$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: ofPBCYpfg8t7uwBtd4Bgs4ItYjwcEn80sMbg9qAYx5I= Subject key identifier: C8:B5:17:D6:AE:68:55:FE:BC:8C:61:C7:7F:71:20:5B:7B:07:AA:1E Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 066F Signing time: Mon 30 Jun 2025 22:49:16 +0000 Manifest this update: Mon 30 Jun 2025 22:49:15 +0000 Manifest next update: Mon 07 Jul 2025 22:49:15 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: aBsvbPnbe/swZeHGxVGw904OG4hzc7ZByQOp4OlPyew=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (hash: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Jun 30 22:49:15 2025 GMT Not After : Jul 7 22:49:15 2025 GMT Subject: CN=6863146c-8e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:88:bd:70:bb:eb:f0:f3:a2:85:66:71:1b: 63:19:23:c6:a7:38:9b:db:2a:ea:00:05:29:3c:0b: 2e:d9:26:52:a5:85:bf:9d:88:5f:c6:df:74:b6:07: b2:ee:77:3b:c7:50:7d:48:81:91:a2:87:b6:d7:f0: b9:79:15:30:76:f0:b8:c7:cc:af:97:05:ca:8e:5b: db:2e:aa:e6:6f:c9:92:22:4c:9b:ac:44:40:43:5d: 61:29:f6:40:0f:c1:ec:0b:45:53:6a:b9:00:5a:8d: ca:1a:fb:32:60:6f:64:dd:5f:5c:29:ce:4f:83:95: a2:a8:86:9d:27:6a:5f:70:1b:a7:88:55:b3:c4:cd: f1:8c:a0:25:c4:dd:7e:f1:08:19:a8:bf:6e:73:a5: 26:4e:c8:0f:9e:4e:ca:85:c5:2a:5a:42:34:a2:be: 6b:5e:fc:9f:39:2a:f8:f6:0c:34:8c:44:2a:0c:d4: ba:d3:11:82:88:f7:b4:b9:48:73:84:b8:a4:eb:70: bf:01:21:33:ef:c9:a3:e0:b5:87:65:d9:8c:80:e1: 82:b5:5c:b9:c7:10:15:8f:76:1d:a4:1d:8f:cc:eb: 43:c1:37:c5:66:d7:85:c1:75:32:8b:35:26:9e:28: 4b:78:f9:89:c4:16:17:c8:63:94:37:30:0a:e2:ed: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B5:17:D6:AE:68:55:FE:BC:8C:61:C7:7F:71:20:5B:7B:07:AA:1E X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ee:25:db:a0:79:01:e8:b9:53:69:5a:7f:2b:ef:4c:59:99: a8:b5:6d:3c:5b:d4:e7:3d:e3:32:f4:63:c4:73:f8:5a:48:87: ae:7b:7b:9f:d3:77:b0:da:b9:65:7e:64:2a:df:4e:6e:ee:df: 87:ec:f3:79:eb:36:68:d2:d2:e3:66:98:08:e9:c6:7a:5f:dc: 16:d0:bc:24:8d:48:39:22:6b:31:f9:52:74:ec:78:ea:cb:a0: 32:42:92:8a:4f:4d:02:11:87:30:b5:55:60:5c:a8:b5:94:ee: ca:1d:66:c0:27:12:78:49:e5:46:91:5a:6c:c5:71:c5:50:4f: 76:32:a4:b0:96:93:d3:0b:86:bf:59:d5:92:4e:d2:27:35:26: 1e:93:bb:58:73:00:bb:2b:a5:65:4e:d6:fa:40:0a:0e:2d:0a: ce:04:06:60:9b:69:4c:fe:bb:24:24:99:3a:aa:1d:9b:10:c2: 78:56:17:64:ad:f9:b0:7f:2a:74:36:a4:51:b7:1a:15:76:e9: b4:8f:6b:f5:62:e8:4f:d5:cb:03:3c:24:7b:21:10:61:8a:fc: 07:63:c8:88:16:8b:67:2d:ea:8f:7f:1d:96:9c:ab:98:12:31: 4c:69:a8:02:7d:8a:9c:ab:89:ef:0d:a9:96:d7:cd:6d:46:3b: 7c:e9:fc:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNjMwMjI0OTE1WhcNMjUwNzA3MjI0OTE1WjAYMRYwFAYD VQQDEw02ODYzMTQ2Yy04ZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY2IvXC76/DzooVmcRtjGSPGpzib2yrqAAUpPAsu2SZSpYW/nYhfxt90tgey 7nc7x1B9SIGRooe21/C5eRUwdvC4x8yvlwXKjlvbLqrmb8mSIkybrERAQ11hKfZA D8HsC0VTarkAWo3KGvsyYG9k3V9cKc5Pg5WiqIadJ2pfcBuniFWzxM3xjKAlxN1+ 8QgZqL9uc6UmTsgPnk7KhcUqWkI0or5rXvyfOSr49gw0jEQqDNS60xGCiPe0uUhz hLik63C/ASEz78mj4LWHZdmMgOGCtVy5xxAVj3YdpB2PzOtDwTfFZteFwXUyizUm nihLePmJxBYXyGOUNzAK4u17UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMi1F9au aFX+vIxhx39xIFt7B6oeMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx7iXboHkB6LlTaVp/K+9MWZmotW08W9TnPeMy9GPEc/haSIeue3uf 03ew2rllfmQq305u7t+H7PN56zZo0tLjZpgI6cZ6X9wW0LwkjUg5Imsx+VJ07Hjq y6AyQpKKT00CEYcwtVVgXKi1lO7KHWbAJxJ4SeVGkVpsxXHFUE92MqSwlpPTC4a/ WdWSTtInNSYek7tYcwC7K6VlTtb6QAoOLQrOBAZgm2lM/rskJJk6qh2bEMJ4Vhdk rfmwfyp0NqRRtxoVdum0j2v1YuhP1csDPCR7IRBhivwHY8iIFotnLeqPfx2WnKuY EjFMaagCfYqcq4nvDamW181tRjt86fwY -----END CERTIFICATE-----Generated at Wed Jul 2 05:07:54 2025 by rpki-client