$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: sCJ9hlWK9MR0R5WPQti3XbNqrwXmaxoVUhBhTH6w4Gc= Subject key identifier: FB:1B:A9:03:66:1F:7E:8B:27:F7:A4:AB:61:D8:9C:89:D1:09:14:33 Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: D6 Signing time: Thu 05 Jun 2025 05:01:15 +0000 Manifest this update: Thu 05 Jun 2025 05:01:14 +0000 Manifest next update: Thu 12 Jun 2025 05:01:14 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: Qc7nfBMKyOLIkJMEXr7QCbsfzRekWnEGkaBUunNLi6k=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Jun 5 05:01:14 2025 GMT Not After : Jun 12 05:01:14 2025 GMT Subject: CN=6841249b-86b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:44:6c:cb:8d:d7:d1:c7:1f:e2:96:4b:4c: 33:c1:90:a4:fb:45:8e:2f:e8:4b:ec:e3:38:c6:9a: 77:a4:b8:a4:b8:dd:f6:cc:d2:c1:23:fe:78:ba:1a: 46:ea:95:06:4e:64:7c:31:e2:4e:5d:c8:87:6c:2b: e8:95:5d:e3:68:31:28:ba:a4:a6:a4:c3:c5:b2:9e: f7:db:6a:84:97:e5:4a:bf:8f:6e:6c:76:67:38:d3: 04:89:66:a1:2f:f9:53:27:c4:53:38:4d:8a:d3:53: c1:63:56:0d:46:be:70:88:14:79:00:b9:29:a9:5a: a6:39:8c:5d:5f:08:db:39:10:68:ea:2f:1e:d4:d7: 31:b2:b1:cb:9a:92:d7:24:58:c6:7e:16:37:63:03: bc:3d:79:ec:ae:44:09:ea:28:c3:a7:45:07:65:4b: 69:26:94:58:79:1f:12:c7:b4:2d:2a:2d:78:0a:6b: 2d:df:25:03:41:f5:8d:cd:5d:e8:cd:9c:9e:74:5f: 4e:7f:14:ea:29:5a:04:d2:41:f2:b8:d0:45:17:34: 42:94:e9:40:02:2c:a0:21:69:53:61:11:eb:19:6b: 40:44:d3:51:5d:ca:15:53:7d:6a:59:25:49:28:bc: fd:f4:89:bd:8c:1d:8a:75:c3:b0:90:a0:12:57:7f: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:A9:03:66:1F:7E:8B:27:F7:A4:AB:61:D8:9C:89:D1:09:14:33 X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:00:6b:cc:d4:42:84:4d:17:ee:4e:da:ea:16:fc:29:44:ff: e6:52:0a:5e:33:bb:23:0c:c0:77:99:c6:3d:06:52:0e:80:ea: 41:91:e7:a6:08:79:1d:9a:31:91:8c:31:5c:dd:f5:0e:c8:fa: d2:08:4f:37:ef:32:b9:9b:49:58:70:d0:4f:78:2b:64:b0:90: c0:5c:03:85:3d:17:65:ff:ff:37:85:5a:37:42:f1:c9:12:37: 99:38:d8:43:62:3f:5d:9b:29:f3:42:84:22:43:16:4d:80:33: 9e:60:fe:c5:39:e4:c0:60:8e:32:a5:75:8c:e0:5c:70:54:44: 17:ae:b6:cf:13:d5:07:f5:60:ca:c3:74:ed:45:7f:3b:7d:d4: c7:50:82:bf:78:c7:9d:29:15:f8:b3:38:49:97:fc:7a:6c:0f: 6a:91:b4:f2:2e:7c:6a:16:36:c9:bd:3c:ac:a9:12:db:e5:56: ff:2a:b0:fd:89:d0:fb:41:19:7b:f3:06:3b:9e:1d:ad:51:56: db:91:20:bc:16:ee:3b:79:1f:79:a7:9f:16:79:25:f6:fa:d9: a5:75:a5:fd:2c:20:9c:ee:5f:53:cd:7e:3a:da:d2:c6:58:39: 56:19:75:4c:c8:a6:cc:e3:92:4f:17:02:5a:e2:9b:68:97:e3: 61:47:c3:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwNjA1MDUwMTE0WhcNMjUwNjEyMDUwMTE0WjAYMRYwFAYD VQQDEw02ODQxMjQ5Yi04NmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOVEbMuN19HHH+KWS0wzwZCk+0WOL+hL7OM4xpp3pLikuN32zNLBI/54uhpG 6pUGTmR8MeJOXciHbCvolV3jaDEouqSmpMPFsp7322qEl+VKv49ubHZnONMEiWah L/lTJ8RTOE2K01PBY1YNRr5wiBR5ALkpqVqmOYxdXwjbORBo6i8e1NcxsrHLmpLX JFjGfhY3YwO8PXnsrkQJ6ijDp0UHZUtpJpRYeR8Sx7QtKi14Cmst3yUDQfWNzV3o zZyedF9OfxTqKVoE0kHyuNBFFzRClOlAAiygIWlTYRHrGWtARNNRXcoVU31qWSVJ KLz99Im9jB2KdcOwkKASV385jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsbqQNm H36LJ/ekq2HYnInRCRQzMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcAGvM1EKETRfuTtrqFvwpRP/mUgpeM7sjDMB3mcY9BlIOgOpBkeem CHkdmjGRjDFc3fUOyPrSCE837zK5m0lYcNBPeCtksJDAXAOFPRdl//83hVo3QvHJ EjeZONhDYj9dmynzQoQiQxZNgDOeYP7FOeTAYI4ypXWM4FxwVEQXrrbPE9UH9WDK w3TtRX87fdTHUIK/eMedKRX4szhJl/x6bA9qkbTyLnxqFjbJvTysqRLb5Vb/KrD9 idD7QRl78wY7nh2tUVbbkSC8Fu47eR95p58WeSX2+tmldaX9LCCc7l9TzX462tLG WDlWGXVMyKbM45JPFwJa4ptol+NhR8Of -----END CERTIFICATE-----Generated at Thu Jun 5 20:14:06 2025 by rpki-client