$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: 1hoUtkcf0DzGTowmMKQjKi8NkCbDCSlMMbac9pmE+rQ= Subject key identifier: 73:57:FB:A8:04:FE:34:24:ED:B5:6A:EE:8A:62:0F:43:A9:97:E5:17 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 061F Signing time: Wed 02 Jul 2025 23:05:35 +0000 Manifest this update: Wed 02 Jul 2025 23:05:34 +0000 Manifest next update: Wed 09 Jul 2025 23:05:34 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: bcyH6QDyfHXlmPBrk2H/HlNWlP5O0aatGmKbyEeWkGg=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Jul 2 23:05:34 2025 GMT Not After : Jul 9 23:05:34 2025 GMT Subject: CN=6865bb3e-1c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:c5:56:42:e1:be:d0:cd:65:2c:c2:73:7a: 7e:34:a2:ba:2b:b5:11:f3:f1:f1:88:e2:d8:40:f8: 93:e6:db:49:ca:8b:6d:a1:2b:7a:ae:ab:4b:b9:1e: 66:58:d7:54:79:34:87:17:19:4b:21:97:01:ef:45: 0a:76:8d:37:69:12:a3:0b:be:cf:52:8f:cc:20:6b: d1:af:db:af:37:20:4a:c8:42:cb:05:f9:f0:f8:0b: 24:51:dc:77:1c:24:20:c6:e6:c2:39:cc:1d:28:78: 56:59:1d:14:8c:5a:a3:68:d1:f1:79:86:a6:3f:d2: 5a:2a:24:08:b3:90:80:3a:55:48:fc:50:34:65:c6: 04:91:bf:02:da:82:10:08:48:57:5c:1e:79:52:06: 85:f4:c1:49:db:54:e7:25:38:fd:32:cb:c1:84:8f: 4d:12:4e:4f:87:e6:8d:f3:e7:aa:87:1d:53:ab:21: 23:76:b5:a2:f4:de:b8:9b:9b:17:c3:08:ad:d5:cf: 38:6c:f8:26:f4:b7:12:73:cd:ff:5c:d0:81:d3:46: 91:e1:1f:e8:d1:9c:30:0a:3e:6c:f2:da:b2:e0:03: c0:12:af:ab:46:ad:eb:9e:e3:c5:07:3f:ee:9c:a4: cd:5f:90:4a:af:45:e7:54:4b:07:1d:f9:bd:0d:87: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:57:FB:A8:04:FE:34:24:ED:B5:6A:EE:8A:62:0F:43:A9:97:E5:17 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fd:b7:f7:35:11:94:15:6f:a8:07:b3:72:12:3a:14:c7:bd: 30:27:e5:54:da:df:28:b6:24:e0:62:4a:25:0e:a0:c2:57:43: cb:3e:6c:c4:7a:af:bf:0a:8d:bc:16:87:1e:09:5c:30:bd:fc: 53:9f:28:63:5c:b1:ba:7a:eb:38:7d:02:74:6a:58:ff:42:a3: 17:44:14:c5:f8:8f:cb:38:03:0b:7b:c4:d7:ed:b8:12:c4:09: 7d:88:ea:d1:ba:6f:1d:82:42:00:51:55:76:c4:de:f0:71:c2: 0b:cf:2b:92:ec:e4:86:01:50:e0:d8:8b:7d:5a:61:96:87:b3: 52:bf:ad:7f:13:3f:c8:2d:ad:18:d1:60:b2:df:cb:4d:1a:82: 68:d3:32:67:39:85:47:f2:52:cd:bc:c7:66:97:00:24:e3:2b: b3:7a:45:bb:b3:94:2b:be:d3:88:99:2c:1f:f8:69:e8:8a:a1: 07:65:17:ad:47:dc:b0:cb:a3:47:eb:47:52:34:a0:94:0f:71: f8:af:e9:19:31:8b:18:5a:69:27:c9:d8:a9:c2:12:d6:08:9e: a2:0c:25:ae:ea:77:d0:e1:91:c1:31:4f:b6:69:d4:af:55:e2: 05:f2:c3:27:a6:06:8e:93:1e:6c:78:22:87:57:20:74:0e:80: b6:6c:9e:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwNzAyMjMwNTM0WhcNMjUwNzA5MjMwNTM0WjAYMRYwFAYD VQQDEw02ODY1YmIzZS0xYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20TFVkLhvtDNZSzCc3p+NKK6K7UR8/HxiOLYQPiT5ttJyottoSt6rqtLuR5m WNdUeTSHFxlLIZcB70UKdo03aRKjC77PUo/MIGvRr9uvNyBKyELLBfnw+AskUdx3 HCQgxubCOcwdKHhWWR0UjFqjaNHxeYamP9JaKiQIs5CAOlVI/FA0ZcYEkb8C2oIQ CEhXXB55UgaF9MFJ21TnJTj9MsvBhI9NEk5Ph+aN8+eqhx1TqyEjdrWi9N64m5sX wwit1c84bPgm9LcSc83/XNCB00aR4R/o0ZwwCj5s8tqy4APAEq+rRq3rnuPFBz/u nKTNX5BKr0XnVEsHHfm9DYfiLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNX+6gE /jQk7bVq7opiD0Opl+UXMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/bf3NRGUFW+oB7NyEjoUx70wJ+VU2t8otiTgYkolDqDCV0PLPmzE eq+/Co28FoceCVwwvfxTnyhjXLG6eus4fQJ0alj/QqMXRBTF+I/LOAMLe8TX7bgS xAl9iOrRum8dgkIAUVV2xN7wccILzyuS7OSGAVDg2It9WmGWh7NSv61/Ez/ILa0Y 0WCy38tNGoJo0zJnOYVH8lLNvMdmlwAk4yuzekW7s5QrvtOImSwf+GnoiqEHZRet R9ywy6NH60dSNKCUD3H4r+kZMYsYWmknydipwhLWCJ6iDCWu6nfQ4ZHBMU+2adSv VeIF8sMnpgaOkx5seCKHVyB0DoC2bJ5u -----END CERTIFICATE-----Generated at Fri Jul 4 22:00:31 2025 by rpki-client