$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: ZHgpYK7mVjv59ryoqslqyM7ycxjsa0oeTbPjBlhKYng= Subject key identifier: F7:30:22:90:3F:01:D2:32:90:74:FE:41:88:9C:D4:4E:C6:F3:A1:A8 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 0636 Signing time: Wed 02 Jul 2025 23:00:09 +0000 Manifest this update: Wed 02 Jul 2025 23:00:09 +0000 Manifest next update: Wed 09 Jul 2025 23:00:09 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: /W+JledJpSOpwVyEdTD4igkQyQC+kJRXM4UEkAfQkBU=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: tc+HUzngZ7VVMdvUKEWM7ZZWawGnaExqZ4p3l2kRuv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Jul 2 23:00:09 2025 GMT Not After : Jul 9 23:00:09 2025 GMT Subject: CN=6865b9f9-dc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:5c:6f:65:93:2e:c0:fc:df:1c:de:79:c3: f7:ef:d3:75:3b:48:ae:e7:8e:03:5d:34:3d:6c:6b: 66:aa:28:4b:e8:af:c8:19:9b:61:08:c3:ab:c2:81: 56:a6:14:a9:ef:50:7e:e6:51:3b:29:d2:69:aa:6f: bc:b7:bc:a5:7d:7b:1a:06:d9:52:c3:1c:1a:b7:ef: 82:ab:8b:27:8d:bb:7f:e8:cb:ea:ad:a8:43:2b:aa: 08:1e:2b:e6:d7:bc:06:59:b5:7e:13:33:76:ab:df: 9c:d5:b6:40:40:d5:67:26:d4:72:fd:3a:ba:58:6f: 89:50:cb:20:23:18:42:82:3d:60:06:69:8b:7c:bb: 0c:e3:2a:14:f1:96:38:17:34:22:f8:2b:42:53:f9: 35:f4:58:4e:17:85:c8:92:18:0d:e4:da:48:ec:d3: 43:d8:e6:25:a1:57:f2:d4:a6:e1:fe:cf:03:be:f0: 83:9a:7a:1d:7e:73:65:8e:32:38:5e:4f:fd:2e:b6: df:8e:db:a9:da:62:01:22:93:03:04:18:42:67:13: 09:7b:a5:d7:5a:db:ed:87:ce:5e:a1:bf:d8:e4:77: 8e:38:c9:9b:db:8c:a7:24:89:69:fd:ad:0d:f4:a8: dd:c7:f5:7e:39:ee:e5:7e:26:27:b1:cf:92:26:11: d8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:30:22:90:3F:01:D2:32:90:74:FE:41:88:9C:D4:4E:C6:F3:A1:A8 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:a7:66:f5:2c:35:7c:76:18:98:62:bd:36:f1:50:e8:ff: 17:bb:11:03:91:9f:70:93:3a:4c:f0:a0:c3:a1:61:d1:fe:83: 63:39:fa:76:67:bb:8f:00:f1:8c:73:34:41:30:d6:30:62:05: f0:8e:e0:4f:fa:16:2c:cc:0a:2d:25:93:44:68:b5:5f:23:eb: c2:e1:fe:f6:85:ce:f2:44:4c:91:59:19:76:47:ad:a0:36:0d: e3:21:35:51:89:2f:64:84:d4:c2:ef:fc:20:e4:00:ed:3a:c2: e7:c0:a2:e8:98:aa:cb:41:06:61:19:d0:b4:35:da:fe:f5:7b: 24:8b:3e:40:72:6e:e1:ef:9b:e1:90:87:e2:12:b1:4a:eb:a7: 7e:59:68:e5:8a:b9:ca:2f:38:75:0a:0a:9a:5b:92:07:12:82: d1:b3:35:d0:46:b8:cb:81:43:45:60:41:91:51:6a:3d:d7:f2: 6a:1f:73:2e:e9:e9:30:f4:69:78:ba:fd:aa:27:2d:4c:09:51: 34:18:f5:56:c5:93:06:4f:fd:a7:30:55:15:a8:2a:83:0e:7e: fe:c8:25:43:d0:f2:a0:1d:44:cd:4c:61:42:b4:30:52:2f:3b: a2:f8:95:86:e9:62:8f:68:0f:b8:32:7c:e7:ca:8b:71:b8:de: fa:c2:e7:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjUwNzAyMjMwMDA5WhcNMjUwNzA5MjMwMDA5WjAYMRYwFAYD VQQDEw02ODY1YjlmOS1kYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRBcb2WTLsD83xzeecP379N1O0iu544DXTQ9bGtmqihL6K/IGZthCMOrwoFW phSp71B+5lE7KdJpqm+8t7ylfXsaBtlSwxwat++Cq4snjbt/6MvqrahDK6oIHivm 17wGWbV+EzN2q9+c1bZAQNVnJtRy/Tq6WG+JUMsgIxhCgj1gBmmLfLsM4yoU8ZY4 FzQi+CtCU/k19FhOF4XIkhgN5NpI7NND2OYloVfy1Kbh/s8DvvCDmnodfnNljjI4 Xk/9Lrbfjtup2mIBIpMDBBhCZxMJe6XXWtvth85eob/Y5HeOOMmb24ynJIlp/a0N 9Kjdx/V+Oe7lfiYnsc+SJhHYbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcwIpA/ AdIykHT+QYic1E7G86GoMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5sadm9Sw1fHYYmGK9NvFQ6P8XuxEDkZ9wkzpM8KDDoWHR/oNjOfp2 Z7uPAPGMczRBMNYwYgXwjuBP+hYszAotJZNEaLVfI+vC4f72hc7yREyRWRl2R62g Ng3jITVRiS9khNTC7/wg5ADtOsLnwKLomKrLQQZhGdC0Ndr+9Xskiz5Acm7h75vh kIfiErFK66d+WWjlirnKLzh1CgqaW5IHEoLRszXQRrjLgUNFYEGRUWo91/JqH3Mu 6ekw9Gl4uv2qJy1MCVE0GPVWxZMGT/2nMFUVqCqDDn7+yCVD0PKgHUTNTGFCtDBS Lzui+JWG6WKPaA+4MnznyotxuN76wudn -----END CERTIFICATE-----Generated at Thu Jul 3 08:08:01 2025 by rpki-client