$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: uS/7kOlQIwKMCKAvLwIWeLbS+TRhLDdIDzYlx6OMECg= Subject key identifier: 2B:20:60:BB:F3:92:35:EF:C9:87:BF:90:1C:C9:CE:58:FD:F3:12:CF Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B22 Signing time: Wed 18 Jun 2025 16:18:46 +0000 Manifest this update: Wed 18 Jun 2025 16:18:46 +0000 Manifest next update: Wed 25 Jun 2025 16:18:46 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: gRKAqMamMqD/V2musJEF8jJO2EG88EFF0F2vSOT+FFs=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7012 (0x1b64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Jun 18 16:18:46 2025 GMT Not After : Jun 25 16:18:46 2025 GMT Subject: CN=6852e6e6-f1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:cd:47:d9:f1:ec:36:ad:67:66:a7:40:ae: 28:35:66:e1:75:c9:b0:47:6b:3e:72:5a:3e:a5:6f: 6c:f8:f9:6d:9f:ef:ea:78:a0:a3:23:c7:c6:fb:06: c7:39:3f:34:6b:c2:c4:ea:7e:bc:7d:b7:c7:c0:76: f8:26:7e:96:46:6d:0f:76:01:87:95:53:92:86:4e: 3a:1c:a4:4e:c7:9a:08:13:43:2d:05:9b:19:c5:e9: 51:75:8d:f9:00:c7:f2:41:fb:95:29:b7:7c:7c:6f: 71:ab:91:7f:76:77:10:f2:9f:59:6a:54:a7:29:66: 7f:db:2e:d3:1a:a4:20:c5:2b:2e:fd:04:77:b6:ce: 1e:ef:91:f3:b4:cb:d5:bb:aa:3b:37:7c:52:86:0c: 86:38:44:0f:e1:6d:73:18:cf:34:74:ee:38:d8:c1: cf:97:f3:a9:b4:37:c0:16:5f:25:c0:6b:07:20:b3: 38:b6:25:b2:ba:0b:39:c6:2f:e7:02:86:4f:ba:8d: 9b:0b:94:4b:5f:38:95:1d:36:f8:cc:3b:d0:95:26: 5c:3e:a7:26:4f:66:eb:16:1e:21:6a:ec:c4:be:a0: a0:79:94:7f:92:68:d4:a1:cb:15:ad:14:aa:67:8a: ac:0a:c9:d3:19:1a:46:11:c8:43:d7:97:7d:2a:36: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:60:BB:F3:92:35:EF:C9:87:BF:90:1C:C9:CE:58:FD:F3:12:CF X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c6:e8:d4:19:41:f4:4e:11:92:55:a4:37:a7:f8:85:12:b4: f0:af:90:99:1e:84:e3:c1:d2:c6:0f:a7:26:12:e8:72:73:2a: 15:42:aa:39:cd:1e:c1:3d:2c:00:a0:88:ce:d5:97:40:3d:45: 38:95:0e:d8:43:b3:f9:d7:ef:59:3d:71:52:0b:50:bf:ba:ba: 4c:00:c2:59:ea:1e:01:fe:d7:d2:fb:ee:4e:bb:3a:49:e6:30: a6:60:da:4d:90:cc:64:06:f2:13:33:b7:94:a4:4b:06:d9:9d: b3:30:43:34:cc:0b:41:0a:a0:da:c0:d4:f5:03:d1:c1:f9:73: 2d:e8:7f:80:c2:43:10:2e:52:de:22:f1:da:d0:2d:0e:0c:01: c6:56:21:e3:7f:26:b5:85:fc:fa:b7:b5:9d:a4:8d:d4:cf:14: 16:34:5a:34:65:91:e6:a6:16:cc:42:e3:ea:c0:51:92:96:24: 25:c3:82:3a:d8:c5:04:46:28:ce:c0:5d:a6:ae:21:63:f7:cf: d9:1a:92:bf:6a:41:2e:a5:46:9c:92:eb:7b:d0:cc:02:39:06: da:7f:44:16:5f:7e:a0:ce:fc:84:0c:9f:80:86:9d:50:31:91: c0:0b:ee:19:09:b7:5e:ea:8f:3f:3f:ba:96:0a:8c:ca:08:f9: fd:22:e2:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwNjE4MTYxODQ2WhcNMjUwNjI1MTYxODQ2WjAYMRYwFAYD VQQDEw02ODUyZTZlNi1mMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0bNR9nx7DatZ2anQK4oNWbhdcmwR2s+clo+pW9s+Pltn+/qeKCjI8fG+wbH OT80a8LE6n68fbfHwHb4Jn6WRm0PdgGHlVOShk46HKROx5oIE0MtBZsZxelRdY35 AMfyQfuVKbd8fG9xq5F/dncQ8p9ZalSnKWZ/2y7TGqQgxSsu/QR3ts4e75HztMvV u6o7N3xShgyGOEQP4W1zGM80dO442MHPl/OptDfAFl8lwGsHILM4tiWyugs5xi/n AoZPuo2bC5RLXziVHTb4zDvQlSZcPqcmT2brFh4hauzEvqCgeZR/kmjUocsVrRSq Z4qsCsnTGRpGEchD15d9KjaDVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsgYLvz kjXvyYe/kBzJzlj98xLPMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnxujUGUH0ThGSVaQ3p/iFErTwr5CZHoTjwdLGD6cmEuhycyoVQqo5 zR7BPSwAoIjO1ZdAPUU4lQ7YQ7P51+9ZPXFSC1C/urpMAMJZ6h4B/tfS++5OuzpJ 5jCmYNpNkMxkBvITM7eUpEsG2Z2zMEM0zAtBCqDawNT1A9HB+XMt6H+AwkMQLlLe IvHa0C0ODAHGViHjfya1hfz6t7WdpI3UzxQWNFo0ZZHmphbMQuPqwFGSliQlw4I6 2MUERijOwF2mriFj98/ZGpK/akEupUackut70MwCOQbaf0QWX36gzvyEDJ+Ahp1Q MZHAC+4ZCbde6o8/P7qWCozKCPn9IuIQ -----END CERTIFICATE-----Generated at Thu Jun 19 08:43:05 2025 by rpki-client