$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: 97hUdgeBTiTg0GnyzpZESPlgotGM5va/XH6k+FIAQVg= Subject key identifier: 2D:73:F3:CF:E8:45:C9:A2:B7:4A:B6:11:56:37:91:F9:51:B7:62:73 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1D29 Signing time: Wed 02 Jul 2025 16:16:34 +0000 Manifest this update: Wed 02 Jul 2025 16:16:33 +0000 Manifest next update: Wed 09 Jul 2025 16:16:33 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: aLS9k85oafGbcEKJwvL7mIa3mcv8Gcroq8375+R7Qas=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: hUo9fC/hzy17W76vlbeXm/dftwyddFbiGAwqbp53ZVY=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: PqWYELxwluX51eG9Uh24A8xMydgivpkrMXOxcA+zOSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7488 (0x1d40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Jul 2 16:16:33 2025 GMT Not After : Jul 9 16:16:33 2025 GMT Subject: CN=68655b62-de06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:71:f4:bb:85:ea:cb:75:e7:c8:fe:d2:c7: 03:6a:39:0d:e2:41:18:bf:2c:10:b5:b3:41:06:81: 7a:67:a4:7e:d2:99:90:76:b8:a6:36:5e:d6:b2:c3: 68:90:a3:44:da:de:49:83:11:8e:c8:05:e1:83:e9: 22:a9:24:cc:09:68:d8:0c:42:e8:cb:2e:f8:1d:e2: 6a:b4:c2:78:88:0d:94:f4:6d:0a:37:27:a0:49:d2: a9:ea:c4:f8:a6:60:c3:12:f2:c5:24:90:61:2d:57: 7f:39:7d:87:c8:82:8c:2c:8d:56:95:d6:4c:e7:3d: 5a:2b:68:a0:be:21:96:49:19:55:be:5a:3d:32:85: f3:88:a3:fd:a1:c7:c5:4f:61:e0:73:7d:bb:75:78: 9e:9c:a3:a8:0e:67:ef:af:c8:8b:e7:e4:3c:c7:f9: 74:2c:9d:e0:7e:58:ec:1b:cb:84:f0:91:d0:66:4d: 02:eb:8e:dc:74:51:94:e9:85:42:6b:43:2c:3b:b3: dc:38:22:ba:32:fd:f6:06:b8:b8:b4:bf:c8:26:13: 9a:8d:1a:ab:50:f5:9c:fa:e0:d5:da:94:dc:06:46: 45:19:b4:75:e4:93:d2:3f:cf:42:63:a6:d2:d2:77: 9e:ef:b2:b8:a1:2e:70:e2:6d:33:04:63:66:46:9a: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:F3:CF:E8:45:C9:A2:B7:4A:B6:11:56:37:91:F9:51:B7:62:73 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:06:eb:63:97:22:99:f6:42:3e:d0:f2:fc:bb:cf:ce:0c:7f: b8:2c:ba:7e:c1:5b:1a:39:94:ff:23:d6:9e:fe:bd:3a:d3:57: e4:d0:b0:c2:f5:ae:d1:63:f5:9e:24:23:ad:b2:be:00:68:27: a2:81:77:1a:04:25:a5:2e:7d:ec:5f:6f:1d:a7:8a:8d:9f:7b: a3:2f:b4:4a:90:0b:13:a7:47:b7:79:81:84:08:8c:1b:ad:c8: 77:9b:1d:21:a2:92:a0:77:75:77:44:c3:14:9b:a5:c0:0a:42: 2a:da:29:e8:46:71:13:39:a4:98:12:dd:0c:14:0a:53:b2:d7: ce:51:2e:8c:a3:dd:86:7b:39:ff:17:69:90:91:e8:2f:ab:b5: c7:bc:46:4f:69:b2:07:d9:04:4d:82:c6:c2:95:8a:24:0f:19: 80:24:54:5e:0b:6b:47:f4:e6:71:5a:b1:bc:75:c4:29:8d:32: 3b:77:40:5f:39:9d:ca:58:b7:39:48:ea:e9:34:0f:59:30:58: e2:1b:0c:9f:f3:14:bc:67:fc:93:4c:3e:35:62:35:aa:3e:1a: dd:48:d9:b2:36:ad:9d:66:e3:e7:ea:2e:ee:64:55:0c:24:59: 6c:fe:c7:f5:41:93:9d:9a:59:8e:6c:71:5b:0a:21:97:2d:0a: f0:39:11:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjUwNzAyMTYxNjMzWhcNMjUwNzA5MTYxNjMzWjAYMRYwFAYD VQQDEw02ODY1NWI2Mi1kZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRJx9LuF6st158j+0scDajkN4kEYvywQtbNBBoF6Z6R+0pmQdrimNl7WssNo kKNE2t5JgxGOyAXhg+kiqSTMCWjYDELoyy74HeJqtMJ4iA2U9G0KNyegSdKp6sT4 pmDDEvLFJJBhLVd/OX2HyIKMLI1WldZM5z1aK2igviGWSRlVvlo9MoXziKP9ocfF T2Hgc327dXienKOoDmfvr8iL5+Q8x/l0LJ3gfljsG8uE8JHQZk0C647cdFGU6YVC a0MsO7PcOCK6Mv32Bri4tL/IJhOajRqrUPWc+uDV2pTcBkZFGbR15JPSP89CY6bS 0nee77K4oS5w4m0zBGNmRprOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1z88/o Rcmit0q2EVY3kflRt2JzMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEButjlyKZ9kI+0PL8u8/ODH+4LLp+wVsaOZT/I9ae/r0601fk0LDC 9a7RY/WeJCOtsr4AaCeigXcaBCWlLn3sX28dp4qNn3ujL7RKkAsTp0e3eYGECIwb rch3mx0hopKgd3V3RMMUm6XACkIq2inoRnETOaSYEt0MFApTstfOUS6Mo92Gezn/ F2mQkegvq7XHvEZPabIH2QRNgsbClYokDxmAJFReC2tH9OZxWrG8dcQpjTI7d0Bf OZ3KWLc5SOrpNA9ZMFjiGwyf8xS8Z/yTTD41YjWqPhrdSNmyNq2dZuPn6i7uZFUM JFls/sf1QZOdmlmObHFbCiGXLQrwOREt -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:48 2025 by rpki-client