$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft File: HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft (raw, json) Hash identifier: j+KIRFD8/ndKh1Px5c914FSDT0FYxsHH7ilKemykBcU= Subject key identifier: 47:18:A8:44:44:A7:21:2D:BB:74:A0:80:E8:36:05:8C:C0:FC:90:CD Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Certificate serial: 0B37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft Manifest number: 0B09 Signing time: Thu 24 Jul 2025 19:37:00 +0000 Manifest this update: Thu 24 Jul 2025 19:37:00 +0000 Manifest next update: Thu 31 Jul 2025 19:37:00 +0000 Files and hashes: 1: HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl (hash: 18JZ0WY0Y/9Tnzc0SS7WwiT9cBfjvYrwUTvSACuGBfA=) 2: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (hash: 2QerLmtFHY48UeZhmV6pCrS0LhLRpqATZj6aiM1bwoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 19:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2871 (0xb37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4 Validity Not Before: Jul 24 19:37:00 2025 GMT Not After : Jul 31 19:37:00 2025 GMT Subject: CN=68828b5c-1cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:80:87:f2:d3:6b:bb:3b:86:62:f8:e7:b1: 88:75:e3:51:2e:9c:bb:c0:e2:21:9e:15:33:ff:5b: 07:ea:4b:b5:03:5a:07:87:80:1f:72:fc:69:57:bf: 88:59:b2:fc:e8:59:5a:d8:35:b9:f8:a5:70:32:ff: 8f:38:a4:c5:f1:3e:d4:74:3d:43:58:1d:28:f0:0d: 1f:06:b3:2a:eb:dd:27:53:c6:2e:2d:ce:f7:15:93: 3b:8f:72:08:99:74:49:94:f0:07:fa:26:85:1d:f3: 31:67:13:68:c9:c7:0f:c8:39:cf:43:e9:c2:48:52: 25:1a:86:16:a1:62:86:4e:51:3e:98:27:15:72:48: 34:ca:54:d4:f0:73:87:0c:9d:02:07:6c:e1:ff:89: bf:53:d3:42:e1:25:fe:0b:dd:32:49:4d:e0:50:9b: 63:6f:48:c8:1e:a3:34:60:b7:ee:9e:b6:97:c8:77: ad:4f:0f:9a:43:43:6a:d7:8e:e7:17:30:51:d6:99: 53:59:d1:64:63:f7:dd:90:59:0e:77:ba:b7:84:74: bd:fc:a4:7c:32:f3:00:bc:39:99:0a:b5:ee:95:68: f0:bd:24:c1:95:25:4a:40:a8:29:f8:67:0a:5d:33: 82:02:04:26:e9:e9:a5:ab:60:ad:c4:95:bd:cf:a2: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:18:A8:44:44:A7:21:2D:BB:74:A0:80:E8:36:05:8C:C0:FC:90:CD X509v3 Authority Key Identifier: keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ee:db:a4:f7:4e:48:08:b0:40:54:b4:51:68:af:9b:2e:5a: 15:88:83:c0:37:d2:b3:26:fc:1e:02:45:09:cd:92:f8:7b:c6: aa:7b:38:ce:b8:b0:95:fc:80:ca:58:b0:f7:a7:7e:df:fb:68: 5b:1f:39:59:c6:de:5f:ca:41:7c:11:6a:49:80:2b:9b:67:84: fc:47:c7:df:8a:6a:d9:4a:1c:79:65:08:b8:3f:ed:b2:e4:29: 91:61:ee:c4:87:23:00:c4:2b:b3:b5:ed:6c:90:c3:8a:e0:45: 8c:94:52:61:da:07:25:17:01:ca:bf:2c:c7:95:6b:0d:31:e3: e5:97:c9:77:3b:f6:c1:8c:23:24:f6:49:43:16:64:a8:71:0d: 8d:7d:d2:14:04:ab:c6:a9:7e:7c:2b:b5:a6:16:3b:75:a4:72: f7:12:83:83:02:57:8d:33:1d:d8:e1:b4:50:c5:6e:d1:30:85: c7:41:24:b7:66:33:a4:16:f1:eb:31:8b:4e:3d:12:06:b4:77: b0:3e:35:ab:0e:ab:c7:da:4c:ca:da:4d:80:b6:b1:a8:a2:dc: 20:18:ac:02:72:6f:bf:b2:7b:8d:1a:73:aa:92:95:8f:63:f1: 8a:83:8e:a1:75:d5:db:66:12:f5:91:83:d9:ca:15:35:c4:32: b6:a6:f9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5 QkZCNUZBQzQwHhcNMjUwNzI0MTkzNzAwWhcNMjUwNzMxMTkzNzAwWjAYMRYwFAYD VQQDEw02ODgyOGI1Yy0xY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc2Ah/LTa7s7hmL457GIdeNRLpy7wOIhnhUz/1sH6ku1A1oHh4AfcvxpV7+I WbL86Fla2DW5+KVwMv+POKTF8T7UdD1DWB0o8A0fBrMq690nU8YuLc73FZM7j3II mXRJlPAH+iaFHfMxZxNoyccPyDnPQ+nCSFIlGoYWoWKGTlE+mCcVckg0ylTU8HOH DJ0CB2zh/4m/U9NC4SX+C90ySU3gUJtjb0jIHqM0YLfunraXyHetTw+aQ0Nq147n FzBR1plTWdFkY/fdkFkOd7q3hHS9/KR8MvMAvDmZCrXulWjwvSTBlSVKQKgp+GcK XTOCAgQm6emlq2CtxJW9z6Lb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcYqERE pyEtu3SggOg2BYzA/JDNMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjcyMS82NDQyNDM3QTUzQUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFla RE90bWZIemh5cC1iLTEtc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc7tuk905ICLBAVLRRaK+bLloViIPAN9KzJvweAkUJzZL4e8aqezjO uLCV/IDKWLD3p37f+2hbHzlZxt5fykF8EWpJgCubZ4T8R8ffimrZShx5ZQi4P+2y 5CmRYe7EhyMAxCuzte1skMOK4EWMlFJh2gclFwHKvyzHlWsNMePll8l3O/bBjCMk 9klDFmSocQ2NfdIUBKvGqX58K7WmFjt1pHL3EoODAleNMx3Y4bRQxW7RMIXHQSS3 ZjOkFvHrMYtOPRIGtHewPjWrDqvH2kzK2k2AtrGootwgGKwCcm+/snuNGnOqkpWP Y/GKg46hddXbZhL1kYPZyhU1xDK2pvlj -----END CERTIFICATE-----Generated at Sat Jul 26 07:59:01 2025 by rpki-client