$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: wcpSWYvQh2mj9Gwte7P9/YOPNUhqic4ypnxghC/igCo= Subject key identifier: 40:AB:7F:89:5A:0A:EB:4B:82:04:C2:8D:74:D6:25:76:A9:9C:C6:A8 Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 1719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 170E Signing time: Thu 12 Jun 2025 16:35:46 +0000 Manifest this update: Thu 12 Jun 2025 16:35:46 +0000 Manifest next update: Thu 19 Jun 2025 16:35:46 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: V9m6EUzy5Sy49ex6gxCy4gu0PdcM6eRJvSWpv1CLVAI=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: QoI3M9VOUs5JmUvtm4ggvS0vOfMTJHqMj+I41B3uqls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5913 (0x1719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: Jun 12 16:35:46 2025 GMT Not After : Jun 19 16:35:46 2025 GMT Subject: CN=684b01e2-3cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1f:7c:b1:2d:7d:a7:6d:52:a9:07:28:a6:3c: 29:04:8d:55:84:3e:15:36:89:89:4a:91:df:55:b8: 3c:1b:8b:bd:02:86:b7:8e:cd:25:2e:8e:c8:e0:e3: e5:80:6b:5b:42:71:6f:cb:af:24:34:0e:4b:7b:12: 3c:b8:93:08:b0:3e:39:a9:81:36:34:6a:56:7f:6a: f6:27:a1:43:a6:49:2c:e5:6b:f9:30:fd:d1:1d:37: f0:bc:20:d8:6b:a8:b6:e8:58:7c:4a:2e:17:ff:95: 65:e7:d5:81:43:80:eb:65:b0:8e:12:dc:40:c9:d3: ef:4b:7e:48:5a:0c:34:5e:f0:e5:54:22:4d:2a:ad: 47:e5:0b:ce:54:7d:ff:dc:53:d2:56:8f:f7:09:d2: ee:4d:d6:a2:63:4a:de:9f:56:92:bd:d4:07:d6:72: 5a:d4:98:3c:ad:ba:e9:c0:8d:9b:fb:cf:27:7d:f1: 6a:0c:a5:61:a7:bc:70:3f:6b:ac:90:83:57:f5:87: 97:f2:52:31:f6:d3:0e:03:bb:d8:29:7d:c2:dd:bf: 9a:5f:74:cf:1d:04:e1:19:0e:64:da:01:8e:92:44: c9:c1:d1:b6:66:98:d0:81:78:8b:7f:1e:f2:cb:ae: 7a:31:7e:04:d2:f8:20:30:80:b2:62:60:3a:a8:e3: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:7F:89:5A:0A:EB:4B:82:04:C2:8D:74:D6:25:76:A9:9C:C6:A8 X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:53:f7:90:88:d6:6e:8e:ac:0c:a3:f0:61:71:f9:38:cc:d8: 0d:d7:32:32:14:6f:45:0c:c1:19:77:b3:d8:c6:bf:26:63:33: 65:b8:2f:1e:f0:38:74:f3:e0:ef:ab:69:83:7c:ab:6a:e5:a0: 96:70:cb:4d:c5:65:a1:04:aa:98:c4:8a:1f:a2:51:64:0e:c6: 40:ae:66:d7:de:5a:05:8d:40:c0:66:08:c4:13:32:d5:b0:1a: 88:81:16:b3:f2:34:b9:95:21:e7:35:dd:7a:c2:79:15:ca:fe: 56:79:b9:c0:90:48:3b:55:3b:90:80:5e:0c:65:34:e8:bc:ed: 08:93:65:d1:38:4e:83:57:94:7f:57:48:ca:ba:61:b3:dc:88: ee:01:00:69:72:fc:7f:95:c8:4b:c4:27:f7:3c:68:8f:99:88: 64:76:f3:44:23:a9:74:ea:31:82:00:43:bb:15:b7:6a:b4:f8: e5:7a:29:ea:e2:a1:07:63:cb:6c:17:2a:25:d0:a5:f1:87:06: e0:e5:e3:fe:c0:60:09:41:57:12:05:9d:3f:53:63:2a:b6:2b: be:f5:63:ac:ac:d2:ba:20:78:43:4f:7f:6e:89:88:c8:72:21: ca:00:05:13:c8:1b:b0:d1:9a:b1:8e:4d:7b:df:50:88:96:e0: a7:6d:34:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjUwNjEyMTYzNTQ2WhcNMjUwNjE5MTYzNTQ2WjAYMRYwFAYD VQQDEw02ODRiMDFlMi0zY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h98sS19p21SqQcopjwpBI1VhD4VNomJSpHfVbg8G4u9Aoa3js0lLo7I4OPl gGtbQnFvy68kNA5LexI8uJMIsD45qYE2NGpWf2r2J6FDpkks5Wv5MP3RHTfwvCDY a6i26Fh8Si4X/5Vl59WBQ4DrZbCOEtxAydPvS35IWgw0XvDlVCJNKq1H5QvOVH3/ 3FPSVo/3CdLuTdaiY0ren1aSvdQH1nJa1Jg8rbrpwI2b+88nffFqDKVhp7xwP2us kINX9YeX8lIx9tMOA7vYKX3C3b+aX3TPHQThGQ5k2gGOkkTJwdG2ZpjQgXiLfx7y y656MX4E0vggMICyYmA6qOPNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECrf4la CutLggTCjXTWJXapnMaoMB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpU/eQiNZujqwMo/Bhcfk4zNgN1zIyFG9FDMEZd7PYxr8mYzNluC8e 8Dh08+Dvq2mDfKtq5aCWcMtNxWWhBKqYxIofolFkDsZArmbX3loFjUDAZgjEEzLV sBqIgRaz8jS5lSHnNd16wnkVyv5WebnAkEg7VTuQgF4MZTTovO0Ik2XROE6DV5R/ V0jKumGz3IjuAQBpcvx/lchLxCf3PGiPmYhkdvNEI6l06jGCAEO7FbdqtPjleinq 4qEHY8tsFyol0KXxhwbg5eP+wGAJQVcSBZ0/U2Mqtiu+9WOsrNK6IHhDT39uiYjI ciHKAAUTyBuw0Zqxjk1731CIluCnbTQA -----END CERTIFICATE-----Generated at Fri Jun 13 07:58:58 2025 by rpki-client