$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: VRKHdD9aZO9qbOMhL4yCK3+5Lh9CKwZZHzD20U7XOJI= Subject key identifier: E8:76:91:A6:41:51:19:5C:F5:98:DC:FA:68:0E:CE:F9:42:6B:65:64 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 061B Signing time: Mon 12 May 2025 22:33:44 +0000 Manifest this update: Mon 12 May 2025 22:33:44 +0000 Manifest next update: Mon 19 May 2025 22:33:44 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: cSiGjIsMOMiJdDyA3UcA/AFaGddXkfwE+FRuCSsxQrA=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: qG6STwlDbN6NW6ARno6ilKFIOOqEukZRWb32de5Epio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: May 12 22:33:44 2025 GMT Not After : May 19 22:33:44 2025 GMT Subject: CN=68227748-51c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:c9:66:2a:27:69:c0:1a:96:ff:97:7d:41: 0c:de:e7:96:b5:44:cf:5e:44:74:d5:f9:f6:33:4d: df:b6:26:b2:88:60:4a:75:9d:0e:77:41:f3:32:a3: b7:a8:df:61:e1:0e:64:92:9c:b7:44:fc:87:a8:88: e5:19:d5:62:06:ae:06:0a:ca:49:69:18:2f:54:8f: 2f:c0:bf:88:cb:52:ac:5a:d4:64:d9:68:90:7d:a3: ec:2b:8a:13:3c:6e:94:9f:25:2b:28:42:09:67:d9: 72:f2:25:61:be:83:4c:61:55:92:d0:af:91:b8:12: 58:21:3c:5e:8e:4b:5b:93:0a:a9:38:b5:c7:23:a1: e3:4b:a8:4a:9e:39:a9:a2:8c:b4:70:41:2e:14:e7: d7:91:b1:62:55:0d:98:44:68:37:8f:b5:56:5a:49: 5a:2a:70:3e:a1:3f:a3:7a:6d:3e:14:07:05:98:e6: 2f:b5:25:68:1c:7d:60:9f:1f:7d:95:2b:8c:7e:f8: 60:32:f2:05:bd:05:46:fe:3b:5d:94:f4:4f:2b:46: d6:8d:8e:2c:07:1c:c2:49:0e:1f:9f:b5:ab:23:ef: b4:24:f3:7d:94:d0:4e:1e:63:cb:a1:50:90:c5:a6: 4e:9d:5e:9e:5f:40:eb:dd:fb:da:a5:5c:72:67:9c: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:76:91:A6:41:51:19:5C:F5:98:DC:FA:68:0E:CE:F9:42:6B:65:64 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7d:ae:60:6a:81:2c:88:52:68:a9:16:0d:9d:79:ef:c3:aa: da:b8:d1:55:0d:59:02:95:b6:ae:3a:cd:6b:5a:1e:df:20:e5: de:23:9a:1f:30:9f:90:32:f6:76:44:73:ec:c2:d2:40:89:a7: 4b:7a:d2:bf:ec:fe:8f:3f:fb:f2:1e:af:d1:7c:f6:b3:a2:eb: 5f:df:f7:6a:6a:36:ac:08:03:b9:ca:ec:d5:83:d9:9d:b5:cd: 99:c3:27:60:a9:b3:cf:c0:f1:ec:dd:7f:c4:9b:0c:bd:bf:a2: 4e:10:ec:8e:4d:01:48:ec:b6:11:aa:3d:e0:16:f2:d2:37:42: f3:94:ba:41:5c:bf:1c:8d:9c:d8:61:86:f7:76:23:e5:25:0a: dc:2b:fc:81:d9:9b:ba:b5:ae:7f:91:27:94:29:c2:c6:8b:9d: 85:8a:9e:97:15:7e:53:14:a9:53:ad:2d:31:5c:f7:d6:d4:a4: 07:ed:56:89:af:da:3b:da:86:a3:8b:c3:ac:cd:ea:8f:a9:bc: 1c:44:cb:42:86:df:f2:d6:d0:d6:9e:23:b7:98:5d:fc:8f:44: 3c:1e:0a:85:48:41:84:26:4b:9f:09:44:c6:55:73:20:17:e4: 75:5d:d4:42:b7:dd:34:64:21:05:0c:b2:4d:aa:65:2d:5c:ad: bf:3f:1c:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjUwNTEyMjIzMzQ0WhcNMjUwNTE5MjIzMzQ0WjAYMRYwFAYD VQQDEw02ODIyNzc0OC01MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzLJZionacAalv+XfUEM3ueWtUTPXkR01fn2M03ftiayiGBKdZ0Od0HzMqO3 qN9h4Q5kkpy3RPyHqIjlGdViBq4GCspJaRgvVI8vwL+Iy1KsWtRk2WiQfaPsK4oT PG6UnyUrKEIJZ9ly8iVhvoNMYVWS0K+RuBJYITxejktbkwqpOLXHI6HjS6hKnjmp ooy0cEEuFOfXkbFiVQ2YRGg3j7VWWklaKnA+oT+jem0+FAcFmOYvtSVoHH1gnx99 lSuMfvhgMvIFvQVG/jtdlPRPK0bWjY4sBxzCSQ4fn7WrI++0JPN9lNBOHmPLoVCQ xaZOnV6eX0Dr3fvapVxyZ5wgGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh2kaZB URlc9Zjc+mgOzvlCa2VkMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJfa5gaoEsiFJoqRYNnXnvw6rauNFVDVkClbauOs1rWh7fIOXeI5of MJ+QMvZ2RHPswtJAiadLetK/7P6PP/vyHq/RfPazoutf3/dqajasCAO5yuzVg9md tc2ZwydgqbPPwPHs3X/Emwy9v6JOEOyOTQFI7LYRqj3gFvLSN0LzlLpBXL8cjZzY YYb3diPlJQrcK/yB2Zu6ta5/kSeUKcLGi52Fip6XFX5TFKlTrS0xXPfW1KQH7VaJ r9o72oaji8OszeqPqbwcRMtCht/y1tDWniO3mF38j0Q8HgqFSEGEJkufCUTGVXMg F+R1XdRCt900ZCEFDLJNqmUtXK2/PxxJ -----END CERTIFICATE-----Generated at Wed May 14 19:36:48 2025 by rpki-client