$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: PzUkLcTRPEW+7txtJjETFIV3x3Ruid1QFi6NtkjbVa4= Subject key identifier: 84:F7:47:35:F5:B1:E6:C2:88:F6:F8:CA:F3:8A:42:76:93:0C:91:AE Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 38 Signing time: Sun 29 Jun 2025 06:37:07 +0000 Manifest this update: Sun 29 Jun 2025 06:37:07 +0000 Manifest next update: Sun 06 Jul 2025 06:37:07 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: Gp2Vu94cqgyKb6sRZU9epEkqviHrPR+GnHPYw2NfRrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Jun 29 06:37:07 2025 GMT Not After : Jul 6 06:37:07 2025 GMT Subject: CN=6860df13-7d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:02:ef:5c:a6:36:c6:1d:90:a2:eb:97:84:78: e1:0b:9e:8c:bb:65:41:f7:34:f9:b8:e0:1b:1d:ca: e0:69:cd:5b:20:65:9d:15:60:70:00:53:3d:85:bc: f5:34:36:f6:49:7c:47:c6:35:fb:7e:e1:f9:c4:0c: 2c:56:e2:76:e4:15:49:78:c0:2c:13:09:f1:b8:63: a4:14:f5:6a:5c:cd:f2:12:29:8f:74:91:b4:c8:1c: 09:2c:10:03:ca:c3:88:40:7e:fa:34:29:3a:d6:fc: d7:ac:17:88:82:ea:74:04:ed:08:d4:85:30:ea:9f: c5:1b:ee:81:35:ae:eb:ef:27:e6:07:6a:e5:93:c4: f2:3e:ee:b6:14:87:7a:0e:26:2e:05:9e:08:e0:7e: 3f:d8:5d:b1:6f:3e:5e:f0:f0:01:8f:31:78:fc:52: 0f:2b:ed:08:2b:84:39:8a:f9:86:90:7f:ef:40:91: 8e:d1:68:8c:cb:f1:9a:a3:d4:26:a8:13:9f:c7:81: a5:2e:1d:96:1b:b0:b4:e3:5f:de:84:94:5e:c5:76: c5:21:55:da:ab:12:9e:f3:46:55:34:2f:a8:12:77: 8c:0d:89:9a:cd:f5:2b:da:24:d6:8b:f1:0b:3f:b0: 7f:d9:50:92:fd:f6:fc:5c:4a:f4:71:fa:46:1d:3d: cc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:47:35:F5:B1:E6:C2:88:F6:F8:CA:F3:8A:42:76:93:0C:91:AE X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5a:62:3a:d1:0d:44:a4:c7:90:54:5b:56:6e:82:d6:15:98: 81:d8:4f:2c:fd:a7:6b:83:22:89:7b:45:a6:d3:de:fd:ff:ff: dd:6a:07:66:d0:0a:c7:e1:b0:cf:98:a0:8e:ee:f2:dc:46:ea: 48:99:35:fb:90:0d:07:1e:5c:16:4f:98:d5:4e:59:e5:c2:1e: 88:c5:84:f1:57:18:54:2f:47:1e:95:6f:d1:a7:68:df:1e:1c: eb:b0:dc:72:dd:33:b1:15:74:1b:3c:aa:77:8c:0d:9b:91:6d: 7a:0a:f1:29:be:a5:a9:e5:9d:fa:11:50:6a:78:b9:00:84:7e: ca:7b:6c:2f:05:81:09:e9:0e:f5:3a:eb:71:34:f4:ff:6a:26: f2:25:0a:5a:05:43:82:11:bd:58:00:25:5b:bb:c4:b3:36:72: ad:0c:b9:50:50:d0:c5:ad:da:db:e4:de:a6:37:8b:22:a8:e8: c8:0a:22:40:f9:96:e8:e4:d6:72:85:66:5d:c4:93:cd:d1:b2: 05:4a:a9:ee:d6:f8:ef:d8:44:20:cc:d8:ef:cb:df:0f:e2:ed: 56:a8:82:fe:0c:38:25:99:2f:3c:0e:6c:0c:8a:a4:3d:7d:c3: 73:b0:53:bf:34:9c:38:57:1d:3a:da:d4:94:d1:c3:6b:f0:68: 27:93:b4:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDdEMDExMC8GA1UEBRMoMUQ2MzQxNkM0NzNCMEMwOTEyQkRBQjM3MTAyNzAxMDk1 RkM2QzM1QTAeFw0yNTA2MjkwNjM3MDdaFw0yNTA3MDYwNjM3MDdaMBgxFjAUBgNV BAMTDTY4NjBkZjEzLTdkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJAu9cpjbGHZCi65eEeOELnoy7ZUH3NPm44BsdyuBpzVsgZZ0VYHAAUz2FvPU0 NvZJfEfGNft+4fnEDCxW4nbkFUl4wCwTCfG4Y6QU9WpczfISKY90kbTIHAksEAPK w4hAfvo0KTrW/NesF4iC6nQE7QjUhTDqn8Ub7oE1ruvvJ+YHauWTxPI+7rYUh3oO Ji4Fngjgfj/YXbFvPl7w8AGPMXj8Ug8r7QgrhDmK+YaQf+9AkY7RaIzL8Zqj1Cao E5/HgaUuHZYbsLTjX96ElF7FdsUhVdqrEp7zRlU0L6gSd4wNiZrN9SvaJNaL8Qs/ sH/ZUJL99vxcSvRx+kYdPcwpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhPdHNfWx 5sKI9vjK84pCdpMMka4wHwYDVR0jBBgwFoAUHWNBbEc7DAkSvas3ECcBCV/Gw1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwN0QwLzY1QjY4RTk2MDA3 MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFdOQmJFYzdEQWtTdmFzM0VDY0JDVl9HdzFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw N0QwLzY1QjY4RTk2MDA3MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFr U3ZhczNFQ2NCQ1ZfR3cxby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHlaYjrRDUSkx5BUW1ZugtYVmIHYTyz9p2uDIol7RabT3v3//91qB2bQ CsfhsM+YoI7u8txG6kiZNfuQDQceXBZPmNVOWeXCHojFhPFXGFQvRx6Vb9GnaN8e HOuw3HLdM7EVdBs8qneMDZuRbXoK8Sm+panlnfoRUGp4uQCEfsp7bC8FgQnpDvU6 63E09P9qJvIlCloFQ4IRvVgAJVu7xLM2cq0MuVBQ0MWt2tvk3qY3iyKo6MgKIkD5 lujk1nKFZl3Ek83RsgVKqe7W+O/YRCDM2O/L3w/i7Vaogv4MOCWZLzwObAyKpD19 w3OwU780nDhXHTra1JTRw2vwaCeTtOI= -----END CERTIFICATE-----Generated at Tue Jul 1 00:58:40 2025 by rpki-client