:f4:bc:8f:00:f7:0f:1b:57:f3:72:0f:9f:fd:29: 7e:52:bb:b6:9f:6e:8d:91:e5:58:02:7e:37:dd:d4:d7:f7:bd: fe:7a:53:0b:6e:1a:27:33:a5:55:7f:92:3b:4d:0e:a5:8c:2f: f9:8c:bb:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZEQURDNjJBNTNB N0EwMkU1REIwHhcNMjUwNjE0MjAwMTU0WhcNMjUwNjIxMjAwMTU0WjAYMRYwFAYD VQQDEw02ODRkZDUzMi1lMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA202AKULnq9B5jVzf1bvVVu9wne5IXpYbCXEt4ZsSUNptNGw+OkrmGW08Wmcv v1qWGOU9ieHBtWn54bajJY8Hna6CnGRb8pgYXpdwDL/2XEMnMLL0w6DQCtgFKGO7 zfZCAuU7qB4bixiTh9KEA8GsPSo8IBuUb2erpINUMQgfd/Bi46t05jf0KbWRKIZD 1TQHXfIgwj6CNS3uBU3IfoUtGLep74G+eASiI9a/7q/0619GbwkYj1R3iJoicoBu iXy7h4vxSaMDM/i4Ar2DBzvmqJWEGomWaY3zCU+mqfyalEOs4pUrN88EIgUZsRKI qxwluiiGtvabgraMxVhbZDNnQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw+A8hG F6i55S+oYvxOyvAMlecFMB8GA1UdIwQYMBaAFBybosX+qMA02lUf2txipTp6AuXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4Ni9DNjdEMTc2RTlB NUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dEVGFWUl9hM0dLbE9ub0M1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hKdWl4ZjZvd0RUYVZSX2EzR0tsT25vQzVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dE VGFWUl9hM0dLbE9ub0M1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvR0oMc8sK+kuBI9jKlFV6LTiCulU1gJLR0ecbAVyqWZ9jQjQ3nNr 0gVZU4Xp23JQaNRteDHT0CmtqvakOJRe8vdgrZx96K7fvdN84KiWfUmoQoGXP5W7 V/XUOdJiFtxHdUmECg8J0/NonkrLDMLYTgCe7RFS+ohqXKBAdbIEpccWjqsSvfzm x3wHaoL3jOUX5BwcIvdqoszuPbKSxtC8vjZtSo+cz8HRUvDdrCd41KjpYkWifQdN 7MPSEKoN9Woeefv4JYOdqwez9LyPAPcPG1fzcg+f/Sl+Uru2n26NkeVYAn433dTX 973+elMLbhonM6VVf5I7TQ6ljC/5jLvF -----END CERTIFICATE-----Generated at Mon Jun 16 17:08:52 2025 by rpki-client