$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: paEBCoVhFR6QU4eY/LZ1Ijow+MMv6k/40Hr7n4tvKFI= Subject key identifier: 95:62:91:03:97:FA:E1:FD:AD:88:5A:C4:42:89:67:67:C0:EF:69:F6 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: 59 Signing time: Fri 13 Jun 2025 06:13:55 +0000 Manifest this update: Fri 13 Jun 2025 06:13:54 +0000 Manifest next update: Fri 20 Jun 2025 06:13:54 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: qX0SNf+Aa+SKcl3KS40T9UAYEWpTglIG/bmrb7/x1fs=) 2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) 3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Jun 13 06:13:54 2025 GMT Not After : Jun 20 06:13:54 2025 GMT Subject: CN=684bc1a3-ae8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:e7:5e:bc:f5:a2:2c:de:fc:9e:c4:4f:d4: 65:ad:29:9e:e5:86:70:bc:e2:37:25:94:cf:16:46: 00:88:07:83:c2:ef:a3:bf:4e:36:35:51:29:e9:a5: 59:ca:b6:c5:b6:92:4b:26:6d:9e:21:fb:61:a5:35: 9c:2b:00:1d:20:2b:00:4c:f3:be:55:4d:66:61:a1: cb:72:6b:da:d7:53:de:ac:6d:09:dc:c5:ed:2b:2d: f5:cf:b0:aa:7f:b3:6e:b7:e1:e5:7d:92:15:ce:6c: 5d:93:8e:5b:e8:a1:30:f8:e7:9c:25:f9:28:b8:99: aa:e4:b9:a3:e2:16:68:85:d1:76:40:40:09:d8:0c: f0:1f:bd:61:ee:ba:12:cb:78:55:61:56:13:da:1f: d3:52:d1:ab:53:e1:65:68:49:1c:3f:13:7a:4a:39: 99:fc:66:a9:f8:97:ea:f7:c6:59:2f:36:2f:fe:ed: 96:dc:c3:67:01:eb:7f:bc:55:55:1c:4a:1a:6c:32: 3a:7f:49:91:b0:e8:c5:83:a7:44:ac:06:4f:d2:8a: 84:8b:8b:db:32:e9:da:1f:a3:71:a3:fb:a6:2e:c6: 50:70:a3:35:37:55:9f:d5:c9:8c:b1:29:2e:96:1b: 0a:d4:c5:53:3b:89:26:31:ac:87:de:58:5e:27:09: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:91:03:97:FA:E1:FD:AD:88:5A:C4:42:89:67:67:C0:EF:69:F6 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:31:6c:71:23:de:f3:85:b3:4c:c9:a0:0f:98:1f:81:9b:f8: f2:fa:16:e0:9e:9c:bd:8b:20:28:55:59:60:43:e0:68:14:40: 8a:5a:da:29:9f:d9:16:89:eb:f1:3f:da:fa:13:a7:60:f6:18: 76:64:35:c3:3a:69:2e:aa:6c:fa:ba:47:48:5e:79:85:3b:55: 91:90:17:44:4a:4a:bf:36:28:3b:94:e4:bb:8e:2c:ad:8e:c7: 76:19:7f:e6:d8:7a:9d:4a:5b:1d:51:02:08:07:0d:47:23:74: 4c:b4:6a:ec:6b:d1:fe:9e:88:28:90:78:32:d9:87:b3:c5:cd: fe:5e:34:16:62:e6:ae:6d:31:a3:5b:58:c8:30:da:ba:7c:f3: e8:85:a2:2f:e6:b4:31:1a:00:a7:32:d2:22:90:8d:e6:83:34: 8f:e5:aa:d2:b9:f9:12:af:bf:e7:9e:f0:82:cb:45:3e:48:b2: 52:8f:df:0e:91:f9:c5:03:04:60:ee:ad:7d:97:bb:b2:38:e5: 76:a6:20:30:d4:30:a8:e9:97:7b:f8:3d:11:3a:76:88:be:80: 73:e3:e9:5e:41:13:b9:a9:21:3e:88:e7:a4:4b:6f:c3:3d:c3: 35:4e:18:c6:1e:04:d7:4f:99:62:c8:48:bb:a7:62:68:c2:c1: 01:d0:d1:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw OENBN0NFOTAeFw0yNTA2MTMwNjEzNTRaFw0yNTA2MjAwNjEzNTRaMBgxFjAUBgNV BAMTDTY4NGJjMWEzLWFlOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Y+devPWiLN78nsRP1GWtKZ7lhnC84jcllM8WRgCIB4PC76O/TjY1USnppVnK tsW2kksmbZ4h+2GlNZwrAB0gKwBM875VTWZhoctya9rXU96sbQncxe0rLfXPsKp/ s2634eV9khXObF2TjlvooTD455wl+Si4markuaPiFmiF0XZAQAnYDPAfvWHuuhLL eFVhVhPaH9NS0atT4WVoSRw/E3pKOZn8Zqn4l+r3xlkvNi/+7Zbcw2cB63+8VVUc ShpsMjp/SZGw6MWDp0SsBk/SioSLi9sy6dofo3Gj+6YuxlBwozU3VZ/VyYyxKS6W GwrUxVM7iSYxrIfeWF4nCcJ7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlWKRA5f6 4f2tiFrEQolnZ8DvafYwHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MTgwLzc3NDI4N0YyRDZDNzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRp QnhydzRhRHpOd3dqS2ZPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHAxbHEj3vOFs0zJoA+YH4Gb+PL6FuCenL2LIChVWWBD4GgUQIpa2imf 2RaJ6/E/2voTp2D2GHZkNcM6aS6qbPq6R0heeYU7VZGQF0RKSr82KDuU5LuOLK2O x3YZf+bYep1KWx1RAggHDUcjdEy0auxr0f6eiCiQeDLZh7PFzf5eNBZi5q5tMaNb WMgw2rp88+iFoi/mtDEaAKcy0iKQjeaDNI/lqtK5+RKvv+ee8ILLRT5IslKP3w6R +cUDBGDurX2Xu7I45XamIDDUMKjpl3v4PRE6doi+gHPj6V5BE7mpIT6I56RLb8M9 wzVOGMYeBNdPmWLISLunYmjCwQHQ0Qc= -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:03 2025 by rpki-client