$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: bhWt5bwaLXz1ocA1rDCXVxBJuxhAUSswnO1S2yy7ikU= Subject key identifier: E8:78:69:68:FA:A5:E4:09:81:F0:41:76:A2:02:4F:A1:89:67:F1:66 Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 01DA Signing time: Fri 13 Jun 2025 01:50:52 +0000 Manifest this update: Fri 13 Jun 2025 01:50:52 +0000 Manifest next update: Fri 20 Jun 2025 01:50:52 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: qFdm5lUSNWr3nc9GdAlLdc9l5vOjHhpsiw0quqo86Ik=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Jun 13 01:50:52 2025 GMT Not After : Jun 20 01:50:52 2025 GMT Subject: CN=684b83fc-a2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:ef:dd:c4:15:4b:c6:14:42:48:fc:b3:37: e3:df:6e:26:07:3d:e3:c3:2d:43:0f:7a:97:75:94: a6:cc:89:34:53:59:e9:1a:72:29:50:ec:0d:6e:21: 78:8f:44:cc:79:cd:ac:85:4d:ef:63:ba:24:1a:7f: e1:e8:ed:69:36:59:81:3b:ad:8d:bd:f7:12:fc:9b: 01:b8:bf:71:11:10:06:8f:c8:3f:ee:00:89:c5:d7: b5:a0:37:02:0f:3f:6e:ba:6a:83:f3:b9:65:ae:59: c2:37:f4:90:e3:13:49:f9:53:39:63:b0:19:01:a9: 40:61:67:0e:b2:f3:b7:17:9a:45:65:6b:de:2e:5a: 56:21:37:9e:0c:a6:46:93:66:d9:50:72:0c:c5:88: 73:bc:03:ba:fb:37:a9:b4:db:96:7d:7c:62:cf:d9: 8e:69:cc:38:a7:cd:54:54:87:aa:3f:aa:42:e3:0b: 6a:02:35:c0:ae:4e:cc:a6:b9:1e:1b:8b:4a:5d:14: fe:18:f9:ef:8a:02:2f:a8:2d:55:0d:b3:89:b1:54: 64:d2:5e:4f:7a:61:92:60:51:0b:a7:ab:22:e9:fe: 04:ed:44:d3:d5:05:b6:0f:bb:b0:3e:c8:76:ed:cf: bd:2a:14:01:cd:4b:45:9c:ab:98:ed:e7:f0:63:2f: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:78:69:68:FA:A5:E4:09:81:F0:41:76:A2:02:4F:A1:89:67:F1:66 X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:ff:98:e8:de:41:cd:b6:14:02:0f:6c:b9:41:40:8f:c5: d1:7e:c1:a4:61:06:1f:b2:29:c6:97:01:47:63:0c:8f:46:09: d1:91:88:bb:6f:d3:9c:d0:ed:c2:e5:e6:e3:b7:91:ec:2d:e5: 2c:fb:0a:a4:ea:48:60:f7:4b:bb:5b:94:22:72:18:93:8c:4f: 9d:54:5e:9a:ea:ef:0e:2d:73:d9:58:c6:b4:c8:83:60:37:ce: a0:7c:3f:d3:89:92:99:c9:89:c4:bc:50:7d:28:0d:a0:06:bc: 12:f8:16:1d:7b:4c:69:74:0f:46:ae:df:58:d3:9c:10:56:11: 63:d1:b9:88:eb:a4:49:0a:cf:3f:5a:ce:b4:08:49:c7:72:59: 59:17:ed:d6:c5:62:3a:b3:cc:62:89:01:38:64:91:30:80:2e: 95:f5:b9:a9:63:27:1a:e1:47:c7:e0:92:5c:76:31:96:09:f5: 4d:af:b1:18:19:30:75:f2:fa:8d:5e:b7:9d:a2:f9:bc:3b:00: 82:9b:da:45:5c:4e:92:db:84:5a:07:6c:01:df:1b:9d:8b:77: 17:25:81:8d:ad:41:5f:5d:a4:e2:d9:80:b7:c8:e9:10:ee:c6: 68:dd:62:4d:20:c4:1a:65:bf:cc:7a:bc:04:b1:bb:e1:95:55: dd:9b:a7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUwNjEzMDE1MDUyWhcNMjUwNjIwMDE1MDUyWjAYMRYwFAYD VQQDEw02ODRiODNmYy1hMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtHv3cQVS8YUQkj8szfj324mBz3jwy1DD3qXdZSmzIk0U1npGnIpUOwNbiF4 j0TMec2shU3vY7okGn/h6O1pNlmBO62NvfcS/JsBuL9xERAGj8g/7gCJxde1oDcC Dz9uumqD87llrlnCN/SQ4xNJ+VM5Y7AZAalAYWcOsvO3F5pFZWveLlpWITeeDKZG k2bZUHIMxYhzvAO6+zeptNuWfXxiz9mOacw4p81UVIeqP6pC4wtqAjXArk7Mprke G4tKXRT+GPnvigIvqC1VDbOJsVRk0l5PemGSYFELp6si6f4E7UTT1QW2D7uwPsh2 7c+9KhQBzUtFnKuY7efwYy/4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh4aWj6 peQJgfBBdqICT6GJZ/FmMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZOv+Y6N5BzbYUAg9suUFAj8XRfsGkYQYfsinGlwFHYwyPRgnRkYi7 b9Oc0O3C5ebjt5HsLeUs+wqk6khg90u7W5QichiTjE+dVF6a6u8OLXPZWMa0yINg N86gfD/TiZKZyYnEvFB9KA2gBrwS+BYde0xpdA9Grt9Y05wQVhFj0bmI66RJCs8/ Ws60CEnHcllZF+3WxWI6s8xiiQE4ZJEwgC6V9bmpYyca4UfH4JJcdjGWCfVNr7EY GTB18vqNXredovm8OwCCm9pFXE6S24RaB2wB3xudi3cXJYGNrUFfXaTi2YC3yOkQ 7sZo3WJNIMQaZb/MerwEsbvhlVXdm6cn -----END CERTIFICATE-----Generated at Sat Jun 14 18:52:23 2025 by rpki-client