$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: Vx3E7vaEjdT6biAeTrg2PLU/50yNsI5N7TZmvPYILKc= Subject key identifier: 10:96:69:07:1C:F2:A5:C0:45:58:7C:DB:9F:24:76:70:CD:0D:86:BC Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 5D Signing time: Thu 03 Jul 2025 07:18:50 +0000 Manifest this update: Thu 03 Jul 2025 07:18:50 +0000 Manifest next update: Thu 10 Jul 2025 07:18:49 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: A+S4xS4m437OxEfJOeg5XOkzvxA6Ff5WtC6kuZQBhUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Jul 3 07:18:50 2025 GMT Not After : Jul 10 07:18:49 2025 GMT Subject: CN=68662eda-51f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:3e:6a:a2:cb:b3:79:47:62:d6:c3:ca:37: 71:66:1c:99:bd:a7:4f:c6:d8:5b:b8:c0:44:8f:ef: c6:4d:85:b9:33:31:61:35:8f:10:88:91:21:37:7b: a0:05:0f:4d:3b:86:f0:09:c8:30:a6:c1:7f:41:82: 4f:22:d1:01:a8:bd:82:f6:4e:c1:9d:0e:7b:aa:21: c3:15:de:a4:44:4c:68:54:96:cf:c1:3b:b0:22:17: 60:19:8e:43:2c:b0:2b:8c:b0:fb:ce:b8:26:2a:5a: 43:9e:38:4b:6b:fa:46:31:ff:d6:32:90:f6:ce:29: dc:fc:06:0c:43:55:d5:51:df:64:37:5d:46:27:72: 8f:94:47:96:ff:6d:8c:3f:62:86:39:22:0e:65:d9: 1e:e9:9b:86:28:e4:58:d9:08:1c:c3:35:50:5e:d4: 6f:ce:9c:ee:3a:af:43:f5:ff:2d:a4:34:5e:85:a5: fe:90:85:bc:76:b2:98:04:e2:39:5a:00:00:36:b3: 1e:1f:7a:80:e6:fa:d1:4b:27:c1:5d:3c:d7:e0:39: 1e:1a:a6:6d:50:bb:46:65:99:01:84:42:17:a3:d0: ae:4e:bd:cc:a5:40:23:74:f0:ec:52:fc:0d:a5:c3: 89:67:af:f0:3f:6c:96:23:20:21:a7:fb:da:f4:28: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:96:69:07:1C:F2:A5:C0:45:58:7C:DB:9F:24:76:70:CD:0D:86:BC X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5c:ab:7f:2d:cc:51:a2:6e:80:7c:3f:e8:6f:4c:37:ab:0e: 95:47:77:da:f3:d5:49:c5:72:8d:1a:14:8e:ed:73:a6:3b:84: 5e:61:56:4c:a2:fe:77:11:1b:09:46:5d:d4:ce:58:1b:94:2e: bf:55:50:4e:58:4c:72:3f:ac:f2:d5:53:e9:d2:24:79:52:4b: 0a:dd:bd:ee:30:85:14:40:f9:8c:4f:80:68:00:d6:56:26:9e: 81:e8:21:3c:45:75:ad:56:ca:ad:02:21:b0:e5:8c:14:12:51: bf:7b:fa:81:19:a2:86:56:a9:c9:08:24:41:9a:07:d9:ef:9e: 41:04:02:1b:46:c5:4e:26:44:96:86:a7:ba:2a:36:e0:70:90: 94:f4:26:99:c7:f3:cb:bd:34:42:6e:60:89:f4:fa:44:70:51: 50:bf:67:c9:3d:80:73:62:56:46:f9:01:14:e4:09:49:77:f9: 57:fd:3e:3b:0d:7e:38:bb:2b:73:bf:be:00:fd:8e:8e:ea:42: b1:14:1e:b9:52:05:1f:8c:1a:06:72:2f:90:64:ee:06:5d:b4: 40:8a:c9:05:8f:fc:a9:5f:15:30:da:9b:2c:7c:1e:24:96:d3: 19:91:96:fc:75:a6:cf:15:83:32:9b:dc:62:08:c6:52:02:c2: e3:2c:14:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA3MDMwNzE4NTBaFw0yNTA3MTAwNzE4NDlaMBgxFjAUBgNV BAMTDTY4NjYyZWRhLTUxZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzdz5qosuzeUdi1sPKN3FmHJm9p0/G2Fu4wESP78ZNhbkzMWE1jxCIkSE3e6AF D007hvAJyDCmwX9Bgk8i0QGovYL2TsGdDnuqIcMV3qRETGhUls/BO7AiF2AZjkMs sCuMsPvOuCYqWkOeOEtr+kYx/9YykPbOKdz8BgxDVdVR32Q3XUYnco+UR5b/bYw/ YoY5Ig5l2R7pm4Yo5FjZCBzDNVBe1G/OnO46r0P1/y2kNF6Fpf6Qhbx2spgE4jla AAA2sx4feoDm+tFLJ8FdPNfgOR4apm1Qu0ZlmQGEQhej0K5OvcylQCN08OxS/A2l w4lnr/A/bJYjICGn+9r0KOtBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEJZpBxzy pcBFWHzbnyR2cM0NhrwwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJcq38tzFGiboB8P+hvTDerDpVHd9rz1UnFco0aFI7tc6Y7hF5hVkyi /ncRGwlGXdTOWBuULr9VUE5YTHI/rPLVU+nSJHlSSwrdve4whRRA+YxPgGgA1lYm noHoITxFda1Wyq0CIbDljBQSUb97+oEZooZWqckIJEGaB9nvnkEEAhtGxU4mRJaG p7oqNuBwkJT0JpnH88u9NEJuYIn0+kRwUVC/Z8k9gHNiVkb5ARTkCUl3+Vf9PjsN fji7K3O/vgD9jo7qQrEUHrlSBR+MGgZyL5Bk7gZdtECKyQWP/KlfFTDamyx8HiSW 0xmRlvx1ps8VgzKb3GIIxlICwuMsFEc= -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:11 2025 by rpki-client