$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: MP8IzFsAr1+A3Rjzp0r6Z78i7ZrTZ9J9E/ukqdIRS2o= Subject key identifier: E1:18:A6:BC:EE:9D:72:AA:DA:61:C9:89:61:B8:48:BC:7D:35:B7:4D Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 86 Signing time: Thu 03 Jul 2025 06:47:16 +0000 Manifest this update: Thu 03 Jul 2025 06:47:16 +0000 Manifest next update: Thu 10 Jul 2025 06:47:16 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: 9GYyTlDBzIrD9cv0ypDs0Mvjqr14MdHIpSAEqjfb5YE=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: KqwFgUGGWmZ6w/oc9lE/9i1V2X5VufgZVt2vhykEeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Jul 3 06:47:16 2025 GMT Not After : Jul 10 06:47:16 2025 GMT Subject: CN=68662774-f525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:cd:74:99:f8:05:34:0b:8e:ac:45:d6:87: 9d:cd:c3:72:94:a3:57:03:b4:cc:60:d9:0b:a4:40: e7:08:5d:bd:07:31:ea:d8:dd:2a:a8:91:cc:d1:6f: ba:83:7f:4d:fd:8e:95:f9:ff:09:fa:30:ff:6b:47: 5b:eb:3b:1f:54:c6:71:14:d3:3b:93:9b:fe:31:07: f3:1a:6c:cd:bb:94:8d:0c:1b:5a:45:cb:33:7c:f1: 7e:76:20:32:a9:cc:d1:09:d3:14:20:d1:f6:ad:f6: 2a:7a:ba:6e:04:fd:b6:2e:3e:a6:92:b4:34:86:90: db:cf:cc:2c:49:1f:21:23:39:91:66:0f:c5:bc:0c: ce:24:69:d3:13:5a:25:63:47:43:a6:db:6d:a7:52: e2:9e:f0:30:8e:a7:30:44:96:a1:2d:5e:f8:c8:7e: ad:38:59:20:3e:e2:44:52:48:f3:df:58:10:c5:81: 3d:ed:5a:d5:91:4d:ee:2c:bb:cc:bb:e6:0b:8b:76: 5c:0f:24:b8:5d:dd:b9:a1:d7:0a:4d:5e:2b:25:c5: ad:a9:26:ef:13:b8:56:99:40:ce:99:2b:1c:40:40: b7:d1:f8:22:d9:c0:ce:3a:6d:e5:02:45:63:37:48: 5e:c7:12:1a:69:46:a6:cf:28:41:51:46:da:a8:01: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:18:A6:BC:EE:9D:72:AA:DA:61:C9:89:61:B8:48:BC:7D:35:B7:4D X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d5:04:5a:dd:cc:5a:5a:af:26:ac:f0:e3:97:ad:73:3b:d0: 98:51:b5:f6:a5:da:fb:67:28:5d:a3:4f:6f:4f:39:0e:d8:bb: 1a:da:1a:55:7e:4f:e9:62:02:d4:c8:51:50:7b:93:25:96:df: a8:14:47:64:fb:81:c4:44:e2:45:69:f3:1e:42:6c:85:e8:4c: a3:ab:e8:56:76:fc:4d:23:81:9b:76:b2:3f:6d:d5:ff:ae:4a: 86:0f:cd:06:82:48:2e:26:79:ed:0e:02:63:f9:b6:4a:fc:52: 80:4c:c4:df:6b:92:32:77:a1:2c:50:27:c8:4e:f2:65:40:db: e0:eb:d3:cc:a7:ed:ee:35:13:4f:ea:8d:79:48:78:dd:69:53: 35:e2:e0:ed:9b:7b:51:cf:eb:75:4f:ef:5d:ef:88:ac:ed:a0: e3:d7:3e:cb:7f:cf:7c:a4:52:8a:76:f6:7b:98:0d:09:14:dd: 91:7c:67:53:52:35:57:6a:66:72:35:19:3c:b9:44:6a:7b:38: a7:39:9e:55:ce:c8:d3:c2:a7:ef:fa:8e:d4:ce:3e:0c:4e:a3: cd:ed:0d:64:86:45:80:e4:24:2a:91:bd:41:db:d5:79:58:8c: 36:33:e1:1e:9c:fa:da:ee:e1:db:41:82:4e:98:9d:34:e3:3f: 71:25:fd:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjUwNzAzMDY0NzE2WhcNMjUwNzEwMDY0NzE2WjAYMRYwFAYD VQQDEw02ODY2Mjc3NC1mNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60zNdJn4BTQLjqxF1oedzcNylKNXA7TMYNkLpEDnCF29BzHq2N0qqJHM0W+6 g39N/Y6V+f8J+jD/a0db6zsfVMZxFNM7k5v+MQfzGmzNu5SNDBtaRcszfPF+diAy qczRCdMUINH2rfYqerpuBP22Lj6mkrQ0hpDbz8wsSR8hIzmRZg/FvAzOJGnTE1ol Y0dDptttp1LinvAwjqcwRJahLV74yH6tOFkgPuJEUkjz31gQxYE97VrVkU3uLLvM u+YLi3ZcDyS4Xd25odcKTV4rJcWtqSbvE7hWmUDOmSscQEC30fgi2cDOOm3lAkVj N0hexxIaaUamzyhBUUbaqAEC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEYprzu nXKq2mHJiWG4SLx9NbdNMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX1QRa3cxaWq8mrPDjl61zO9CYUbX2pdr7Zyhdo09vTzkO2Lsa2hpV fk/pYgLUyFFQe5Mllt+oFEdk+4HEROJFafMeQmyF6Eyjq+hWdvxNI4GbdrI/bdX/ rkqGD80GgkguJnntDgJj+bZK/FKATMTfa5Iyd6EsUCfITvJlQNvg69PMp+3uNRNP 6o15SHjdaVM14uDtm3tRz+t1T+9d74is7aDj1z7Lf898pFKKdvZ7mA0JFN2RfGdT UjVXamZyNRk8uURqezinOZ5VzsjTwqfv+o7Uzj4MTqPN7Q1khkWA5CQqkb1B29V5 WIw2M+EenPra7uHbQYJOmJ004z9xJf14 -----END CERTIFICATE-----Generated at Thu Jul 3 10:32:57 2025 by rpki-client