$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: /uH5DQQkWH+jQqXhNxvj3kKRk+bMX3ioUeOBJp/f1PU= Subject key identifier: 28:BE:B0:ED:65:72:3F:D8:32:E2:D1:B9:52:5B:81:9B:80:C9:CB:5D Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0753 Signing time: Sun 08 Jun 2025 21:18:42 +0000 Manifest this update: Sun 08 Jun 2025 21:18:41 +0000 Manifest next update: Sun 15 Jun 2025 21:18:41 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: GIHEI9oVIviGrsqQZZI85DoeStLsbV35E+gvcByEDVs=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Jun 8 21:18:41 2025 GMT Not After : Jun 15 21:18:41 2025 GMT Subject: CN=6845fe31-5a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:0c:71:64:40:19:77:e4:52:48:d5:ac:80: 89:a9:c2:69:72:d8:c6:aa:4e:f5:7b:09:96:73:cb: 7b:87:98:d1:18:e2:76:85:11:49:01:57:4b:be:d7: 5d:04:68:28:bd:a4:eb:ff:72:b5:81:e4:78:cc:b5: d6:8b:cc:e7:3b:fc:04:ca:9f:2e:4e:4e:85:f0:cb: 66:09:fb:77:dd:4a:af:26:77:b8:26:08:bf:e6:1f: 08:35:cf:8b:a1:93:6d:63:63:0b:91:5d:f3:e1:aa: 8f:70:33:ad:49:bc:ce:11:f5:36:0e:2a:05:f9:21: 63:5e:f8:4e:78:0f:3c:e2:22:63:5f:69:58:33:e4: 01:07:c8:95:1c:8d:5a:94:fa:f4:9f:dc:20:bf:3b: f7:bc:47:ea:c1:71:03:8f:6c:ec:42:d3:9e:69:a3: b3:c7:c7:fb:e6:d4:66:ae:51:bd:1d:39:3b:94:65: c3:8e:3b:ae:c5:b9:63:b9:50:64:62:ea:67:35:99: c0:96:9b:df:b2:49:e2:92:99:5a:37:e4:33:6c:7a: 8f:20:c8:e8:f2:f6:af:6f:c9:86:72:ed:d0:69:b4: 94:5f:5e:43:2b:1b:dd:85:fb:1e:46:5b:ac:ec:d9: 66:1d:6d:7a:54:5f:80:f7:52:7c:1e:fc:88:b5:38: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BE:B0:ED:65:72:3F:D8:32:E2:D1:B9:52:5B:81:9B:80:C9:CB:5D X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:79:81:fe:e9:26:a6:ee:91:ad:a5:f8:e2:f4:4d:45:7f:5a: 84:df:18:b7:50:06:c8:c9:3d:b8:07:3d:26:6a:cc:f4:bb:ba: 81:6f:c5:c9:5e:f8:10:20:5f:9c:af:e0:6c:5e:c3:40:76:f0: fc:6a:b1:1a:be:a5:fa:c8:bc:dd:45:76:73:d8:16:fa:c9:9b: c6:40:32:f4:9f:6a:a0:0b:bd:b3:08:22:50:ea:04:9b:2b:17: 6a:88:84:c8:da:23:87:bf:b7:73:f8:4c:da:23:31:c4:3a:84: 76:89:6c:81:30:37:67:ef:42:93:b6:1f:35:22:f9:76:48:bb: d5:fd:51:3b:25:68:69:6a:dc:d1:91:ea:c3:5b:0d:85:4a:43: 8f:2d:d1:c2:b1:3d:8a:83:66:2b:0d:dc:c9:fe:a1:89:dd:e5: 47:cf:df:5c:5b:3c:95:6e:e8:15:bd:4b:6f:3b:cf:79:bb:25: 38:2a:02:c3:d3:81:22:ce:1a:23:50:3b:ec:27:13:05:0b:0d: 00:81:a1:ca:a0:5f:25:c1:dc:a8:71:44:c3:59:48:76:85:f3: 5e:0f:db:b9:27:93:aa:d9:b8:5a:f8:3b:24:ab:8c:b2:d8:b1: 48:3d:e0:9b:c2:16:00:fa:f3:73:45:10:8e:75:b1:11:7a:38: 9f:ee:cd:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwNjA4MjExODQxWhcNMjUwNjE1MjExODQxWjAYMRYwFAYD VQQDEw02ODQ1ZmUzMS01YTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq0McWRAGXfkUkjVrICJqcJpctjGqk71ewmWc8t7h5jRGOJ2hRFJAVdLvtdd BGgovaTr/3K1geR4zLXWi8znO/wEyp8uTk6F8MtmCft33UqvJne4Jgi/5h8INc+L oZNtY2MLkV3z4aqPcDOtSbzOEfU2DioF+SFjXvhOeA884iJjX2lYM+QBB8iVHI1a lPr0n9wgvzv3vEfqwXEDj2zsQtOeaaOzx8f75tRmrlG9HTk7lGXDjjuuxbljuVBk YupnNZnAlpvfsknikplaN+QzbHqPIMjo8vavb8mGcu3QabSUX15DKxvdhfseRlus 7NlmHW16VF+A91J8HvyItTh+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi+sO1l cj/YMuLRuVJbgZuAyctdMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4eYH+6Sam7pGtpfji9E1Ff1qE3xi3UAbIyT24Bz0masz0u7qBb8XJ XvgQIF+cr+BsXsNAdvD8arEavqX6yLzdRXZz2Bb6yZvGQDL0n2qgC72zCCJQ6gSb KxdqiITI2iOHv7dz+EzaIzHEOoR2iWyBMDdn70KTth81Ivl2SLvV/VE7JWhpatzR kerDWw2FSkOPLdHCsT2Kg2YrDdzJ/qGJ3eVHz99cWzyVbugVvUtvO895uyU4KgLD 04EizhojUDvsJxMFCw0AgaHKoF8lwdyocUTDWUh2hfNeD9u5J5Oq2bha+Dskq4yy 2LFIPeCbwhYA+vNzRRCOdbERejif7s0v -----END CERTIFICATE-----Generated at Sun Jun 8 23:52:41 2025 by rpki-client