$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: qGfZZ1G+tVFaqDdqwVjgtSLKIl3ajUBwTH6VrvpTSZI= Subject key identifier: 04:6E:CB:13:59:A4:DB:56:ED:03:84:73:B6:78:09:16:CA:5A:BA:A8 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0EBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0E98 Signing time: Wed 18 Jun 2025 17:38:34 +0000 Manifest this update: Wed 18 Jun 2025 17:38:33 +0000 Manifest next update: Wed 25 Jun 2025 17:38:33 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: 004kIO3W0bAelwwEJO+qjBiEL5X4WAwePMwLLXj/dVE=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3770 (0xeba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Jun 18 17:38:33 2025 GMT Not After : Jun 25 17:38:33 2025 GMT Subject: CN=6852f999-27b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:ed:75:a5:a0:04:42:e0:68:ca:19:5f:65: 3c:14:3b:9e:b6:56:de:f8:3f:b6:56:03:31:4d:28: d8:8d:91:fc:1d:7f:2e:b4:01:e3:f9:35:50:3a:a1: c3:38:25:88:96:a0:e3:0d:c7:f0:cd:89:fd:d4:92: 7a:b0:0e:9b:74:dd:64:ab:71:d0:8d:9c:d8:88:e1: 5a:06:41:d8:07:29:2e:17:98:ca:54:66:82:61:0e: 6c:78:66:2c:a6:95:fa:82:45:3b:14:67:ff:0a:a0: 9a:6f:d1:a2:56:e2:4b:a6:41:75:b7:75:cc:3e:d0: a0:24:a8:11:f3:e0:59:98:27:49:7c:40:4f:a3:f8: 4e:83:36:8a:39:c5:81:16:bb:c2:52:2f:21:42:9b: d3:0d:7e:e0:a0:24:3b:58:a5:0c:01:46:f1:59:32: 07:3c:1f:4f:76:c2:74:95:93:26:f7:d6:6a:08:11: c2:38:07:f0:7c:b0:b5:05:b2:dd:24:c5:9a:39:26: b6:02:76:37:03:d7:1f:cf:a7:e1:2b:94:bc:4b:33: dc:f5:94:8c:d7:a4:e1:f8:f9:90:20:74:0e:da:23: 84:79:ef:72:23:52:41:58:33:8f:e8:5c:e0:e5:c5: 6d:5d:cd:cb:35:41:35:a3:74:88:e9:04:4d:5e:a8: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6E:CB:13:59:A4:DB:56:ED:03:84:73:B6:78:09:16:CA:5A:BA:A8 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:5a:17:3b:58:38:73:14:3f:d4:2c:07:31:98:a6:03:76: 61:b8:62:ac:8c:03:3b:dc:72:64:c9:20:a0:61:63:5c:74:61: ad:55:0c:2b:1b:1f:ac:7b:b8:f9:c8:4f:0f:91:30:62:ea:35: 4d:85:86:12:02:ac:6b:36:90:a4:4d:64:b1:91:e8:a2:99:a0: 35:98:08:d8:27:91:03:e0:c3:5f:fa:b7:9a:a8:58:25:9e:15: 03:0c:5b:36:8d:01:13:68:0a:85:07:3c:70:c8:67:bd:14:b1: eb:45:41:7b:72:40:db:7b:9e:79:54:be:d2:db:c0:04:12:9d: bb:20:66:e8:81:4c:37:31:2a:ca:1b:e6:8e:de:63:7b:87:2d: bf:63:e7:74:25:b9:f2:d1:b8:07:3b:a3:9c:86:10:e0:6f:67: 57:e7:98:29:22:77:9f:90:9a:1d:d2:19:1b:45:39:e9:34:83: 24:e3:3d:51:85:6f:0b:41:32:d8:3c:eb:d5:14:8a:a3:28:e4: fe:cc:5d:cd:41:db:9e:a4:2d:08:5e:db:fd:c6:1b:23:f8:a1: 76:7e:27:46:b0:6c:23:03:91:b8:ff:33:73:09:0f:d4:e0:8a: 86:61:30:40:0c:67:93:91:e6:65:b6:44:80:59:df:a8:50:5b: c6:e4:83:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUwNjE4MTczODMzWhcNMjUwNjI1MTczODMzWjAYMRYwFAYD VQQDEw02ODUyZjk5OS0yN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAztdaWgBELgaMoZX2U8FDuetlbe+D+2VgMxTSjYjZH8HX8utAHj+TVQOqHD OCWIlqDjDcfwzYn91JJ6sA6bdN1kq3HQjZzYiOFaBkHYBykuF5jKVGaCYQ5seGYs ppX6gkU7FGf/CqCab9GiVuJLpkF1t3XMPtCgJKgR8+BZmCdJfEBPo/hOgzaKOcWB FrvCUi8hQpvTDX7goCQ7WKUMAUbxWTIHPB9PdsJ0lZMm99ZqCBHCOAfwfLC1BbLd JMWaOSa2AnY3A9cfz6fhK5S8SzPc9ZSM16Th+PmQIHQO2iOEee9yI1JBWDOP6Fzg 5cVtXc3LNUE1o3SI6QRNXqh6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARuyxNZ pNtW7QOEc7Z4CRbKWrqoMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpGloXO1g4cxQ/1CwHMZimA3ZhuGKsjAM73HJkySCgYWNcdGGtVQwr Gx+se7j5yE8PkTBi6jVNhYYSAqxrNpCkTWSxkeiimaA1mAjYJ5ED4MNf+reaqFgl nhUDDFs2jQETaAqFBzxwyGe9FLHrRUF7ckDbe555VL7S28AEEp27IGbogUw3MSrK G+aO3mN7hy2/Y+d0Jbny0bgHO6OchhDgb2dX55gpInefkJod0hkbRTnpNIMk4z1R hW8LQTLYPOvVFIqjKOT+zF3NQduepC0IXtv9xhsj+KF2fidGsGwjA5G4/zNzCQ/U 4IqGYTBADGeTkeZltkSAWd+oUFvG5IPb -----END CERTIFICATE-----Generated at Wed Jun 18 23:21:11 2025 by rpki-client