$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: dKO5pISBmFRph6KlirWSZKBgFDSEn1oIxwFHglVVs+g= Subject key identifier: D0:53:3C:DA:0D:AB:BC:02:1F:DE:33:F2:C7:FB:2D:B7:FF:EA:EC:6F Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: B3 Signing time: Fri 13 Jun 2025 04:58:29 +0000 Manifest this update: Fri 13 Jun 2025 04:58:29 +0000 Manifest next update: Fri 20 Jun 2025 04:58:29 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: SmF8K6hStY3+qaaz4hLesKv3MREdh+xgFKi2OHy626Y=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Jun 13 04:58:29 2025 GMT Not After : Jun 20 04:58:29 2025 GMT Subject: CN=684baff5-9367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:14:3f:39:de:b8:98:26:1e:44:ce:ee:85: 41:44:2b:f2:dd:4f:13:ef:be:23:08:31:79:74:8f: 91:54:75:57:5a:ab:82:7e:a5:cd:c7:3e:ae:20:ee: a0:96:46:a8:29:e3:00:cc:04:47:3c:d6:28:a6:9f: 93:d2:89:ab:32:a3:5f:e1:99:08:b8:38:e5:63:6d: 1e:33:cb:c6:92:75:64:91:a6:66:24:c0:26:d5:36: 97:5c:b3:6a:cb:9d:1b:34:13:2c:92:78:f5:4c:74: f6:f1:7c:2f:94:1a:78:2d:5f:78:3e:0c:69:7a:53: bc:54:3f:cc:10:f8:99:a8:11:bd:8f:ee:12:04:9b: f5:a2:2f:03:fd:0e:db:f0:71:ad:9c:e1:9c:b1:13: 87:52:94:04:c6:8c:34:c3:f4:65:50:95:40:d1:88: 49:07:a7:80:ec:53:ed:f6:54:d0:28:a9:69:f7:bc: e8:92:50:37:0f:f4:0a:3d:cf:9c:ef:4a:99:ea:50: 4f:d3:69:cf:2c:01:c6:f5:ff:ed:f0:9d:5c:8a:10: 38:e8:e6:83:5f:4b:5c:50:84:57:a4:e1:2e:91:86: d1:62:9a:84:10:87:d9:fa:ed:35:a4:be:ae:6a:84: 39:64:d1:84:64:9f:53:9f:a9:48:85:82:41:bc:c9: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:53:3C:DA:0D:AB:BC:02:1F:DE:33:F2:C7:FB:2D:B7:FF:EA:EC:6F X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:cd:9e:92:e0:3c:43:bf:3c:7e:a9:a2:10:a7:e8:a9:01:80: a1:d1:3a:3d:24:50:58:8c:58:59:5d:36:54:96:aa:72:00:cf: 4a:df:2d:41:2c:f7:b4:c3:74:d2:65:3f:0b:22:c0:73:33:22: cc:78:44:20:fc:c0:91:86:3c:2e:f0:1a:e1:cd:44:7d:9d:c8: b4:c2:0a:c9:0e:9d:ad:f8:f7:89:47:0b:8f:cf:c8:60:6e:09: e9:a4:99:e5:62:b6:4d:2b:6f:47:15:53:c9:02:ff:66:b6:81: 92:6b:8c:39:fa:6e:ec:64:bc:81:90:f6:c1:00:18:26:a5:9f: 4f:10:f1:aa:18:01:6e:35:b1:79:45:8c:6e:d2:0e:86:b0:59: 0d:47:a9:2b:6d:4f:3a:a5:ac:df:c5:31:f2:87:fd:67:65:f7: 9d:d9:b0:fc:f2:91:12:a7:6a:03:bc:d7:a3:4f:16:9c:38:2d: 72:4b:16:3f:1b:d5:07:8c:3e:12:c7:10:3d:04:59:a2:12:80: 10:2e:ab:39:56:05:bc:87:b7:10:ac:bf:9b:61:62:3a:a5:40: b4:09:5c:ef:49:33:5c:88:62:17:b0:88:0b:08:ee:99:c5:6c: fb:b8:f6:24:06:31:f9:d8:a4:b0:d0:d0:8c:92:ae:1b:ff:ab: 5c:9c:d5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF RThFQjRDMkQwHhcNMjUwNjEzMDQ1ODI5WhcNMjUwNjIwMDQ1ODI5WjAYMRYwFAYD VQQDEw02ODRiYWZmNS05MzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHUUPzneuJgmHkTO7oVBRCvy3U8T774jCDF5dI+RVHVXWquCfqXNxz6uIO6g lkaoKeMAzARHPNYopp+T0omrMqNf4ZkIuDjlY20eM8vGknVkkaZmJMAm1TaXXLNq y50bNBMsknj1THT28XwvlBp4LV94PgxpelO8VD/MEPiZqBG9j+4SBJv1oi8D/Q7b 8HGtnOGcsROHUpQExow0w/RlUJVA0YhJB6eA7FPt9lTQKKlp97zoklA3D/QKPc+c 70qZ6lBP02nPLAHG9f/t8J1cihA46OaDX0tcUIRXpOEukYbRYpqEEIfZ+u01pL6u aoQ5ZNGEZJ9Tn6lIhYJBvMmuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBTPNoN q7wCH94z8sf7Lbf/6uxvMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG ODJmWk1Fdno5eHJ1anJUQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4zZ6S4DxDvzx+qaIQp+ipAYCh0To9JFBYjFhZXTZUlqpyAM9K3y1B LPe0w3TSZT8LIsBzMyLMeEQg/MCRhjwu8BrhzUR9nci0wgrJDp2t+PeJRwuPz8hg bgnppJnlYrZNK29HFVPJAv9mtoGSa4w5+m7sZLyBkPbBABgmpZ9PEPGqGAFuNbF5 RYxu0g6GsFkNR6krbU86pazfxTHyh/1nZfed2bD88pESp2oDvNejTxacOC1ySxY/ G9UHjD4SxxA9BFmiEoAQLqs5VgW8h7cQrL+bYWI6pUC0CVzvSTNciGIXsIgLCO6Z xWz7uPYkBjH52KSw0NCMkq4b/6tcnNXV -----END CERTIFICATE-----Generated at Fri Jun 13 12:08:31 2025 by rpki-client