$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: GFy3KXvZYsEjerxKX2r24W6nsMQMXSZJofauW/QX2YU= Subject key identifier: 88:E1:C3:73:BE:2C:8E:78:95:8C:80:BD:35:72:F9:7F:45:BD:06:6C Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 6D Signing time: Tue 13 May 2025 06:05:35 +0000 Manifest this update: Tue 13 May 2025 06:05:35 +0000 Manifest next update: Tue 20 May 2025 06:05:35 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: KfkPEeYxFPN2l0+Cb1dOVlZlK7LeCTDAf3a4HRvMFWU=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: KqwFgUGGWmZ6w/oc9lE/9i1V2X5VufgZVt2vhykEeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: May 13 06:05:35 2025 GMT Not After : May 20 06:05:35 2025 GMT Subject: CN=6822e12f-e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:a3:71:00:33:66:5e:92:6f:d0:95:23:99: a6:a0:f9:08:d8:4f:d9:35:6c:6a:72:c7:09:65:c3: 3f:fa:0a:17:a4:99:1b:f5:bc:14:d8:78:41:f8:82: a0:6d:05:4f:52:0a:be:81:20:75:6a:5d:53:db:db: ba:c3:4f:d1:22:cf:f6:6b:71:71:bd:fb:b8:d5:4b: f3:84:af:d9:87:28:e7:da:63:6b:c5:6f:54:1d:d8: 44:c3:0d:45:2e:7c:78:65:13:60:f8:37:4b:58:bd: 90:d9:52:cb:bc:31:b7:22:32:ac:59:05:d5:57:4e: 44:ac:0f:12:37:bf:5f:e7:5e:fd:c9:7e:75:72:53: b6:50:18:a4:8d:05:ce:15:ef:50:bf:c3:a4:8f:36: 8c:75:f2:7e:03:53:14:b0:b1:bf:d5:14:14:14:7c: 8f:69:73:aa:c8:45:9c:25:a4:aa:db:b0:e9:7a:dd: dc:c6:bd:d5:ba:14:ba:2f:21:29:ae:c2:0d:17:b1: 14:41:e1:00:a7:c9:05:38:68:e4:f5:17:65:45:33: 95:db:6c:85:f2:f3:e7:be:15:49:93:a2:0b:0b:39: f1:90:f4:b1:5e:c3:d6:0f:b0:3b:6e:74:0b:cc:df: 92:94:67:09:ca:22:14:68:54:00:6f:cc:21:d5:35: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:C3:73:BE:2C:8E:78:95:8C:80:BD:35:72:F9:7F:45:BD:06:6C X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:82:42:e1:1c:aa:7d:8d:54:bb:5a:ec:34:74:7c:05:67:d6: 93:6d:db:05:15:f0:be:1a:fc:18:f4:a2:5d:cb:65:cf:08:70: b9:2c:04:84:02:1c:f4:2b:d4:90:1c:30:42:14:35:1f:e8:8c: 47:63:b9:1c:21:3a:0e:b8:78:2e:54:87:26:16:fc:c1:c6:c5: 1b:3f:8b:cf:4f:54:7a:66:af:18:a9:98:89:10:1d:86:8f:0a: f2:76:98:43:d9:a9:f6:d5:6e:fb:fa:8d:bb:43:2e:c7:3d:b2: 43:c9:39:a2:2b:45:17:ed:1b:a8:4b:45:15:ae:af:95:1f:46: 85:94:af:ca:a7:87:7b:58:a2:c2:6d:98:1e:0d:8a:48:85:cc: ab:c0:f3:6a:eb:3a:51:80:62:6e:d7:aa:01:67:81:77:e6:b8: 12:7d:65:3f:d1:dd:3a:99:62:af:12:7e:3d:8d:bd:26:60:81: c5:54:82:3a:6f:c6:11:fe:d5:85:93:b5:7f:5e:3f:64:b3:2a: 0c:b1:da:a6:36:86:c5:54:0b:03:d1:65:73:72:d9:b3:96:2c: 16:42:91:e4:a0:91:5b:84:54:90:d5:e4:aa:f3:ea:ec:3d:88: f9:cf:bb:2a:a8:cb:1e:ec:ec:32:1d:c3:de:86:56:91:cf:47: 72:b4:08:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTMxOTExMC8GA1UEBRMoMUREMzNBNjhCQzBCNUM5MzEwRkZGNTJBRDczOTQxMjBE MTAyQTYyNzAeFw0yNTA1MTMwNjA1MzVaFw0yNTA1MjAwNjA1MzVaMBgxFjAUBgNV BAMTDTY4MjJlMTJmLWUzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1R6NxADNmXpJv0JUjmaag+QjYT9k1bGpyxwllwz/6ChekmRv1vBTYeEH4gqBt BU9SCr6BIHVqXVPb27rDT9Eiz/ZrcXG9+7jVS/OEr9mHKOfaY2vFb1Qd2ETDDUUu fHhlE2D4N0tYvZDZUsu8MbciMqxZBdVXTkSsDxI3v1/nXv3JfnVyU7ZQGKSNBc4V 71C/w6SPNox18n4DUxSwsb/VFBQUfI9pc6rIRZwlpKrbsOl63dzGvdW6FLovISmu wg0XsRRB4QCnyQU4aOT1F2VFM5XbbIXy8+e+FUmTogsLOfGQ9LFew9YPsDtudAvM 35KUZwnKIhRoVABvzCHVNa1fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiOHDc74s jniVjIC9NXL5f0W9BmwwHwYDVR0jBBgwFoAUHdM6aLwLXJMQ//Uq1zlBINECpicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1MzE5L0Y5NEQ0MUM4OEMy QzExRUY4MTIyRUMxMUM0RjlBRTAyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3Bp Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSGRNNmFMd0xYSk1RX19VcTF6bEJJTkVDcGljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 MzE5L0Y5NEQ0MUM4OEMyQzExRUY4MTIyRUMxMUM0RjlBRTAyL0hkTTZhTHdMWEpN UV9fVXExemxCSU5FQ3BpYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuCQuEcqn2NVLta7DR0fAVn1pNt2wUV8L4a/Bj0ol3LZc8IcLksBIQC HPQr1JAcMEIUNR/ojEdjuRwhOg64eC5UhyYW/MHGxRs/i89PVHpmrxipmIkQHYaP CvJ2mEPZqfbVbvv6jbtDLsc9skPJOaIrRRftG6hLRRWur5UfRoWUr8qnh3tYosJt mB4NikiFzKvA82rrOlGAYm7XqgFngXfmuBJ9ZT/R3TqZYq8Sfj2NvSZggcVUgjpv xhH+1YWTtX9eP2SzKgyx2qY2hsVUCwPRZXNy2bOWLBZCkeSgkVuEVJDV5Krz6uw9 iPnPuyqoyx7s7DIdw96GVpHPR3K0CGU= -----END CERTIFICATE-----Generated at Wed May 14 13:02:31 2025 by rpki-client