$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: V83nE2PiEgFROh4uS3Szi0HGu8WHNFnX5bT6fUc1bag= Subject key identifier: CF:2F:5E:57:D7:37:1F:E5:84:EF:17:63:74:71:B5:5A:38:69:46:05 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B05 Signing time: Wed 04 Jun 2025 19:15:48 +0000 Manifest this update: Wed 04 Jun 2025 19:15:48 +0000 Manifest next update: Wed 11 Jun 2025 19:15:48 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: zamPKxAKy2btaEBRnOWbFGawLGD3gSFZmzb/3nGP13M=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Jun 4 19:15:48 2025 GMT Not After : Jun 11 19:15:48 2025 GMT Subject: CN=68409b64-eb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:fa:74:d1:56:98:0d:80:e6:6e:f7:d5:df: c9:ad:91:b6:6a:98:68:10:d4:28:2d:30:91:e6:21: ac:cf:74:11:cc:20:5c:ff:f3:4e:10:0d:d4:1d:fe: aa:e6:f2:b6:86:d7:fa:51:a9:45:0e:00:a3:9a:d4: 2f:b4:73:e1:fe:a3:b6:3d:25:46:91:97:7d:cf:02: 27:e9:88:d5:28:0f:f7:8a:13:2e:7c:27:0f:e1:88: 14:ce:1f:10:57:05:d2:ea:c3:9e:c7:7b:9a:bc:fa: 7c:e9:9c:2f:7d:b2:37:aa:26:1b:66:44:76:c6:5a: 1b:2e:09:4e:a9:05:6f:76:b2:e7:13:5d:32:24:67: a1:07:f9:50:b1:e6:7c:fc:2f:7a:23:89:26:73:21: 77:77:53:ad:98:a2:16:48:32:a6:c0:6b:bd:8b:aa: 06:78:67:09:3d:bf:ad:2a:df:21:5d:8d:6c:e8:f2: 8b:7c:c2:d7:ba:31:06:3d:ab:20:97:57:20:d6:db: 8b:4f:14:7f:51:f8:98:9b:c0:56:0d:56:1d:27:9a: a3:c8:e8:af:c5:c2:e0:08:5c:8f:7a:ec:5e:16:8b: c0:0a:4a:bc:e2:fb:1e:e9:45:22:76:96:cc:a4:e4: 7c:e1:1d:c4:92:05:30:5f:0c:4c:8f:0e:5f:2c:e7: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2F:5E:57:D7:37:1F:E5:84:EF:17:63:74:71:B5:5A:38:69:46:05 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c5:a7:62:7d:c9:2e:01:46:77:94:06:3f:a9:40:65:ca:80: 23:53:52:90:29:30:d4:e1:74:a2:ad:f8:8a:65:c8:28:7f:4e: 4b:27:c4:8c:4b:16:ee:b4:e1:59:c6:c7:65:11:87:5a:95:fa: 0c:6c:5c:b6:2d:ed:60:51:6c:95:7b:45:28:5a:eb:38:62:fb: d8:2b:bd:bc:4c:73:27:58:92:9c:e4:70:8c:12:aa:90:eb:15: d2:ea:95:11:4f:8f:22:93:bb:b9:29:91:6b:cb:6a:3a:cb:98: 9f:36:48:40:3d:cb:46:e1:a3:95:66:69:45:5b:22:36:1d:12: 7d:e7:da:d0:77:30:ef:b5:85:ff:3d:45:af:c0:8e:d3:a4:38: ad:20:dd:32:47:83:03:f7:17:ba:98:88:29:9f:92:0e:45:24: 1f:ab:71:01:39:65:02:df:78:57:56:9d:38:04:f8:06:1d:bd: 36:ec:bb:c8:06:fe:77:eb:59:bb:78:dc:9c:3d:5c:86:e0:76: ca:18:17:63:2e:e4:cb:80:54:24:22:3c:07:b2:ad:40:ac:0f: 8f:44:10:be:e9:84:58:e4:34:7c:92:9e:d6:15:f5:b5:db:23: 69:5c:02:04:13:16:1d:d8:25:d1:38:d2:1e:0d:4e:a2:63:cf: 78:6d:85:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwNjA0MTkxNTQ4WhcNMjUwNjExMTkxNTQ4WjAYMRYwFAYD VQQDEw02ODQwOWI2NC1lYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsD6dNFWmA2A5m731d/JrZG2aphoENQoLTCR5iGsz3QRzCBc//NOEA3UHf6q 5vK2htf6UalFDgCjmtQvtHPh/qO2PSVGkZd9zwIn6YjVKA/3ihMufCcP4YgUzh8Q VwXS6sOex3uavPp86ZwvfbI3qiYbZkR2xlobLglOqQVvdrLnE10yJGehB/lQseZ8 /C96I4kmcyF3d1OtmKIWSDKmwGu9i6oGeGcJPb+tKt8hXY1s6PKLfMLXujEGPasg l1cg1tuLTxR/UfiYm8BWDVYdJ5qjyOivxcLgCFyPeuxeFovACkq84vse6UUidpbM pOR84R3EkgUwXwxMjw5fLOfiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8vXlfX Nx/lhO8XY3RxtVo4aUYFMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTxadifckuAUZ3lAY/qUBlyoAjU1KQKTDU4XSirfiKZcgof05LJ8SM SxbutOFZxsdlEYdalfoMbFy2Le1gUWyVe0UoWus4YvvYK728THMnWJKc5HCMEqqQ 6xXS6pURT48ik7u5KZFry2o6y5ifNkhAPctG4aOVZmlFWyI2HRJ959rQdzDvtYX/ PUWvwI7TpDitIN0yR4MD9xe6mIgpn5IORSQfq3EBOWUC33hXVp04BPgGHb027LvI Bv5361m7eNycPVyG4HbKGBdjLuTLgFQkIjwHsq1ArA+PRBC+6YRY5DR8kp7WFfW1 2yNpXAIEExYd2CXRONIeDU6iY894bYWy -----END CERTIFICATE-----Generated at Thu Jun 5 19:50:18 2025 by rpki-client