$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: 0SJ3Ao7mi29AtSGrXrkTnjO+y3/+J1O+MEthocQVqMY= Subject key identifier: 5D:8A:A9:BB:8A:C7:48:DE:C7:7B:CA:B8:03:B4:DD:B3:C7:5F:F9:BF Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 01D7 Signing time: Sat 07 Jun 2025 02:25:22 +0000 Manifest this update: Sat 07 Jun 2025 02:25:21 +0000 Manifest next update: Sat 14 Jun 2025 02:25:21 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: M6AVBp/9SMrqYTnzrdfmkwSVkBiB62yvSqFZ4OLnSX0=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Jun 7 02:25:21 2025 GMT Not After : Jun 14 02:25:21 2025 GMT Subject: CN=6843a312-716b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:af:9d:8d:6a:65:b3:8d:de:b3:c6:9b:6f: 86:5d:a8:14:9c:1b:44:f0:51:36:14:a1:99:75:27: 3b:98:3a:95:03:6f:e0:c9:b3:f1:c9:95:16:19:91: 07:cf:2d:68:d5:b0:a6:6d:ca:1c:06:cd:93:cd:bb: 8f:81:c6:02:13:b2:c5:c6:12:6b:a4:5b:c4:ac:78: 36:74:90:b1:71:40:4c:47:49:2e:14:94:a2:eb:ef: 31:e0:73:cd:14:43:b6:ab:f0:50:e9:ee:62:da:84: 2d:ef:7c:7f:0a:d8:26:b4:fa:17:d7:66:0f:c3:d8: 47:67:09:14:c8:93:80:9f:ac:96:88:95:54:f2:bb: 85:27:ae:f8:a1:e3:ed:92:20:89:85:c9:76:48:0a: 86:b2:df:46:7b:c3:ba:34:30:a5:f9:c1:29:25:4a: 8b:d2:2e:f1:d1:ec:5f:66:6a:18:02:7e:a7:be:52: 57:dd:2f:c8:97:a8:24:55:4f:54:15:19:a1:84:a1: cb:12:92:ba:60:d2:b8:b1:c6:dc:7b:07:c0:ad:c8: c5:3b:a6:e4:ea:ec:0a:cc:93:a8:9d:f5:70:c5:94: 10:f7:18:6c:f8:4b:48:db:6a:22:72:8d:73:d0:c3: 58:4e:36:b4:b1:92:15:62:61:72:bf:52:ac:29:59: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8A:A9:BB:8A:C7:48:DE:C7:7B:CA:B8:03:B4:DD:B3:C7:5F:F9:BF X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fc:4f:ad:9d:a1:86:dc:ce:87:cc:8b:0b:8d:fe:a4:81:54: 40:75:d5:f5:23:c0:cc:8b:16:c0:eb:96:28:c3:a1:cd:17:99: 01:4b:5f:af:63:81:aa:31:88:d2:ef:5f:77:14:50:e7:7d:4e: bf:3b:d5:31:dc:2e:e7:f9:14:99:f4:fb:8a:e5:4c:46:71:8c: f1:c3:23:c0:76:55:96:a9:40:41:4b:62:50:c8:ea:4f:44:06: 42:24:aa:db:3a:e4:e2:93:7a:af:6d:54:86:47:a7:48:a1:36: 59:4b:d2:8c:2b:4f:a3:14:1f:c1:f5:8c:c1:af:64:4a:71:30: 07:35:78:bf:a6:04:1a:c1:3d:03:78:1b:1c:73:24:3f:89:42: 1b:6d:fb:f6:ee:3c:aa:63:a2:f2:ca:22:de:aa:27:ce:a2:19: b2:e6:b9:ae:90:b8:f6:2d:63:04:4a:60:ab:92:2a:fa:c0:29: 4c:3b:48:53:e7:2f:06:e2:cb:41:58:9a:bf:a7:75:59:81:a7: 99:86:cb:e4:a8:9a:75:16:97:0f:a2:52:be:9f:38:35:f4:3b: 2c:72:97:40:d8:04:c4:7b:ac:6d:b7:2a:c1:a5:6e:ad:49:f9: f8:c2:82:a7:20:95:52:9d:67:1f:60:6e:8b:d8:12:77:76:4e: a8:15:2e:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUwNjA3MDIyNTIxWhcNMjUwNjE0MDIyNTIxWjAYMRYwFAYD VQQDEw02ODQzYTMxMi03MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzr+vnY1qZbON3rPGm2+GXagUnBtE8FE2FKGZdSc7mDqVA2/gybPxyZUWGZEH zy1o1bCmbcocBs2TzbuPgcYCE7LFxhJrpFvErHg2dJCxcUBMR0kuFJSi6+8x4HPN FEO2q/BQ6e5i2oQt73x/CtgmtPoX12YPw9hHZwkUyJOAn6yWiJVU8ruFJ674oePt kiCJhcl2SAqGst9Ge8O6NDCl+cEpJUqL0i7x0exfZmoYAn6nvlJX3S/Il6gkVU9U FRmhhKHLEpK6YNK4scbcewfArcjFO6bk6uwKzJOonfVwxZQQ9xhs+EtI22oico1z 0MNYTja0sZIVYmFyv1KsKVm4EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2KqbuK x0jex3vKuAO03bPHX/m/MB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI/E+tnaGG3M6HzIsLjf6kgVRAddX1I8DMixbA65Yow6HNF5kBS1+v Y4GqMYjS7193FFDnfU6/O9Ux3C7n+RSZ9PuK5UxGcYzxwyPAdlWWqUBBS2JQyOpP RAZCJKrbOuTik3qvbVSGR6dIoTZZS9KMK0+jFB/B9YzBr2RKcTAHNXi/pgQawT0D eBsccyQ/iUIbbfv27jyqY6LyyiLeqifOohmy5rmukLj2LWMESmCrkir6wClMO0hT 5y8G4stBWJq/p3VZgaeZhsvkqJp1FpcPolK+nzg19DsscpdA2ATEe6xttyrBpW6t Sfn4woKnIJVSnWcfYG6L2BJ3dk6oFS5n -----END CERTIFICATE-----Generated at Sat Jun 7 09:35:45 2025 by rpki-client