$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: vXFORQeI8zw0005wK0f/zCKaQlsdyn5hv4ZjEnr6CsI= Subject key identifier: 20:4F:56:D2:E1:EF:CA:2D:BA:92:2A:16:A8:0C:A0:72:66:4C:16:C5 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 043B Signing time: Thu 03 Jul 2025 00:38:51 +0000 Manifest this update: Thu 03 Jul 2025 00:38:51 +0000 Manifest next update: Thu 10 Jul 2025 00:38:51 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: crRY2M0EmS7qBTQ9ZUBr1X1/fkH/Tf8z70k43jwFxcA=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Jul 3 00:38:51 2025 GMT Not After : Jul 10 00:38:51 2025 GMT Subject: CN=6865d11b-985b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:34:dd:97:31:69:f1:04:d2:84:7c:a9:c9: c0:7a:47:4c:07:98:58:d5:73:2a:fd:15:7e:79:6d: 7f:da:5e:20:07:d9:7a:d0:04:5f:15:fa:5a:96:b5: 74:69:20:87:31:f1:94:ef:e4:1b:d7:c3:81:b7:a9: c0:2e:6c:15:36:10:97:9d:f0:1d:27:49:cf:3d:26: 9b:23:2f:71:bd:b9:69:ce:b4:d9:f2:53:c7:07:2a: 61:79:6e:0d:dc:1e:e9:ee:25:a8:4f:72:55:c9:25: fb:01:eb:23:bc:f1:08:34:be:3c:e0:86:98:54:9a: 43:c0:70:1a:df:f6:a1:4c:8f:15:62:62:3e:10:95: 6f:3f:45:87:45:4d:7a:20:33:25:5c:96:0f:21:27: ca:bf:a2:c3:4a:0f:cf:b6:87:e0:a6:3e:94:b6:9c: f3:96:67:a6:f4:c0:cd:9a:da:68:38:a3:77:ef:b7: 8c:bc:d1:2b:7e:d5:ff:1b:53:40:c8:14:0f:42:00: ee:7b:48:1d:4b:b5:47:ac:1e:3e:0f:9e:ed:16:63: 9a:dd:ac:6e:4f:1d:be:c6:2b:42:83:ca:74:cb:c1: 45:31:b1:6a:fc:6e:18:8f:84:a1:97:52:71:5b:91: 5a:99:ef:9d:9c:12:4e:b5:23:b3:cf:c6:e1:01:c6: 4a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4F:56:D2:E1:EF:CA:2D:BA:92:2A:16:A8:0C:A0:72:66:4C:16:C5 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:62:10:2a:cb:6b:f0:f5:ef:e3:26:30:0d:9a:8c:e3:b9:93: 57:9a:3c:93:b9:b5:33:7d:20:99:fd:9d:24:a9:e1:5b:e7:cd: 49:e4:8b:f6:d8:24:9a:10:1d:cd:99:43:72:f1:a8:d4:6f:13: 01:f0:3d:7e:c0:82:30:d5:6a:e8:40:6d:4a:27:d1:f4:5f:14: d4:9f:dc:42:68:7a:ea:0a:86:ef:31:3f:5e:97:8d:bc:3c:be: be:92:03:02:01:00:81:f5:f3:7b:fb:a2:96:ed:b9:7e:88:4f: 69:10:22:d1:48:08:0f:d7:8d:1b:32:9f:48:3c:10:22:be:1a: 65:47:9b:cd:79:6a:82:19:ee:04:1d:f8:e3:ea:92:94:49:b2: 6d:91:a6:77:4e:56:78:a1:ea:2e:3c:2c:26:d6:69:a0:cd:9c: ee:e8:ee:c7:30:0e:5b:cc:5b:33:c5:65:49:a1:75:c9:d4:42: 44:71:2f:81:c6:ff:8a:7b:8d:d1:c2:1b:d4:df:88:97:c6:6c: 89:63:8f:de:70:45:93:2e:d9:c7:08:27:7c:eb:5a:cc:3f:b6: 02:b2:cf:56:78:89:3b:72:5e:f3:ac:bc:52:e7:e1:67:71:fa: e6:12:c1:74:e5:86:82:2f:b6:64:ec:a7:b7:60:1a:82:46:77: 56:8f:79:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwNzAzMDAzODUxWhcNMjUwNzEwMDAzODUxWjAYMRYwFAYD VQQDEw02ODY1ZDExYi05ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/E03ZcxafEE0oR8qcnAekdMB5hY1XMq/RV+eW1/2l4gB9l60ARfFfpalrV0 aSCHMfGU7+Qb18OBt6nALmwVNhCXnfAdJ0nPPSabIy9xvblpzrTZ8lPHBypheW4N 3B7p7iWoT3JVySX7AesjvPEINL484IaYVJpDwHAa3/ahTI8VYmI+EJVvP0WHRU16 IDMlXJYPISfKv6LDSg/Ptofgpj6Utpzzlmem9MDNmtpoOKN377eMvNErftX/G1NA yBQPQgDue0gdS7VHrB4+D57tFmOa3axuTx2+xitCg8p0y8FFMbFq/G4Yj4Shl1Jx W5Fame+dnBJOtSOzz8bhAcZKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBPVtLh 78otupIqFqgMoHJmTBbFMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzYhAqy2vw9e/jJjANmozjuZNXmjyTubUzfSCZ/Z0kqeFb581J5Iv2 2CSaEB3NmUNy8ajUbxMB8D1+wIIw1WroQG1KJ9H0XxTUn9xCaHrqCobvMT9el428 PL6+kgMCAQCB9fN7+6KW7bl+iE9pECLRSAgP140bMp9IPBAivhplR5vNeWqCGe4E Hfjj6pKUSbJtkaZ3TlZ4oeouPCwm1mmgzZzu6O7HMA5bzFszxWVJoXXJ1EJEcS+B xv+Ke43RwhvU34iXxmyJY4/ecEWTLtnHCCd861rMP7YCss9WeIk7cl7zrLxS5+Fn cfrmEsF05YaCL7Zk7Ke3YBqCRndWj3kn -----END CERTIFICATE-----Generated at Thu Jul 3 08:17:48 2025 by rpki-client