$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: vdg81HXAPoy8S1QYkOqMa0ze0jeh/ThkbLegrDIStxA= Subject key identifier: 6C:59:D2:FF:C6:96:33:C2:48:0D:49:6C:23:FF:71:CE:C7:6C:88:3C Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: E1 Signing time: Tue 01 Jul 2025 01:35:49 +0000 Manifest this update: Tue 01 Jul 2025 01:35:48 +0000 Manifest next update: Tue 08 Jul 2025 01:35:48 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: vT4zmWWKMpOwalX3mwLBxxWLFIpkffyMfxTauiGusy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Jul 1 01:35:48 2025 GMT Not After : Jul 8 01:35:48 2025 GMT Subject: CN=68633b74-f5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:80:ba:59:0e:be:36:eb:02:c0:41:e7:53: 79:6d:4c:69:ad:b7:96:e0:5f:af:d6:3b:91:bd:82: a6:30:10:37:0e:66:16:6b:41:29:7c:d5:4f:93:4c: ea:45:3a:0d:ec:73:24:be:25:78:45:02:39:99:d6: 2a:1f:9e:1a:9f:3d:94:0f:d4:ae:80:78:77:ee:e5: e0:c1:39:0c:6e:36:e0:8f:e7:09:9d:63:52:fe:6f: ff:4a:76:d5:d8:70:36:7f:b1:87:6d:cd:44:03:5b: 90:36:cf:1c:b5:96:ec:b6:f9:68:74:8a:da:5c:26: fe:db:bf:ac:b0:61:58:9c:e3:15:12:8f:8e:b4:a1: d9:1a:59:50:f3:b4:fd:4a:b7:2b:80:f5:d9:c6:53: 6d:ba:e1:a9:17:46:11:a1:3a:0c:49:73:09:d7:23: 07:83:a5:f1:9a:63:d0:3d:72:e8:7c:5a:3c:ad:d9: 13:2c:03:0a:66:85:2d:cd:9f:8d:2c:de:09:bc:fe: a1:89:50:c6:db:e7:96:36:27:53:05:a8:58:12:0c: 03:84:5e:91:30:1a:9c:cd:89:27:9a:c6:f9:00:d0: bc:b5:b3:cf:93:78:92:70:38:54:67:33:55:cc:96: d9:62:ff:6f:47:67:d2:73:bd:eb:45:a7:aa:29:10: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:59:D2:FF:C6:96:33:C2:48:0D:49:6C:23:FF:71:CE:C7:6C:88:3C X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1e:76:88:0d:1a:c5:7b:9d:89:36:38:eb:76:d0:e0:49:cd: f3:97:c2:c0:c8:16:78:61:f9:1d:54:f6:9f:0a:9f:d7:55:16: 51:d0:a8:b2:3b:01:77:42:04:63:3e:71:fa:87:b1:87:14:82: 66:30:91:fb:60:0c:85:66:c0:a8:83:3b:ee:25:46:14:05:c6: 1d:1f:a7:3f:20:32:5c:b5:64:38:29:63:66:19:8a:9d:f4:3d: 71:0b:86:fc:fa:0e:d8:ef:e6:0a:c2:64:f9:42:ef:73:c1:f1: a2:52:3f:6d:56:4a:08:ad:82:52:33:7f:df:de:04:29:db:75: 63:71:77:d2:d2:1c:5d:43:14:45:a8:51:82:42:66:24:ab:1f: bb:30:ab:89:6e:df:67:75:1f:af:c6:68:d1:39:b7:85:fd:72: db:49:30:d4:c8:ed:64:61:de:74:3c:c8:28:78:94:4f:b1:a5: c1:d3:48:f0:84:35:ff:64:4f:3a:bb:db:5b:e6:6e:37:1a:1f: 34:a1:46:bf:22:91:72:6b:91:99:ef:57:45:05:fe:d5:d4:c6: 4b:0a:f6:d8:54:19:33:53:eb:7f:b6:ff:78:da:8d:91:44:7d: 10:65:09:98:2e:f4:68:06:18:33:fb:f5:a7:9b:3a:8e:80:62: 8e:3e:6b:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUwNzAxMDEzNTQ4WhcNMjUwNzA4MDEzNTQ4WjAYMRYwFAYD VQQDEw02ODYzM2I3NC1mNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuuAulkOvjbrAsBB51N5bUxprbeW4F+v1juRvYKmMBA3DmYWa0EpfNVPk0zq RToN7HMkviV4RQI5mdYqH54anz2UD9SugHh37uXgwTkMbjbgj+cJnWNS/m//SnbV 2HA2f7GHbc1EA1uQNs8ctZbstvlodIraXCb+27+ssGFYnOMVEo+OtKHZGllQ87T9 SrcrgPXZxlNtuuGpF0YRoToMSXMJ1yMHg6XxmmPQPXLofFo8rdkTLAMKZoUtzZ+N LN4JvP6hiVDG2+eWNidTBahYEgwDhF6RMBqczYknmsb5ANC8tbPPk3iScDhUZzNV zJbZYv9vR2fSc73rRaeqKRDR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxZ0v/G ljPCSA1JbCP/cc7HbIg8MB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuHnaIDRrFe52JNjjrdtDgSc3zl8LAyBZ4YfkdVPafCp/XVRZR0Kiy OwF3QgRjPnH6h7GHFIJmMJH7YAyFZsCogzvuJUYUBcYdH6c/IDJctWQ4KWNmGYqd 9D1xC4b8+g7Y7+YKwmT5Qu9zwfGiUj9tVkoIrYJSM3/f3gQp23VjcXfS0hxdQxRF qFGCQmYkqx+7MKuJbt9ndR+vxmjRObeF/XLbSTDUyO1kYd50PMgoeJRPsaXB00jw hDX/ZE86u9tb5m43Gh80oUa/IpFya5GZ71dFBf7V1MZLCvbYVBkzU+t/tv942o2R RH0QZQmYLvRoBhgz+/WnmzqOgGKOPmuJ -----END CERTIFICATE-----Generated at Tue Jul 1 18:23:48 2025 by rpki-client