$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: MDQVQuEGqg4/uioAKBm4gGnMvT37uYfgWvfwvQ48Fxg= Subject key identifier: C3:45:B3:6B:90:6D:82:B7:EF:72:37:BF:5A:05:0E:96:CD:98:1C:4F Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0655 Signing time: Wed 02 Jul 2025 22:52:15 +0000 Manifest this update: Wed 02 Jul 2025 22:52:14 +0000 Manifest next update: Wed 09 Jul 2025 22:52:14 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: 9WA3gGQnTE/plRBnxaJOcZDjW4gAjIVMXcYC1MaRSsk=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Jul 2 22:52:14 2025 GMT Not After : Jul 9 22:52:14 2025 GMT Subject: CN=6865b81f-e6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:d3:7b:d4:27:78:79:56:e2:1c:bf:d1:9e: b4:aa:5d:c3:3d:58:30:64:eb:3a:0e:91:5a:6a:fb: 6d:97:42:0e:aa:b7:80:87:ca:94:1b:0f:6d:49:eb: 02:d1:87:fa:e8:70:69:21:92:20:a7:ba:83:9f:fb: d6:38:23:45:38:db:5d:d5:0d:f6:71:80:20:ed:6b: 3d:43:0f:59:65:f2:74:a4:a8:60:0c:f9:2e:07:e5: 86:fa:15:4a:38:38:a4:81:db:3f:00:03:e2:88:39: c1:01:34:b9:22:b3:e8:1b:6d:47:46:a4:85:26:a6: 72:2a:f3:ab:0c:db:a4:ae:16:91:30:bb:ed:74:6d: 70:2a:f7:b6:e1:88:34:db:c3:61:2c:c0:35:37:2d: d7:c3:b5:11:a1:4a:06:7c:bd:0a:7a:85:a2:f9:2a: 66:62:3a:d0:cb:f7:28:45:af:56:ba:28:94:64:e3: 14:05:16:b1:7e:37:c9:cb:8c:e5:2c:df:76:b1:07: 3d:e3:d5:27:e9:9a:02:7c:79:f4:d0:fb:80:9f:25: 78:d2:2e:11:69:73:fc:eb:df:1f:c1:94:fb:2b:ed: 4b:e2:00:9a:e5:c1:99:90:a2:3d:f4:87:a9:88:16: 8e:01:b6:81:e9:c2:20:58:3d:74:4b:b3:f2:be:2a: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:45:B3:6B:90:6D:82:B7:EF:72:37:BF:5A:05:0E:96:CD:98:1C:4F X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ec:4d:82:16:4d:e8:67:91:9a:4d:e0:17:c7:68:94:b4:7b: 82:1e:57:6e:42:3a:9a:ae:67:b0:97:b0:9b:5b:9d:7f:a2:32: 8c:98:dd:15:f2:b3:18:7c:2e:cd:03:e8:ad:c0:48:19:66:f5: a4:2d:03:fb:09:88:62:57:23:3c:af:9c:ac:8f:6b:ff:9b:68: 46:b7:30:02:90:83:7e:98:8c:02:28:c3:3c:af:a8:b5:e4:99: a3:49:c5:da:b1:3c:38:73:5b:af:9a:c6:e3:b8:eb:7b:95:8b: 65:bc:1f:6c:59:10:c7:fc:70:cc:8c:13:6e:c6:48:d4:dc:84: 5f:ef:b0:2d:aa:06:91:0a:94:3b:72:77:b6:54:0e:d7:4b:e1: 46:0f:07:75:fa:fe:20:ce:ed:22:54:55:e7:fc:fe:f2:39:41: bc:a2:1b:ef:d9:15:35:b9:15:7e:d0:eb:47:4a:30:c9:f1:d8: d2:fc:7d:20:ce:ce:18:ab:f0:89:b3:21:df:16:e0:45:55:39: 99:6e:62:2f:c8:91:8f:e6:e4:36:e8:5a:37:11:56:a2:9f:15: 52:36:27:1b:23:ba:fd:d1:32:9a:02:68:41:64:6f:7f:81:f9: e1:d5:51:e2:df:17:e0:05:0b:7f:16:31:45:c0:fc:5e:87:43: d1:50:91:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUwNzAyMjI1MjE0WhcNMjUwNzA5MjI1MjE0WjAYMRYwFAYD VQQDEw02ODY1YjgxZi1lNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujLTe9QneHlW4hy/0Z60ql3DPVgwZOs6DpFaavttl0IOqreAh8qUGw9tSesC 0Yf66HBpIZIgp7qDn/vWOCNFONtd1Q32cYAg7Ws9Qw9ZZfJ0pKhgDPkuB+WG+hVK ODikgds/AAPiiDnBATS5IrPoG21HRqSFJqZyKvOrDNukrhaRMLvtdG1wKve24Yg0 28NhLMA1Ny3Xw7URoUoGfL0KeoWi+SpmYjrQy/coRa9WuiiUZOMUBRaxfjfJy4zl LN92sQc949Un6ZoCfHn00PuAnyV40i4RaXP8698fwZT7K+1L4gCa5cGZkKI99Iep iBaOAbaB6cIgWD10S7PyvirjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNFs2uQ bYK373I3v1oFDpbNmBxPMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL7E2CFk3oZ5GaTeAXx2iUtHuCHlduQjqarmewl7CbW51/ojKMmN0V 8rMYfC7NA+itwEgZZvWkLQP7CYhiVyM8r5ysj2v/m2hGtzACkIN+mIwCKMM8r6i1 5JmjScXasTw4c1uvmsbjuOt7lYtlvB9sWRDH/HDMjBNuxkjU3IRf77AtqgaRCpQ7 cne2VA7XS+FGDwd1+v4gzu0iVFXn/P7yOUG8ohvv2RU1uRV+0OtHSjDJ8djS/H0g zs4Yq/CJsyHfFuBFVTmZbmIvyJGP5uQ26Fo3EVainxVSNicbI7r90TKaAmhBZG9/ gfnh1VHi3xfgBQt/FjFFwPxeh0PRUJGR -----END CERTIFICATE-----Generated at Fri Jul 4 23:17:55 2025 by rpki-client