$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: Q7Bs2PonmT4v81J71VyXQVIv0OyKUVWpIxvTYBOffg4= Subject key identifier: C4:06:BF:72:BF:63:0F:7F:7D:7D:00:9E:AB:44:17:34:1E:B3:22:B1 Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: D5 Signing time: Tue 01 Jul 2025 06:13:08 +0000 Manifest this update: Tue 01 Jul 2025 06:13:07 +0000 Manifest next update: Tue 08 Jul 2025 06:13:07 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: Tv+hp2MHJj8s6XaVvZyPEKIqT2DNtrUag5t0e4Njhnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: Jul 1 06:13:07 2025 GMT Not After : Jul 8 06:13:07 2025 GMT Subject: CN=68637c73-2968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b4:ad:70:54:2c:74:96:f9:5e:d3:43:f5:91: 4e:32:be:90:3c:b7:f1:f2:47:e2:23:60:64:2d:dd: 33:a4:ee:2c:e7:22:81:b4:fc:7c:ad:d8:a4:38:1d: 6d:c1:c6:71:15:61:4e:ec:ef:3b:dd:c1:4e:49:43: 70:a2:8f:c6:ad:ce:b0:a3:a4:78:8a:07:65:fb:0b: cc:13:31:a1:1e:dd:c6:84:b5:aa:f5:8e:5c:ea:4f: e9:5e:ba:21:ef:00:57:c8:d8:48:5a:28:7e:24:95: 5d:4c:3b:12:25:c3:4c:b7:a0:da:a3:cb:ec:85:b2: a3:3c:8c:e0:1a:59:0b:91:fb:bc:5e:05:8b:44:25: e0:03:a9:4e:fd:c1:93:ac:73:34:64:ff:77:7a:34: 7a:ba:92:91:1e:e0:36:38:75:23:9e:15:71:19:aa: 8b:f3:a7:cf:df:f6:f8:b3:9f:ea:04:33:d0:1e:f8: 2d:1f:44:f7:5e:9c:f1:a0:97:07:e8:e3:1b:62:a7: 41:c7:50:68:43:d1:1b:55:d2:41:1b:cd:d9:89:e9: 57:ae:b8:9a:49:51:e0:ad:e6:a8:46:0b:31:61:57: 58:45:71:3f:98:a2:5b:3e:06:d8:7f:80:cb:6a:fe: ca:c7:db:45:4f:2d:48:6d:b2:01:24:9e:6d:38:e8: 42:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:BF:72:BF:63:0F:7F:7D:7D:00:9E:AB:44:17:34:1E:B3:22:B1 X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e4:d6:da:9f:8d:a6:84:14:16:e0:1d:53:dd:19:77:12:dd: 51:b6:3a:07:9b:35:69:e0:c4:1d:49:fd:d6:98:b5:41:0e:fb: 70:89:48:5e:04:15:21:0a:e3:42:56:2e:0a:97:6d:3a:83:f2: 6c:cd:3a:82:a7:7e:05:52:b1:16:8e:08:5d:49:85:f7:89:54: 98:dc:0c:ec:9a:63:13:ca:98:89:79:95:fd:a8:5a:c4:34:20: a1:1f:ca:fc:9e:20:8c:c2:3c:f0:b3:6e:74:b6:e1:38:5b:32: 20:c6:9e:33:83:34:1e:51:8b:66:a5:8d:a3:f7:77:10:ee:39: ae:58:a6:c9:99:51:3b:c4:74:d8:d3:20:1e:5f:2f:42:55:1c: 05:f9:99:2a:01:66:53:bf:8e:e6:2b:19:20:56:39:30:5a:4f: 8d:4e:6c:fe:d3:26:ef:f4:55:be:bd:48:11:75:15:cb:2e:a3: ab:a4:c1:4e:b9:57:33:1d:fa:e2:b7:a6:36:da:44:03:87:d4: 73:20:79:9e:50:12:6f:f9:49:34:f5:b3:92:79:cd:8d:34:9e: 66:76:04:98:18:1c:40:8a:b2:6c:e9:a5:3d:76:c8:8a:f9:f3: d4:26:91:7d:ec:4c:43:de:c0:64:b6:4f:83:e9:4b:eb:87:9f: 3b:83:25:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDg0MzI0N0MwQUMxODFGQzM2NjY2QTQ0MzcyMUFGMjFE OURBNjUwREEwHhcNMjUwNzAxMDYxMzA3WhcNMjUwNzA4MDYxMzA3WjAYMRYwFAYD VQQDEw02ODYzN2M3My0yOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rStcFQsdJb5XtND9ZFOMr6QPLfx8kfiI2BkLd0zpO4s5yKBtPx8rdikOB1t wcZxFWFO7O873cFOSUNwoo/Grc6wo6R4igdl+wvMEzGhHt3GhLWq9Y5c6k/pXroh 7wBXyNhIWih+JJVdTDsSJcNMt6Dao8vshbKjPIzgGlkLkfu8XgWLRCXgA6lO/cGT rHM0ZP93ejR6upKRHuA2OHUjnhVxGaqL86fP3/b4s5/qBDPQHvgtH0T3XpzxoJcH 6OMbYqdBx1BoQ9EbVdJBG83ZielXrriaSVHgreaoRgsxYVdYRXE/mKJbPgbYf4DL av7Kx9tFTy1IbbIBJJ5tOOhCdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQGv3K/ Yw9/fX0AnqtEFzQesyKxMB8GA1UdIwQYMBaAFIQyR8CsGB/DZmakQ3Ia8h2dplDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9CQzUyMUE1NDE5 MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4Tm1acVJEY2hyeUhaMm1V Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9CQzUyMUE1NDE5MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4 Tm1acVJEY2hyeUhaMm1VTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw5Nban42mhBQW4B1T3Rl3Et1RtjoHmzVp4MQdSf3WmLVBDvtwiUhe BBUhCuNCVi4Kl206g/JszTqCp34FUrEWjghdSYX3iVSY3AzsmmMTypiJeZX9qFrE NCChH8r8niCMwjzws250tuE4WzIgxp4zgzQeUYtmpY2j93cQ7jmuWKbJmVE7xHTY 0yAeXy9CVRwF+ZkqAWZTv47mKxkgVjkwWk+NTmz+0ybv9FW+vUgRdRXLLqOrpMFO uVczHfrit6Y22kQDh9RzIHmeUBJv+Uk09bOSec2NNJ5mdgSYGBxAirJs6aU9dsiK +fPUJpF97ExD3sBktk+D6Uvrh587gyUP -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:00 2025 by rpki-client