$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft File: HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json) Hash identifier: qddCSWBXtHtyDRiaTXJOtWxRH6Cx5Qr1JAClwPDL5mc= Subject key identifier: CF:4B:C8:63:31:0A:E3:65:88:26:78:1D:47:20:F5:7A:25:FE:D1:D8 Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft Manifest number: 052A Signing time: Mon 30 Jun 2025 23:59:16 +0000 Manifest this update: Mon 30 Jun 2025 23:59:15 +0000 Manifest next update: Mon 07 Jul 2025 23:59:15 +0000 Files and hashes: 1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: kGYylQPbT8Iok4ImYyVc5XPgW+hpNqL3CSlKzTOIk+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D246A, serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Validity Not Before: Jun 30 23:59:15 2025 GMT Not After : Jul 7 23:59:15 2025 GMT Subject: CN=686324d4-43c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b9:1a:c6:c5:7f:25:05:c6:48:0c:8d:b3:7e: 04:ce:47:74:ee:8b:41:13:a4:f1:7e:16:9a:11:96: 97:a6:8b:ad:dd:64:d0:e2:99:2d:08:18:52:da:9e: 92:b3:e6:2c:e6:88:8d:3d:de:81:2c:f6:74:11:3e: 03:09:43:94:9c:dc:bc:e2:7c:fb:29:dc:53:aa:b3: 8e:ed:c3:fd:34:b4:c3:fb:8b:33:ce:c5:b3:b5:a0: 8a:2b:02:33:82:b4:e6:00:de:2d:e2:8d:46:eb:73: ef:9b:45:cd:45:0b:85:8f:28:0a:8c:2b:ac:53:75: ee:7a:de:a4:8e:fc:38:15:ac:83:f5:6d:f5:6a:27: 8d:5a:e1:b4:49:6c:36:e6:0b:62:62:c2:bc:80:45: 88:eb:d0:cf:ac:c6:90:4f:40:e8:de:c9:fa:ed:a4: e3:4e:66:2e:53:32:28:be:12:1f:f5:e1:76:e0:cc: 97:3b:65:36:cc:22:ab:9c:c0:e5:6a:1e:14:41:f8: 99:2f:cb:ce:4a:54:4f:0b:7c:8c:1b:14:4b:30:22: b3:2e:c9:e5:8b:1d:f3:76:28:0d:73:ba:30:6b:b2: cd:bb:ac:e8:5a:17:42:59:d1:d2:49:ab:29:3e:45: 29:f2:72:0a:7b:ca:14:78:87:c8:b2:db:1e:26:f8: 3e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:C8:63:31:0A:E3:65:88:26:78:1D:47:20:F5:7A:25:FE:D1:D8 X509v3 Authority Key Identifier: keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7a:62:9e:7a:12:3d:5a:77:b7:20:06:89:62:16:1c:4c:34: 9a:3b:8d:8a:68:65:d9:e3:6d:c6:71:83:07:79:57:54:bb:d9: e1:43:72:df:55:df:70:19:df:c3:43:4d:11:65:96:54:f8:ae: 7b:37:fd:40:dc:ed:1c:5b:e0:19:1d:19:85:3b:98:60:95:cf: d0:56:ea:b9:44:b7:cb:81:ba:4c:cd:3e:ce:47:94:bf:8a:ad: 68:81:35:b6:1d:5f:15:41:6b:b8:27:f5:5b:63:c8:35:bf:d7: ef:86:7b:8d:85:2c:47:b3:e2:36:3c:8e:3a:27:f2:39:60:e4: 99:e8:18:87:f8:b2:58:bb:32:ec:40:05:c8:34:39:cd:6a:f8: ac:0d:31:86:0e:fa:46:1b:31:8c:87:78:30:ea:64:12:86:cf: 56:cf:78:1c:b9:86:cc:73:48:10:2f:b9:01:55:18:4e:b8:2b: 26:3d:71:fa:ff:00:ae:2c:db:ff:85:fb:70:3a:c2:b6:b6:fb: 38:7e:5c:1c:19:6f:56:8c:0d:43:7c:c8:39:00:14:c5:74:9e: ef:c5:52:4c:21:6a:fa:36:e3:94:8f:d6:ff:24:39:e0:16:9c: 38:d0:74:bb:46:1b:50:9b:27:1f:ab:a4:b7:48:6b:fb:56:e4: 11:9e:15:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4 MzZBNDBGRjgwHhcNMjUwNjMwMjM1OTE1WhcNMjUwNzA3MjM1OTE1WjAYMRYwFAYD VQQDEw02ODYzMjRkNC00M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7kaxsV/JQXGSAyNs34Ezkd07otBE6TxfhaaEZaXpout3WTQ4pktCBhS2p6S s+Ys5oiNPd6BLPZ0ET4DCUOUnNy84nz7KdxTqrOO7cP9NLTD+4szzsWztaCKKwIz grTmAN4t4o1G63Pvm0XNRQuFjygKjCusU3Xuet6kjvw4FayD9W31aieNWuG0SWw2 5gtiYsK8gEWI69DPrMaQT0Do3sn67aTjTmYuUzIovhIf9eF24MyXO2U2zCKrnMDl ah4UQfiZL8vOSlRPC3yMGxRLMCKzLsnlix3zdigNc7owa7LNu6zoWhdCWdHSSasp PkUp8nIKe8oUeIfIstseJvg+WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9LyGMx CuNliCZ4HUcg9Xol/tHYMB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1 NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQ2QS82OUMyRDM1MDA1NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0y LWlobk5mamdhUm1EYWtEX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVemKeehI9Wne3IAaJYhYcTDSaO42KaGXZ423GcYMHeVdUu9nhQ3Lf Vd9wGd/DQ00RZZZU+K57N/1A3O0cW+AZHRmFO5hglc/QVuq5RLfLgbpMzT7OR5S/ iq1ogTW2HV8VQWu4J/VbY8g1v9fvhnuNhSxHs+I2PI46J/I5YOSZ6BiH+LJYuzLs QAXINDnNavisDTGGDvpGGzGMh3gw6mQShs9Wz3gcuYbMc0gQL7kBVRhOuCsmPXH6 /wCuLNv/hftwOsK2tvs4flwcGW9WjA1DfMg5ABTFdJ7vxVJMIWr6NuOUj9b/JDng Fpw40HS7RhtQmycfq6S3SGv7VuQRnhV2 -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:55 2025 by rpki-client