$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json) Hash identifier: q+7yKEmOOM+T+f+llYSNN9ntcDBlYknzSIyFQrld0ZA= Subject key identifier: 89:F0:D9:5D:58:D6:34:19:59:AF:83:69:D8:8C:85:1F:15:07:3D:DC Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft Manifest number: 3E Signing time: Tue 01 Jul 2025 08:18:14 +0000 Manifest this update: Tue 01 Jul 2025 08:18:14 +0000 Manifest next update: Tue 08 Jul 2025 08:18:14 +0000 Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: iBb8hk0Hn4RtaThWWs8LUKXbDx/+2FVyC8v5CQHNXBk=) 2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: 0M63JvIdFfuu35AAppLF2AY+BsaEXFTD4uLQ+gUHRuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Validity Not Before: Jul 1 08:18:14 2025 GMT Not After : Jul 8 08:18:14 2025 GMT Subject: CN=686399c6-76e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:c9:fc:63:23:c6:a2:a3:03:eb:7d:56:6a: 6f:3e:03:52:a2:cb:e7:5e:49:b8:f3:54:52:ec:99: 79:24:f0:34:3a:57:3e:b8:07:e9:c0:00:56:02:87: 93:71:5d:10:6f:3c:a0:d3:20:bf:26:ff:b3:89:9b: 32:16:ac:0d:33:b0:00:71:58:f5:8e:f0:02:56:d8: 86:d9:9c:0b:51:0d:f1:d9:a9:26:b0:13:53:9e:b7: 2c:cc:c4:70:2a:c2:d9:79:3d:90:66:6b:18:ce:67: 7c:93:9d:8f:38:e5:47:1b:6f:c1:d3:0a:e7:02:c6: 73:a0:2a:99:2d:c2:47:48:1c:07:e2:8b:9e:28:ec: 71:8d:77:b8:18:5b:b8:49:bb:81:cd:ca:a4:e0:88: 06:a8:d1:30:5e:07:61:3b:9a:da:da:d0:9e:9e:f9: f6:75:9d:d1:ec:fa:18:04:fc:8f:43:38:e0:6d:b9: 4a:8b:ba:0c:24:0f:34:0d:51:f7:42:a7:4e:e8:28: 9e:e2:78:9f:78:34:35:17:1d:64:d1:14:fb:b3:3a: e1:6e:68:cb:01:f1:5e:3c:40:8f:6a:1b:fc:cc:68: 6d:e1:f1:a3:a8:9e:96:75:40:e1:17:a9:3a:8d:d9: bf:81:bc:35:d6:a2:0c:1c:e8:40:db:3d:c7:fc:e4: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:D9:5D:58:D6:34:19:59:AF:83:69:D8:8C:85:1F:15:07:3D:DC X509v3 Authority Key Identifier: keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:8f:3f:29:9f:93:29:43:2c:3a:af:f5:a0:60:25:93:cd: 40:77:b2:a0:e3:21:5c:49:b4:73:e7:f2:c1:32:0d:24:6d:31: 4f:f2:16:98:2d:0a:32:69:e7:b0:a1:a0:62:53:74:48:d8:0f: e3:16:ef:8b:c2:8a:90:7d:96:d4:85:81:0f:c5:ee:3c:4e:20: 80:6e:58:56:c8:eb:b3:2f:af:e0:06:55:ce:ce:02:e1:4e:f6: fc:c0:e3:ef:62:e1:44:13:79:33:a7:ff:10:1f:f4:96:6d:fa: 33:0c:cb:b2:7b:e9:61:2c:15:7c:5f:98:76:58:70:9f:d4:60: 5e:b2:ef:8d:34:77:92:0c:4e:8d:4f:24:f5:b1:e6:15:39:89: 80:9b:9f:fb:3f:93:10:be:fb:c8:d0:b0:fd:84:48:46:f9:a6: 72:fc:13:8c:da:80:da:39:29:a5:b1:36:bf:45:f3:d4:42:28: 43:29:ce:c4:3d:51:97:9b:2a:cd:ea:6f:64:b1:c6:7e:5b:9a: 33:c4:85:96:0f:5c:3e:7b:8d:82:ae:2a:af:7b:26:fe:a6:91: 86:70:95:b2:35:84:b6:66:a4:6b:66:e9:c4:25:07:16:4a:bb: 2c:1b:b0:26:22:76:16:0d:05:5e:d1:f5:85:f8:7f:d6:27:48: 6b:7c:e7:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjA2NjExMC8GA1UEBRMoMUQ0RUM0MjUzMzEzQjYyQzQ4NDQ5MTZCODVEQzBGRkU0 QjA3RDUwODAeFw0yNTA3MDEwODE4MTRaFw0yNTA3MDgwODE4MTRaMBgxFjAUBgNV BAMTDTY4NjM5OWM2LTc2ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu4cn8YyPGoqMD631Wam8+A1Kiy+deSbjzVFLsmXkk8DQ6Vz64B+nAAFYCh5Nx XRBvPKDTIL8m/7OJmzIWrA0zsABxWPWO8AJW2IbZnAtRDfHZqSawE1OetyzMxHAq wtl5PZBmaxjOZ3yTnY845Ucbb8HTCucCxnOgKpktwkdIHAfii54o7HGNd7gYW7hJ u4HNyqTgiAao0TBeB2E7mtra0J6e+fZ1ndHs+hgE/I9DOOBtuUqLugwkDzQNUfdC p07oKJ7ieJ94NDUXHWTRFPuzOuFuaMsB8V48QI9qG/zMaG3h8aOonpZ1QOEXqTqN 2b+BvDXWogwc6EDbPcf85GTVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUifDZXVjW NBlZr4Np2IyFHxUHPdwwHwYDVR0jBBgwFoAUHU7EJTMTtixIRJFrhdwP/ksH1Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MDY2LzY0OEE4ODMyRkI2 NDExRUZCQzlCMzUyOUM0RjlBRTAyL0hVN0VKVE1UdGl4SVJKRnJoZHdQX2tzSDFR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFU3RUpUTVR0aXhJUkpGcmhkd1Bfa3NIMVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MDY2LzY0OEE4ODMyRkI2NDExRUZCQzlCMzUyOUM0RjlBRTAyL0hVN0VKVE1UdGl4 SVJKRnJoZHdQX2tzSDFRZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhhjz8pn5MpQyw6r/WgYCWTzUB3sqDjIVxJtHPn8sEyDSRtMU/yFpgt CjJp57ChoGJTdEjYD+MW74vCipB9ltSFgQ/F7jxOIIBuWFbI67Mvr+AGVc7OAuFO 9vzA4+9i4UQTeTOn/xAf9JZt+jMMy7J76WEsFXxfmHZYcJ/UYF6y7400d5IMTo1P JPWx5hU5iYCbn/s/kxC++8jQsP2ESEb5pnL8E4zagNo5KaWxNr9F89RCKEMpzsQ9 UZebKs3qb2Sxxn5bmjPEhZYPXD57jYKuKq97Jv6mkYZwlbI1hLZmpGtm6cQlBxZK uywbsCYidhYNBV7R9YX4f9YnSGt857Q= -----END CERTIFICATE-----Generated at Thu Jul 3 02:53:04 2025 by rpki-client