$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: mpzvm9P/J5QdGQvvL4M2BCYCt6aqwxmcO5cVGevx4tg= Subject key identifier: 63:8A:1A:31:64:32:41:88:8A:D9:5A:27:21:DC:65:31:8E:F3:73:92 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 0308 Signing time: Sun 15 Jun 2025 00:55:49 +0000 Manifest this update: Sun 15 Jun 2025 00:55:48 +0000 Manifest next update: Sun 22 Jun 2025 00:55:48 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: GErydUOkgbSeJEwe0QsSUv3Nd+FgLiY9Psa7qWokkr8=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Jun 15 00:55:48 2025 GMT Not After : Jun 22 00:55:48 2025 GMT Subject: CN=684e1a15-b404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:f6:d5:72:dd:64:42:24:09:88:38:d1:9b: b8:7e:a4:02:52:e9:65:f3:8f:92:47:f5:41:7c:e2: 3f:a2:b5:64:a7:29:86:a9:59:bc:36:c2:26:29:cd: 87:45:5b:31:50:fc:8f:58:34:36:62:37:17:7c:a0: f3:15:98:c8:78:5e:35:e3:4d:bd:34:a5:0e:0e:03: a6:57:ad:e4:58:a6:0d:0e:c9:a4:22:1d:60:a8:22: 5d:01:fb:71:6e:76:fe:84:48:09:c5:13:b7:4a:c3: f3:15:d3:a6:79:37:7c:0f:26:46:d6:05:bb:8b:ee: 7b:1f:e1:0c:0e:74:80:07:ce:cb:30:d0:b6:a5:47: e8:ff:22:62:ec:c5:52:6a:ca:51:64:3d:e6:fd:1e: 01:93:a3:bc:a9:26:6b:e4:4a:0c:39:f3:5a:86:f7: 48:92:b3:0c:22:c7:f5:d4:ba:08:b5:00:35:0b:4a: 2b:d2:51:7a:e1:8d:fb:ef:40:c1:f1:4e:e4:6d:a5: 51:e4:19:ee:6f:5e:73:10:49:79:1b:e2:0e:ca:76: 5b:96:9d:68:5b:ef:29:80:98:b1:20:b5:1a:2b:7c: 55:20:5e:6a:83:67:f4:6e:f5:15:d2:62:ea:cb:c9: 52:29:98:04:dd:5f:57:4e:86:57:d7:44:43:52:93: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8A:1A:31:64:32:41:88:8A:D9:5A:27:21:DC:65:31:8E:F3:73:92 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:0d:5d:70:8f:ac:6d:1d:0d:21:82:19:e5:60:86:7f:c5:bf: 8e:8e:cd:b1:a5:25:f1:c9:f1:9b:c7:9c:f4:73:4f:1f:aa:09: 70:f2:d6:c2:d8:f9:49:d4:1c:c2:7e:a1:f1:1f:3a:3b:6e:50: 92:fb:2e:c3:d2:77:f8:f9:81:0d:a7:09:f6:ce:33:0a:ba:ca: 95:1b:6a:2d:16:8f:09:f3:37:be:b1:f7:75:55:ce:2f:38:4c: 12:ec:e2:72:3c:b9:4b:3d:75:a3:bb:a8:9b:78:52:15:11:2a: 03:47:5a:e9:d2:2e:ad:40:d3:93:ea:04:d4:3e:03:1c:6b:63: 21:73:11:0d:d8:22:79:45:2c:6d:9c:d5:8d:98:6a:0c:9b:13: 0d:e1:59:63:e1:d2:3a:6f:0a:47:78:c8:81:2e:70:14:c0:9e: 77:26:89:27:21:84:93:62:96:2b:e0:8b:79:57:50:94:12:a4: ad:95:92:19:27:d4:44:99:09:06:cb:5c:58:be:17:2c:3b:c9: 79:0f:d8:9c:c8:eb:b0:da:b8:89:67:05:57:de:d9:06:a8:1a: 51:39:b0:12:a9:5f:03:d2:6a:d2:9f:2a:06:54:ac:e7:93:58: a2:05:3f:81:72:60:60:38:f9:34:07:56:2c:4b:93:c4:22:7c: cf:ff:0c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUwNjE1MDA1NTQ4WhcNMjUwNjIyMDA1NTQ4WjAYMRYwFAYD VQQDEw02ODRlMWExNS1iNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Dz21XLdZEIkCYg40Zu4fqQCUull84+SR/VBfOI/orVkpymGqVm8NsImKc2H RVsxUPyPWDQ2YjcXfKDzFZjIeF414029NKUODgOmV63kWKYNDsmkIh1gqCJdAftx bnb+hEgJxRO3SsPzFdOmeTd8DyZG1gW7i+57H+EMDnSAB87LMNC2pUfo/yJi7MVS aspRZD3m/R4Bk6O8qSZr5EoMOfNahvdIkrMMIsf11LoItQA1C0or0lF64Y3770DB 8U7kbaVR5Bnub15zEEl5G+IOynZblp1oW+8pgJixILUaK3xVIF5qg2f0bvUV0mLq y8lSKZgE3V9XToZX10RDUpPeKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOKGjFk MkGIitlaJyHcZTGO83OSMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHDV1wj6xtHQ0hghnlYIZ/xb+Ojs2xpSXxyfGbx5z0c08fqglw8tbC 2PlJ1BzCfqHxHzo7blCS+y7D0nf4+YENpwn2zjMKusqVG2otFo8J8ze+sfd1Vc4v OEwS7OJyPLlLPXWju6ibeFIVESoDR1rp0i6tQNOT6gTUPgMca2MhcxEN2CJ5RSxt nNWNmGoMmxMN4Vlj4dI6bwpHeMiBLnAUwJ53JoknIYSTYpYr4It5V1CUEqStlZIZ J9REmQkGy1xYvhcsO8l5D9icyOuw2riJZwVX3tkGqBpRObASqV8D0mrSnyoGVKzn k1iiBT+BcmBgOPk0B1YsS5PEInzP/wyb -----END CERTIFICATE-----Generated at Sun Jun 15 08:47:59 2025 by rpki-client