$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: O0Ax2nFNu9W2LMKlYF0RgPFpYj7QCVga8OYO+xxDdAM= Subject key identifier: 8B:29:9D:67:97:03:39:79:F7:1E:20:D4:2E:55:DF:A7:3E:85:64:87 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 5B Signing time: Tue 01 Jul 2025 07:51:41 +0000 Manifest this update: Tue 01 Jul 2025 07:51:40 +0000 Manifest next update: Tue 08 Jul 2025 07:51:40 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: Uw7N/ANsUhvp1t9VjNUvJ+pQEcDZWXKSA641jLeXZ0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Jul 1 07:51:40 2025 GMT Not After : Jul 8 07:51:40 2025 GMT Subject: CN=6863938d-55a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:59:5e:4c:a1:a2:c6:38:c2:6a:80:40:97: 69:a1:8d:73:4e:45:65:de:53:b1:75:00:f6:e9:86: e2:e3:21:ac:74:e6:55:10:ef:c4:64:9f:20:ad:7f: 51:ba:74:32:8a:7d:1a:0f:10:c4:fb:a6:a8:ec:e3: 83:9b:41:a3:64:96:b9:c8:90:e2:85:00:12:6b:ef: a5:e6:2b:ce:4e:51:32:37:3a:d8:94:e1:cc:63:bb: bd:9d:07:36:60:39:26:d0:8f:3f:ef:6a:e7:ea:92: 20:47:6b:49:e6:33:a3:08:cf:e7:b7:75:bd:d2:27: 99:85:12:a7:2b:90:aa:27:06:94:e9:52:e4:97:44: e3:c3:f8:76:39:ba:c2:5d:f4:8a:ce:b6:5e:7e:c9: 15:4e:4e:1b:84:03:3d:5a:dc:3a:d4:79:5d:7b:24: fb:27:93:26:93:c5:8c:fa:45:f7:57:fc:48:f3:04: f7:f0:91:d0:8f:88:4f:18:e5:cd:16:6a:fb:9d:f4: 4e:1d:be:89:22:8c:d8:82:cb:13:94:db:60:7d:a4: ee:0c:ae:10:6f:4e:a7:ed:ab:f1:8f:18:a7:f9:a1: b6:10:45:45:bc:96:bf:17:26:6f:f2:c2:cb:a7:32: 98:e8:74:74:b3:bd:79:3c:51:6c:1e:9c:61:c9:7d: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:29:9D:67:97:03:39:79:F7:1E:20:D4:2E:55:DF:A7:3E:85:64:87 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bb:47:ce:a6:7f:87:df:b7:39:a3:51:b5:96:fa:64:39:e8: 6d:41:31:71:4b:8c:87:c8:1a:37:6c:60:46:6b:9d:49:d2:ae: 1e:8e:39:38:89:20:62:66:81:3a:e3:29:e0:c5:79:28:c6:af: e7:23:2b:55:e6:64:9b:66:94:3e:09:89:42:e3:e8:20:f2:e9: f8:57:83:8e:8a:1a:d4:a4:b3:af:1e:df:7a:ed:d5:6e:c8:75: fb:95:69:bc:58:bf:2a:65:50:26:a0:72:ba:16:d0:06:57:b3: 2c:d7:b7:0f:eb:ff:de:6f:7e:a3:9b:2f:42:ba:7a:2d:e8:fe: 4a:f8:27:fa:2f:da:76:bd:3e:38:91:79:d0:3e:f3:d9:eb:9a: 31:c3:d9:05:98:14:7c:c7:1e:c8:75:5b:f9:d7:4a:8a:3b:73: 02:31:1a:ce:ec:d6:53:1e:78:61:87:a0:f8:f0:52:dd:e9:e0: 45:b7:16:89:49:da:e8:e7:d1:68:51:2f:66:cb:d4:68:28:8b: 2b:e4:a8:2e:f8:38:9e:f1:d4:45:99:15:ab:71:63:b4:1f:e5: 61:c7:11:cf:7d:9c:fe:bc:48:15:d1:e6:e9:09:d0:11:66:4e: 9b:58:5f:1e:99:98:8c:50:ab:a6:e6:bf:e3:f3:7c:c6:bb:b7: 11:75:cb:3e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoODVDNTY3MjU5MTAzRDlFMjI5MkU2NERCRkI3OUZEMzlC MjU2RkRFNDAeFw0yNTA3MDEwNzUxNDBaFw0yNTA3MDgwNzUxNDBaMBgxFjAUBgNV BAMTDTY4NjM5MzhkLTU1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDIFleTKGixjjCaoBAl2mhjXNORWXeU7F1APbphuLjIax05lUQ78RknyCtf1G6 dDKKfRoPEMT7pqjs44ObQaNklrnIkOKFABJr76XmK85OUTI3OtiU4cxju72dBzZg OSbQjz/vaufqkiBHa0nmM6MIz+e3db3SJ5mFEqcrkKonBpTpUuSXROPD+HY5usJd 9IrOtl5+yRVOThuEAz1a3DrUeV17JPsnkyaTxYz6RfdX/EjzBPfwkdCPiE8Y5c0W avud9E4dvokijNiCyxOU22B9pO4MrhBvTqftq/GPGKf5obYQRUW8lr8XJm/ywsun MpjodHSzvXk8UWwenGHJfZKJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiymdZ5cD OXn3HiDULlXfpz6FZIcwHwYDVR0jBBgwFoAUhcVnJZED2eIpLmTb+3n9ObJW/eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzU4M0ZGQzk0Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19l US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNWbkpaRUQyZUlwTG1UYi0zbjlPYkpXX2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJ cExtVGItM245T2JKV19lUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAW7R86mf4fftzmjUbWW+mQ56G1BMXFLjIfIGjdsYEZrnUnSrh6OOTiJ IGJmgTrjKeDFeSjGr+cjK1XmZJtmlD4JiULj6CDy6fhXg46KGtSks68e33rt1W7I dfuVabxYvyplUCagcroW0AZXsyzXtw/r/95vfqObL0K6ei3o/kr4J/ov2na9PjiR edA+89nrmjHD2QWYFHzHHsh1W/nXSoo7cwIxGs7s1lMeeGGHoPjwUt3p4EW3FolJ 2ujn0WhRL2bL1GgoiyvkqC74OJ7x1EWZFatxY7Qf5WHHEc99nP68SBXR5ukJ0BFm TptYXx6ZmIxQq6bmv+PzfMa7txF1yz4= -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:44 2025 by rpki-client