$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json) Hash identifier: 1ajpfa93efIfOv8L5/+f7csTU7fyHNexUGuJ6NtOYI8= Subject key identifier: F3:31:53:07:0D:6C:72:A8:88:E6:5C:E9:C3:D1:56:E5:9C:C6:A9:E5 Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft Manifest number: 0320 Signing time: Sun 27 Jul 2025 01:31:35 +0000 Manifest this update: Sun 27 Jul 2025 01:31:34 +0000 Manifest next update: Sun 03 Aug 2025 01:31:34 +0000 Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: mmJ77Soer568ZjyIln8Q/7KqIGPoSJLnFuORllUiM5k=) 2: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: D/07ECvWp7oQg2+1KPxjiVqoD+wojBNXOMz248kJJ/8=) 3: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: l1w8+0ex2ah/bqLhlgu70ROEZ3rYXLDAefLnWRzXKeM=) 4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: jCGpkTOREB2CZphvzKOSraYTHWPq9LTO8zozaxcqQy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 01:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Jul 27 01:31:34 2025 GMT Not After : Aug 3 01:31:34 2025 GMT Subject: CN=68858177-0235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:11:df:1c:ec:6b:60:12:b7:db:94:e9:ba:3c: ba:34:34:a7:78:89:8b:d3:ef:e4:fc:02:cc:fe:72: db:fc:7b:77:fb:f7:cf:a2:9e:92:a4:f1:3c:7a:c9: 61:27:bc:89:ff:e3:7e:fc:83:b7:dc:00:6b:64:d1: 30:27:55:63:15:02:1e:30:90:ca:0f:ef:04:04:07: 9b:54:af:7c:68:03:35:3b:62:92:99:9e:e1:82:c1: 1e:43:e7:2b:34:ef:62:b1:63:74:d7:5f:75:a8:2d: 88:0d:cd:00:49:25:45:00:01:84:ee:ca:66:53:8e: 5d:87:4a:c8:de:f2:58:ab:9e:41:e8:78:92:28:1c: b0:f8:81:bf:ac:03:15:c4:da:f5:f7:3c:a0:0e:cc: 32:7d:87:ed:32:71:d6:83:25:e7:f0:d7:9c:5b:63: 70:58:b5:83:9d:da:77:18:bb:fd:b0:63:fc:5d:02: 7d:bc:6d:8b:96:b8:45:4a:99:09:c3:23:7e:78:fa: 67:58:9f:20:8a:ce:87:71:1c:c4:84:f0:d8:76:7d: 46:24:ba:e3:39:f4:66:e2:d9:be:a5:1c:3e:a9:0e: 7b:2a:b5:7e:1b:e6:3d:c6:06:83:20:a5:cf:d0:14: 6a:22:60:17:16:97:d5:97:f1:0b:85:0b:9a:e3:cc: ed:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:53:07:0D:6C:72:A8:88:E6:5C:E9:C3:D1:56:E5:9C:C6:A9:E5 X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8e:ad:bf:73:c5:c6:87:8d:f1:e8:c2:a4:11:b4:6d:b0:8f: e3:5e:e1:8e:b6:d5:18:ce:07:02:c2:5d:ed:8c:e9:3b:c4:ab: 9a:51:6e:28:ac:06:2f:66:1d:30:de:46:c8:61:21:c5:bd:6f: d2:36:d1:f0:5c:a3:e0:ad:5c:a4:e2:e8:6f:c4:8f:42:44:98: f9:46:50:4f:9b:35:65:e9:35:ee:b8:7d:7f:f7:e7:90:c5:a7: 39:f5:46:ff:55:57:78:bf:c0:8f:8d:de:dd:26:5f:ec:76:66: b8:2b:44:39:50:17:b9:94:9e:5a:67:7b:98:8c:95:0c:be:17: 58:53:1d:59:19:81:6d:21:91:59:a3:ef:23:a2:62:e9:67:cd: 1b:73:a3:0e:a5:3e:47:c8:c1:ec:62:09:99:a4:08:31:a0:fc: e8:a0:9c:cc:6f:ff:22:35:e9:d2:ed:87:26:9a:20:23:8d:81: 8c:67:ba:81:c9:e9:f9:17:70:b3:d1:00:40:fd:7a:e0:f7:52: e7:29:94:18:38:6a:91:eb:4c:e4:8d:4a:b5:74:8f:b4:1d:c9: 65:d6:16:28:f1:6d:b5:70:3a:95:7e:e3:72:1d:5b:0b:a1:63: 67:b0:eb:e4:37:f5:b6:91:ad:73:f5:70:b3:b8:57:63:3f:40: 75:2d:9e:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjUwNzI3MDEzMTM0WhcNMjUwODAzMDEzMTM0WjAYMRYwFAYD VQQDEw02ODg1ODE3Ny0wMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xHfHOxrYBK325Tpujy6NDSneImL0+/k/ALM/nLb/Ht3+/fPop6SpPE8eslh J7yJ/+N+/IO33ABrZNEwJ1VjFQIeMJDKD+8EBAebVK98aAM1O2KSmZ7hgsEeQ+cr NO9isWN01191qC2IDc0ASSVFAAGE7spmU45dh0rI3vJYq55B6HiSKByw+IG/rAMV xNr19zygDswyfYftMnHWgyXn8NecW2NwWLWDndp3GLv9sGP8XQJ9vG2LlrhFSpkJ wyN+ePpnWJ8gis6HcRzEhPDYdn1GJLrjOfRm4tm+pRw+qQ57KrV+G+Y9xgaDIKXP 0BRqImAXFpfVl/ELhQua48ztcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMxUwcN bHKoiOZc6cPRVuWcxqnlMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCijq2/c8XGh43x6MKkEbRtsI/jXuGOttUYzgcCwl3tjOk7xKuaUW4o rAYvZh0w3kbIYSHFvW/SNtHwXKPgrVyk4uhvxI9CRJj5RlBPmzVl6TXuuH1/9+eQ xac59Ub/VVd4v8CPjd7dJl/sdma4K0Q5UBe5lJ5aZ3uYjJUMvhdYUx1ZGYFtIZFZ o+8jomLpZ80bc6MOpT5HyMHsYgmZpAgxoPzooJzMb/8iNenS7YcmmiAjjYGMZ7qB yen5F3Cz0QBA/Xrg91LnKZQYOGqR60zkjUq1dI+0Hcll1hYo8W21cDqVfuNyHVsL oWNnsOvkN/W2ka1z9XCzuFdjP0B1LZ4n -----END CERTIFICATE-----Generated at Sun Jul 27 12:24:06 2025 by rpki-client