$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: ASWhjVWvsbaGWLda1Q+8LTAqlVi1y2vphGvxn3Q+8ME= Subject key identifier: 49:73:15:02:BC:5A:1E:65:C2:45:7E:68:42:99:A0:C6:E4:3B:17:A5 Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 01EB Signing time: Tue 01 Jul 2025 02:56:48 +0000 Manifest this update: Tue 01 Jul 2025 02:56:48 +0000 Manifest next update: Tue 08 Jul 2025 02:56:48 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: 4kB/RbSiF7o0t5Y2vvNavl7k2kSOvSbKL66nBv6TuH8=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: ne9O+G9qSru/U2exZgVGXkHzQTflawcam407PNhnI+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: Jul 1 02:56:48 2025 GMT Not After : Jul 8 02:56:48 2025 GMT Subject: CN=68634e70-0475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:76:e3:ab:5d:8e:0e:58:8f:27:11:a1:2e: e4:cc:29:f7:c7:a9:b4:d1:40:59:1e:36:55:3a:4a: 88:b3:57:0c:02:e6:1c:b9:b3:97:5d:07:53:1a:a4: da:b3:32:58:1d:ba:91:04:e5:a3:ba:42:9f:f6:2f: c8:47:cb:30:f6:2c:37:14:87:13:b1:81:91:40:d6: 7c:c7:64:ca:7c:a6:a3:8b:e9:c8:0f:a6:41:8b:c2: 90:42:0d:0a:15:ce:0d:a7:36:02:29:33:f5:06:d0: 06:a6:83:a2:47:91:d0:58:4f:b2:8e:1b:c6:52:f4: 9c:b8:db:2f:b1:1c:c6:d3:96:6c:f8:d5:d4:a1:b6: 57:d3:08:83:57:90:2a:51:46:e1:38:88:c0:89:7b: c3:52:b5:ac:b2:2f:f6:dd:2c:50:be:db:f5:36:ee: 99:45:e1:52:66:65:e3:c6:74:3a:5e:d7:6b:bc:49: 54:4e:33:f4:1a:bc:17:f6:e3:ea:1f:34:60:5b:c9: f9:40:65:be:ab:00:9c:5c:35:de:d0:56:65:e0:d7: 96:89:d4:85:fb:63:af:6b:2f:f9:53:21:9a:9b:89: 2f:0b:e5:f1:f4:d0:87:c1:1b:ad:16:8f:90:7f:a5: f4:d2:32:d5:6b:20:43:8f:52:55:7c:9f:c8:58:fd: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:15:02:BC:5A:1E:65:C2:45:7E:68:42:99:A0:C6:E4:3B:17:A5 X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:23:25:62:69:2f:aa:86:44:be:6e:52:4f:ef:45:6f:31:70: ed:ac:e0:c6:d1:93:25:8d:87:b2:0c:6b:3a:a5:78:88:fb:b8: 2f:73:02:d7:79:ee:ba:45:ea:41:4b:61:13:f5:be:ef:b8:e6: 90:e2:98:b0:3c:b0:07:ae:d6:a8:f0:79:87:ba:2b:5d:f6:5a: fc:a7:8c:a7:5e:d3:0f:37:1b:5d:f9:29:2a:40:84:5e:30:af: b0:1e:88:41:cf:3e:58:09:4d:78:59:24:bd:ea:f5:04:ae:b0: 87:26:fe:15:d1:ef:aa:3c:ad:bf:25:dc:69:66:91:17:ea:c6: 13:81:30:3a:93:81:5b:6e:dc:36:c5:39:b0:fd:61:57:ba:67: f2:23:5f:96:7e:53:25:5f:44:4e:5f:94:44:e0:d5:04:74:97: 82:fc:d2:ef:4f:9e:cd:ea:06:ff:0c:4c:0d:41:95:4b:64:73: 9e:0c:64:71:68:d8:1b:d6:57:f9:98:b6:3b:e1:08:fa:67:37: 6c:27:56:83:8c:a3:57:03:5f:80:c7:98:3b:28:ec:ea:75:6c: b2:43:b3:b5:22:65:e2:e0:f7:4c:de:b2:b7:06:b2:f7:25:df: aa:45:06:15:64:52:ad:c1:b1:01:a9:40:6a:30:ef:45:0b:be: a0:43:cc:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjUwNzAxMDI1NjQ4WhcNMjUwNzA4MDI1NjQ4WjAYMRYwFAYD VQQDEw02ODYzNGU3MC0wNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApd9246tdjg5YjycRoS7kzCn3x6m00UBZHjZVOkqIs1cMAuYcubOXXQdTGqTa szJYHbqRBOWjukKf9i/IR8sw9iw3FIcTsYGRQNZ8x2TKfKaji+nID6ZBi8KQQg0K Fc4NpzYCKTP1BtAGpoOiR5HQWE+yjhvGUvScuNsvsRzG05Zs+NXUobZX0wiDV5Aq UUbhOIjAiXvDUrWssi/23SxQvtv1Nu6ZReFSZmXjxnQ6XtdrvElUTjP0GrwX9uPq HzRgW8n5QGW+qwCcXDXe0FZl4NeWidSF+2Ovay/5UyGam4kvC+Xx9NCHwRutFo+Q f6X00jLVayBDj1JVfJ/IWP0nmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElzFQK8 Wh5lwkV+aEKZoMbkOxelMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8IyViaS+qhkS+blJP70VvMXDtrODG0ZMljYeyDGs6pXiI+7gvcwLX ee66RepBS2ET9b7vuOaQ4piwPLAHrtao8HmHuitd9lr8p4ynXtMPNxtd+SkqQIRe MK+wHohBzz5YCU14WSS96vUErrCHJv4V0e+qPK2/JdxpZpEX6sYTgTA6k4Fbbtw2 xTmw/WFXumfyI1+WflMlX0ROX5RE4NUEdJeC/NLvT57N6gb/DEwNQZVLZHOeDGRx aNgb1lf5mLY74Qj6ZzdsJ1aDjKNXA1+Ax5g7KOzqdWyyQ7O1ImXi4PdM3rK3BrL3 Jd+qRQYVZFKtwbEBqUBqMO9FC76gQ8xC -----END CERTIFICATE-----Generated at Wed Jul 2 16:33:55 2025 by rpki-client