$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: Q9lFeXgYGybRptOy2QyAU5pZNVy9zY3vI0uqRg1eEMw= Subject key identifier: 0C:AD:0C:BD:C4:0E:E0:0E:39:02:AB:A7:FC:74:56:A5:4A:7C:C3:7D Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 01B0 Signing time: Fri 25 Jul 2025 03:19:36 +0000 Manifest this update: Fri 25 Jul 2025 03:19:36 +0000 Manifest next update: Fri 01 Aug 2025 03:19:36 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: AmzfE4o93gpe72DyBIxlhJ2e9GltCF8k18+V13lPS+0=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Jul 25 03:19:36 2025 GMT Not After : Aug 1 03:19:36 2025 GMT Subject: CN=6882f7c8-50c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1e:fa:da:7f:35:9e:6e:fe:20:b2:73:ee:f2: fc:2b:61:26:1a:2a:28:f5:bf:03:38:07:ee:47:10: f7:7f:3b:90:ba:e8:3f:bc:97:dc:6d:7f:39:93:5c: 92:d3:64:c5:3b:9a:c6:1c:e1:ea:eb:69:96:c2:03: 4a:b8:db:60:0f:24:52:f3:58:9a:e6:d1:5f:ea:29: b9:48:72:f7:52:ee:ee:54:c8:08:90:dd:fa:17:ac: 58:17:4b:1e:01:f7:89:09:38:3c:52:d4:51:7b:b2: 02:93:69:da:c8:f1:c6:5b:1e:f5:03:d8:a2:c9:92: 7a:6b:5a:b8:df:8d:85:f5:24:f2:84:70:94:35:c0: 76:7f:c3:25:59:39:33:cb:f4:e2:66:79:c8:bc:57: 7c:bb:cd:49:72:19:98:f8:98:be:f3:c8:8d:6d:fd: a8:22:86:03:c2:4d:6b:c8:e7:64:ed:de:44:09:3c: af:66:80:33:fc:42:21:19:a5:44:b5:38:bf:52:84: e3:96:a4:28:56:f6:f2:a8:ff:bb:3e:67:82:f4:1f: 22:44:9f:6b:3e:36:c3:ea:6e:81:c9:1f:e3:8f:13: 84:a4:f1:86:6b:59:c3:2f:07:77:6b:08:5f:1a:3c: c8:f2:bc:7f:9c:36:ac:c0:20:ee:5a:f3:b0:ff:c4: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AD:0C:BD:C4:0E:E0:0E:39:02:AB:A7:FC:74:56:A5:4A:7C:C3:7D X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:07:8e:49:85:c6:4e:77:b0:01:2d:92:95:50:75:c7:34:bb: 3d:7b:ec:ab:1f:5f:da:7b:67:d5:47:0f:73:d0:98:69:b4:57: f5:a2:4c:9a:ec:da:23:a4:3a:38:63:11:31:00:4c:86:2f:54: 79:a5:7f:3f:61:fe:ef:3b:73:f6:ba:7b:aa:87:e0:08:a4:c7: 4b:cd:f6:59:91:0f:21:96:b6:11:d9:41:72:0b:fc:79:6e:89: 37:7b:cd:13:f3:3d:86:7e:e0:46:5e:b3:14:c5:ee:fc:e9:01: a9:ea:30:48:00:f7:43:5d:4a:3d:5e:59:71:ab:b9:97:72:98: e6:95:aa:29:86:4f:e2:d4:b3:d8:02:6c:a7:dc:e9:2d:74:3b: 1d:51:8d:d4:0b:be:0a:1f:b4:2a:82:37:ed:29:dd:fe:f4:9f: 60:c3:65:13:f7:fc:c6:32:45:b6:86:70:2d:91:e3:c5:5f:a2: 7b:f3:1a:ac:db:51:bf:27:ce:0e:56:5c:ce:4e:74:e8:19:e2: 0c:3b:f9:d4:ce:90:58:1a:d6:fe:d0:a5:6a:68:33:01:39:50: fc:bf:0c:55:af:f0:48:48:37:85:3b:82:1d:c5:d8:3b:75:f5: ac:da:ec:fa:6c:4b:b7:33:c7:3b:3a:20:c9:33:cf:20:29:3d: 66:8d:72:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwNzI1MDMxOTM2WhcNMjUwODAxMDMxOTM2WjAYMRYwFAYD VQQDEw02ODgyZjdjOC01MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh762n81nm7+ILJz7vL8K2EmGioo9b8DOAfuRxD3fzuQuug/vJfcbX85k1yS 02TFO5rGHOHq62mWwgNKuNtgDyRS81ia5tFf6im5SHL3Uu7uVMgIkN36F6xYF0se AfeJCTg8UtRRe7ICk2nayPHGWx71A9iiyZJ6a1q4342F9STyhHCUNcB2f8MlWTkz y/TiZnnIvFd8u81JchmY+Ji+88iNbf2oIoYDwk1ryOdk7d5ECTyvZoAz/EIhGaVE tTi/UoTjlqQoVvbyqP+7PmeC9B8iRJ9rPjbD6m6ByR/jjxOEpPGGa1nDLwd3awhf GjzI8rx/nDaswCDuWvOw/8SDlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAytDL3E DuAOOQKrp/x0VqVKfMN9MB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVB45JhcZOd7ABLZKVUHXHNLs9e+yrH1/ae2fVRw9z0JhptFf1okya 7NojpDo4YxExAEyGL1R5pX8/Yf7vO3P2unuqh+AIpMdLzfZZkQ8hlrYR2UFyC/x5 bok3e80T8z2GfuBGXrMUxe786QGp6jBIAPdDXUo9Xllxq7mXcpjmlaophk/i1LPY Amyn3OktdDsdUY3UC74KH7QqgjftKd3+9J9gw2UT9/zGMkW2hnAtkePFX6J78xqs 21G/J84OVlzOTnToGeIMO/nUzpBYGtb+0KVqaDMBOVD8vwxVr/BISDeFO4Idxdg7 dfWs2uz6bEu3M8c7OiDJM88gKT1mjXKo -----END CERTIFICATE-----Generated at Sat Jul 26 15:14:30 2025 by rpki-client