$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: qwKAglfvnusQnCZSqtC2Um4V70vqQcPNfhfUKTmXnkA= Subject key identifier: A0:EB:B5:F5:2A:BD:FA:87:22:54:1F:6C:6B:23:C0:88:86:6E:4A:3D Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 10B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 1089 Signing time: Sun 20 Jul 2025 17:25:19 +0000 Manifest this update: Sun 20 Jul 2025 17:25:19 +0000 Manifest next update: Sun 27 Jul 2025 17:25:19 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: 305UcnQx0O6nEXxXhKT4w4UAOit3xuAYgeCc38iZYLM=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4273 (0x10b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Jul 20 17:25:19 2025 GMT Not After : Jul 27 17:25:19 2025 GMT Subject: CN=687d267f-bd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:3a:1d:f2:6e:90:58:ab:66:35:c6:12:9e: 71:d2:65:da:d0:13:eb:18:22:ed:83:b3:92:48:21: db:72:91:0e:9a:78:20:f5:aa:7a:86:dd:f4:b6:30: 61:c0:9b:74:78:0e:8a:2f:8b:19:c2:49:24:20:4f: b1:fc:4f:83:9c:4b:d2:5e:13:db:88:e1:1d:6e:26: 7d:b6:54:bc:19:e5:64:ac:a1:67:f4:f5:be:d8:8c: bc:51:7c:23:03:08:4a:e8:a6:0c:d4:5e:b0:2d:35: 8f:04:f8:96:c6:a3:58:0a:ac:ad:f4:6f:aa:a7:f6: 5a:58:08:4a:6c:3f:00:3e:a6:a6:a6:89:7a:f1:13: 08:fa:57:32:16:8e:7c:1b:9e:94:1d:b6:6b:01:e8: 48:08:df:00:a3:59:a4:72:ec:96:22:15:12:e1:50: 35:b6:70:d4:2e:b5:86:df:6a:23:7f:63:1f:a4:2d: 91:dd:70:a1:b0:ba:7d:f7:3d:9d:b0:14:fa:1d:4c: 22:8e:51:98:ed:a2:92:00:6e:fc:5b:3c:a8:7e:38: f2:bb:2f:47:89:41:01:6e:3f:92:8f:e1:7f:07:ce: fb:84:d0:35:3e:30:37:46:05:d3:93:6c:7f:1e:43: ee:62:16:09:f6:7a:05:82:7a:a1:09:60:e3:82:be: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EB:B5:F5:2A:BD:FA:87:22:54:1F:6C:6B:23:C0:88:86:6E:4A:3D X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:81:cc:97:72:57:e7:54:38:94:f1:59:69:33:40:14:d3:9d: cb:28:3b:b7:da:33:c6:9d:e3:00:c6:c0:6f:af:fb:af:fb:06: 43:10:36:4c:c0:4b:27:04:9e:92:d1:5d:ba:e2:30:41:68:b8: 37:d5:b1:06:4e:50:7c:5d:8f:14:56:35:a7:0e:25:56:1e:86: ef:ea:83:8b:b2:69:ea:3b:f3:40:f6:d0:de:e7:d4:45:d6:f3: 13:d8:05:19:76:ac:6c:21:a2:57:ea:4d:f3:bb:13:7b:57:57: 30:fb:27:08:11:22:ee:3c:9f:35:d6:5e:b1:78:73:ea:cb:1f: ed:fc:d9:cb:d9:35:39:52:26:ab:b3:0b:6a:3a:f3:34:2d:96: 4b:6b:ae:2d:4f:d7:e7:2d:64:7f:4b:4d:7b:39:71:ee:d4:c3: 27:aa:2b:f6:55:3b:35:e3:a8:28:97:db:f5:af:73:3f:c8:ab: c4:b4:ed:18:eb:4a:fe:c7:29:ee:3a:3a:b3:39:af:d3:a6:99: b1:14:a2:e8:74:0c:4a:d2:be:d4:cc:22:6c:04:02:78:b4:ee: df:df:a3:e4:bc:b2:e4:7c:db:63:16:ef:00:e4:a0:da:59:69: f1:23:b8:2c:0c:4d:d0:1b:3d:cb:75:95:d7:11:89:92:f5:f7: 29:ba:25:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUwNzIwMTcyNTE5WhcNMjUwNzI3MTcyNTE5WjAYMRYwFAYD VQQDEw02ODdkMjY3Zi1iZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN46HfJukFirZjXGEp5x0mXa0BPrGCLtg7OSSCHbcpEOmngg9ap6ht30tjBh wJt0eA6KL4sZwkkkIE+x/E+DnEvSXhPbiOEdbiZ9tlS8GeVkrKFn9PW+2Iy8UXwj AwhK6KYM1F6wLTWPBPiWxqNYCqyt9G+qp/ZaWAhKbD8APqampol68RMI+lcyFo58 G56UHbZrAehICN8Ao1mkcuyWIhUS4VA1tnDULrWG32ojf2MfpC2R3XChsLp99z2d sBT6HUwijlGY7aKSAG78Wzyofjjyuy9HiUEBbj+Sj+F/B877hNA1PjA3RgXTk2x/ HkPuYhYJ9noFgnqhCWDjgr61dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDrtfUq vfqHIlQfbGsjwIiGbko9MB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7gcyXclfnVDiU8VlpM0AU053LKDu32jPGneMAxsBvr/uv+wZDEDZM wEsnBJ6S0V264jBBaLg31bEGTlB8XY8UVjWnDiVWHobv6oOLsmnqO/NA9tDe59RF 1vMT2AUZdqxsIaJX6k3zuxN7V1cw+ycIESLuPJ811l6xeHPqyx/t/NnL2TU5Uiar swtqOvM0LZZLa64tT9fnLWR/S017OXHu1MMnqiv2VTs146gol9v1r3M/yKvEtO0Y 60r+xynuOjqzOa/TppmxFKLodAxK0r7UzCJsBAJ4tO7f36PkvLLkfNtjFu8A5KDa WWnxI7gsDE3QGz3LdZXXEYmS9fcpuiUf -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:35 2025 by rpki-client