$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: znuwWE2c7W6mpKPhgRDKmAGfsctHHlTeaF31v5i8Jqk= Subject key identifier: 12:9F:72:8D:45:0B:E8:49:79:AF:63:E8:8C:21:09:82:A1:F8:24:1B Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 149D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 1485 Signing time: Sat 14 Jun 2025 16:51:20 +0000 Manifest this update: Sat 14 Jun 2025 16:51:20 +0000 Manifest next update: Sat 21 Jun 2025 16:51:20 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: 5Tlunfp76tl3tewVMhb3VPjcqCNF7e2yLPznmhI0Ziw=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5277 (0x149d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Jun 14 16:51:20 2025 GMT Not After : Jun 21 16:51:20 2025 GMT Subject: CN=684da888-8157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bd:c2:14:60:de:60:4d:09:28:0c:d5:82:35: 5a:10:65:db:69:e1:f1:91:76:44:ed:ed:ba:ff:ec: 81:cd:e5:54:45:7c:f5:7d:b4:87:9b:9b:10:19:2c: ab:8d:e2:04:e3:e8:59:17:df:ef:cc:da:c4:76:bb: e8:74:25:2f:a7:2f:4f:6b:a0:88:98:7e:c2:2d:8c: 1a:44:5f:b9:4f:d1:5b:c4:88:75:3a:89:ac:2c:d9: 2f:df:11:73:df:75:a4:ac:2f:75:a7:c0:af:09:df: 4a:a9:62:44:bd:9b:36:57:2b:d1:70:f8:36:ba:00: d8:73:26:07:59:71:76:69:4e:3b:ad:d8:69:b4:5d: 28:84:cd:db:58:21:73:0a:0c:fe:46:2d:7e:e9:e4: dc:50:95:7b:b4:b6:b6:f9:fc:52:7e:98:5a:50:23: 8e:2f:fb:23:48:39:a6:2a:b0:a1:5f:28:4f:3f:97: f4:b2:85:17:f7:dd:f2:54:eb:1b:1b:60:07:15:35: b8:cb:be:6e:f6:61:a9:eb:1e:78:55:32:ad:58:68: 24:60:af:2b:31:b3:ea:af:bd:ae:e2:d5:7e:81:53: 27:c5:8a:55:df:4f:5c:a0:7b:35:0a:df:cd:4d:cb: d0:07:1c:b5:f9:2f:5e:e8:ff:6e:f6:b4:8b:b6:55: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9F:72:8D:45:0B:E8:49:79:AF:63:E8:8C:21:09:82:A1:F8:24:1B X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:22:d8:22:7c:d5:c9:79:ee:ab:eb:b5:5e:ed:1e:7d:15: 58:fe:30:ac:0c:28:3f:02:e4:c1:b0:78:da:af:ec:88:4d:68: 37:e1:ff:cf:28:fa:b3:85:f3:40:21:4b:e1:8d:35:81:09:b9: 85:6b:7e:ae:c6:df:49:00:cb:41:17:11:34:6b:78:da:8b:83: 09:d1:ab:5a:0c:e7:0a:f9:a1:c9:ae:81:fd:e1:06:02:22:da: 6b:e4:47:c6:0d:ca:5d:ff:66:bd:6e:00:b1:48:0f:e2:f0:b4: 80:9a:18:15:6e:60:27:82:9d:74:08:6b:0d:1c:28:a8:76:1c: cb:c1:5a:f0:95:46:38:14:49:eb:69:15:fb:be:88:43:13:3c: 62:88:3d:0a:c7:47:59:76:57:9b:0e:71:79:b0:cb:35:04:db: 80:c3:79:d3:2c:db:56:41:24:a5:6a:7a:31:75:7e:d9:16:17: a7:1c:65:c8:38:0d:d8:7d:6c:1a:8f:5b:75:27:7e:18:dd:1c: 53:f5:1a:80:7f:13:85:64:8c:c4:6c:50:cd:27:13:c5:fd:3b: 4b:a4:90:7b:20:0b:95:7d:0c:f8:2d:e8:e1:4e:ca:ac:ca:a0: 77:fe:00:09:51:e4:bd:43:d7:c8:82:f9:29:7e:4a:f8:22:65: 2e:00:33:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNjE0MTY1MTIwWhcNMjUwNjIxMTY1MTIwWjAYMRYwFAYD VQQDEw02ODRkYTg4OC04MTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7L3CFGDeYE0JKAzVgjVaEGXbaeHxkXZE7e26/+yBzeVURXz1fbSHm5sQGSyr jeIE4+hZF9/vzNrEdrvodCUvpy9Pa6CImH7CLYwaRF+5T9FbxIh1OomsLNkv3xFz 33WkrC91p8CvCd9KqWJEvZs2VyvRcPg2ugDYcyYHWXF2aU47rdhptF0ohM3bWCFz Cgz+Ri1+6eTcUJV7tLa2+fxSfphaUCOOL/sjSDmmKrChXyhPP5f0soUX993yVOsb G2AHFTW4y75u9mGp6x54VTKtWGgkYK8rMbPqr72u4tV+gVMnxYpV309coHs1Ct/N TcvQBxy1+S9e6P9u9rSLtlW+SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKfco1F C+hJea9j6IwhCYKh+CQbMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXPSLYInzVyXnuq+u1Xu0efRVY/jCsDCg/AuTBsHjar+yITWg34f/P KPqzhfNAIUvhjTWBCbmFa36uxt9JAMtBFxE0a3jai4MJ0ataDOcK+aHJroH94QYC Itpr5EfGDcpd/2a9bgCxSA/i8LSAmhgVbmAngp10CGsNHCiodhzLwVrwlUY4FEnr aRX7vohDEzxiiD0Kx0dZdlebDnF5sMs1BNuAw3nTLNtWQSSlanoxdX7ZFhenHGXI OA3YfWwaj1t1J34Y3RxT9RqAfxOFZIzEbFDNJxPF/TtLpJB7IAuVfQz4LejhTsqs yqB3/gAJUeS9Q9fIgvkpfkr4ImUuADOu -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:34 2025 by rpki-client