$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: Se9a2d7vmrndbyYWAO4cWVfao+yFlPgsas0ObtDsSdo= Subject key identifier: 12:74:A0:14:B5:0A:E3:7D:F4:10:44:55:5B:72:4B:B0:B2:FC:71:A8 Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: 7B Signing time: Sun 29 Jun 2025 05:45:21 +0000 Manifest this update: Sun 29 Jun 2025 05:45:21 +0000 Manifest next update: Sun 06 Jul 2025 05:45:21 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: Ar5otUYl8kp6QbDrtUVn22NTSir+9L7OwGNOkNpSnBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Jun 29 05:45:21 2025 GMT Not After : Jul 6 05:45:21 2025 GMT Subject: CN=6860d2f1-f0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:4d:40:63:ce:15:ea:a9:f1:d8:b2:a2:06: 63:5e:16:9a:82:b8:23:d9:da:34:31:f7:2e:94:84: c4:fd:bc:33:ef:52:2e:ec:7e:37:64:ca:da:78:ea: 4f:1c:fc:06:7e:ae:b2:a8:b6:50:03:70:17:cf:2f: 6f:bd:44:bc:bd:49:f5:d7:6c:25:5b:3d:15:54:4c: 0a:80:b4:1a:95:ac:6d:40:68:eb:70:9e:d3:50:b7: 99:b2:e8:5c:9a:a0:00:d9:cc:bc:89:c5:4b:6a:65: cc:bb:c3:cc:57:b9:f3:5c:a6:4e:26:13:2a:74:16: 5e:81:33:c8:12:4f:a6:ba:58:21:7c:1c:b5:83:a8: b9:2d:17:11:0f:b3:c1:72:a1:66:ab:89:78:22:75: 67:50:92:71:fe:87:73:89:27:62:aa:1d:7b:27:41: 4a:25:33:58:25:3f:99:a4:f3:9b:69:2e:c6:82:a7: cd:69:aa:06:8f:7f:8b:60:0b:5e:16:89:f8:92:a0: 6a:bc:ad:a9:8e:ca:9d:57:0d:5e:83:06:7a:44:61: f1:86:7a:84:76:57:f3:cf:6b:36:ad:f8:65:04:5d: b1:79:8a:ec:5a:67:14:ee:fb:d9:1c:3b:3d:e7:07: f8:03:a2:2b:f5:09:9e:70:19:17:b8:ab:fd:8e:9f: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:74:A0:14:B5:0A:E3:7D:F4:10:44:55:5B:72:4B:B0:B2:FC:71:A8 X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:17:8d:22:3e:d6:e7:12:80:f7:24:76:f6:a3:bf:d1:ab: 6e:9b:70:99:02:b4:1e:54:12:73:f1:12:a1:3f:7c:a5:15:c3: 1e:a4:ec:e1:8f:6c:0c:a0:44:68:af:3f:3d:a6:9f:f9:5b:29: 7e:a3:7a:14:90:88:fc:1e:eb:23:4f:d9:c3:1a:06:2e:22:6b: e6:6b:da:aa:b0:fe:ed:13:bd:21:1a:f9:10:36:ee:fa:de:80: 61:d5:64:71:bb:4a:03:57:38:da:eb:6d:f9:0c:e5:19:be:55: 34:78:0a:51:4c:25:78:62:da:dd:54:c1:d6:c7:41:f3:df:cf: e8:d6:80:2b:08:38:63:e1:67:46:33:c4:9c:2f:3f:5f:fb:4e: 24:f6:36:5f:51:c1:c8:b0:b8:3c:fb:8f:02:72:9a:a6:77:ff: e9:84:11:75:30:0e:d3:cb:26:65:77:15:b8:85:cd:6b:0a:ce: fa:48:66:16:82:96:4b:94:e4:a6:40:15:47:13:a8:de:3a:40: de:99:e6:02:90:45:fc:8b:86:6e:83:4a:dd:3b:e0:df:04:06: 1a:c7:1b:9f:cd:c9:20:fd:a3:84:42:82:42:7e:e5:4c:59:24: 3a:56:ba:6f:a3:de:00:3f:b1:0a:e6:ae:19:60:08:9d:5f:27: 89:d5:49:20 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFNDExMC8GA1UEBRMoODY3Nzk5MDUzRUM5MTc0QjExMUNCQjQ2QjI5N0ZBNjQ3 RTk4MkFBNTAeFw0yNTA2MjkwNTQ1MjFaFw0yNTA3MDYwNTQ1MjFaMBgxFjAUBgNV BAMTDTY4NjBkMmYxLWYwZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjXE1AY84V6qnx2LKiBmNeFpqCuCPZ2jQx9y6UhMT9vDPvUi7sfjdkytp46k8c /AZ+rrKotlADcBfPL2+9RLy9SfXXbCVbPRVUTAqAtBqVrG1AaOtwntNQt5my6Fya oADZzLyJxUtqZcy7w8xXufNcpk4mEyp0Fl6BM8gST6a6WCF8HLWDqLktFxEPs8Fy oWariXgidWdQknH+h3OJJ2KqHXsnQUolM1glP5mk85tpLsaCp81pqgaPf4tgC14W ifiSoGq8ramOyp1XDV6DBnpEYfGGeoR2V/PPazat+GUEXbF5iuxaZxTu+9kcOz3n B/gDoiv1CZ5wGRe4q/2On1ntAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEnSgFLUK 4330EERVW3JLsLL8cagwHwYDVR0jBBgwFoAUhneZBT7JF0sRHLtGspf6ZH6YKqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEU0LzU2MDhBNDk4OUE2 NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaG5lWkJUN0pGMHNSSEx0R3NwZjZaSDZZS3FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEU0LzU2MDhBNDk4OUE2NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBz UkhMdEdzcGY2Wkg2WUtxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQWF40iPtbnEoD3JHb2o7/Rq26bcJkCtB5UEnPxEqE/fKUVwx6k7OGP bAygRGivPz2mn/lbKX6jehSQiPwe6yNP2cMaBi4ia+Zr2qqw/u0TvSEa+RA27vre gGHVZHG7SgNXONrrbfkM5Rm+VTR4ClFMJXhi2t1UwdbHQfPfz+jWgCsIOGPhZ0Yz xJwvP1/7TiT2Nl9RwciwuDz7jwJymqZ3/+mEEXUwDtPLJmV3FbiFzWsKzvpIZhaC lkuU5KZAFUcTqN46QN6Z5gKQRfyLhm6DSt074N8EBhrHG5/NySD9o4RCgkJ+5UxZ JDpWum+j3gA/sQrmrhlgCJ1fJ4nVSSA= -----END CERTIFICATE-----Generated at Tue Jul 1 02:33:09 2025 by rpki-client