$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: LE0P1dWh7kxeXjyPFVJajn3YJcdvY0I91/9sPg/Yjjs= Subject key identifier: BE:A2:84:5D:9C:67:11:B0:26:1B:72:81:2D:40:DB:F1:35:4C:B1:A3 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 014B Signing time: Thu 03 Jul 2025 04:20:39 +0000 Manifest this update: Thu 03 Jul 2025 04:20:38 +0000 Manifest next update: Thu 10 Jul 2025 04:20:38 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: Drna/d/UYJdQg+/MxeoQH0iH2Z1MmH7bfUUqre7H1JE=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Jul 3 04:20:38 2025 GMT Not After : Jul 10 04:20:38 2025 GMT Subject: CN=68660517-55d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:73:cf:fd:07:95:e6:16:50:98:33:24:77: f8:11:c8:89:1e:67:4f:87:cf:96:dc:67:3a:4e:44: 4b:af:f7:e4:74:23:d9:85:e6:1f:f8:d6:64:9d:04: e7:cb:3e:4a:56:ff:18:0a:46:d5:02:dd:65:e8:8b: 7a:9b:c2:86:54:af:e6:b4:c6:16:cf:37:fc:96:da: fb:c8:ac:0b:c6:ce:9a:28:e8:4b:4c:fa:e0:04:d1: 4e:03:5b:d3:47:9b:54:ca:47:ac:76:7d:0a:04:16: c7:44:a4:7b:56:8d:2f:be:00:be:ff:c4:1f:04:cc: 2b:26:3a:57:a0:f1:94:55:c8:ef:74:05:73:c5:a6: c0:b5:4a:ea:3a:d4:ac:e1:b3:d2:c3:64:33:2c:6b: ff:9a:09:ad:41:02:46:35:0e:90:68:04:27:a6:9c: 87:56:14:43:c6:c8:95:08:a0:2c:94:75:83:9c:95: 99:97:f6:2e:be:2d:ba:1b:1f:d6:0c:45:26:19:e0: 4b:db:05:77:ae:27:49:18:ca:9b:ef:95:16:fd:37: 44:5e:84:cb:f5:5a:b9:52:fa:0b:69:c7:c0:bd:b8: 27:0d:aa:fa:ed:14:8d:99:80:eb:b5:29:54:1e:82: d7:35:81:81:a8:ba:dd:e5:27:de:b3:a9:3b:0d:54: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A2:84:5D:9C:67:11:B0:26:1B:72:81:2D:40:DB:F1:35:4C:B1:A3 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:aa:84:cb:95:50:08:7c:f3:c0:f6:9e:df:46:30:55:51:91: 6c:0a:a2:ce:75:0d:86:7c:b2:81:1a:83:60:b4:13:da:c8:8f: f5:77:85:13:58:70:80:5e:8e:c2:e4:48:97:06:ae:17:15:71: 44:38:36:b0:d5:96:f6:91:65:c9:93:57:2d:ff:c9:e2:f3:74: 95:68:61:aa:75:1e:f4:87:8c:55:61:49:3d:d7:de:72:4e:f2: e2:91:97:66:e8:97:9b:f5:2e:86:59:49:50:65:74:9f:75:51: db:4a:18:71:21:79:34:b0:66:40:4f:c6:86:d9:88:c7:04:27: d7:8c:5f:f5:cc:e4:48:47:ea:6d:2f:da:21:31:29:dd:be:2d: 99:30:07:f6:ce:9d:56:b0:52:14:0b:ed:ac:a5:68:1f:e8:18: 7e:6c:01:5c:02:16:d3:5b:61:3f:44:e9:4d:5f:31:ee:ce:55: 31:82:b1:b2:43:2e:7f:83:89:28:a4:aa:4b:ad:96:24:0b:6d: f2:58:12:1b:bd:59:65:ca:87:f9:24:56:e1:eb:f0:65:dc:c3: a9:d2:27:4e:36:69:42:67:43:74:46:eb:81:d2:70:37:cd:45: 32:d0:b3:7d:06:c7:04:ef:39:a5:d7:79:94:53:06:81:52:be: 61:f0:12:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwNzAzMDQyMDM4WhcNMjUwNzEwMDQyMDM4WjAYMRYwFAYD VQQDEw02ODY2MDUxNy01NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tRzz/0HleYWUJgzJHf4EciJHmdPh8+W3Gc6TkRLr/fkdCPZheYf+NZknQTn yz5KVv8YCkbVAt1l6It6m8KGVK/mtMYWzzf8ltr7yKwLxs6aKOhLTPrgBNFOA1vT R5tUykesdn0KBBbHRKR7Vo0vvgC+/8QfBMwrJjpXoPGUVcjvdAVzxabAtUrqOtSs 4bPSw2QzLGv/mgmtQQJGNQ6QaAQnppyHVhRDxsiVCKAslHWDnJWZl/Yuvi26Gx/W DEUmGeBL2wV3ridJGMqb75UW/TdEXoTL9Vq5UvoLacfAvbgnDar67RSNmYDrtSlU HoLXNYGBqLrd5Sfes6k7DVTgtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6ihF2c ZxGwJhtygS1A2/E1TLGjMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAqoTLlVAIfPPA9p7fRjBVUZFsCqLOdQ2GfLKBGoNgtBPayI/1d4UT WHCAXo7C5EiXBq4XFXFEODaw1Zb2kWXJk1ct/8ni83SVaGGqdR70h4xVYUk9195y TvLikZdm6Jeb9S6GWUlQZXSfdVHbShhxIXk0sGZAT8aG2YjHBCfXjF/1zORIR+pt L9ohMSndvi2ZMAf2zp1WsFIUC+2spWgf6Bh+bAFcAhbTW2E/ROlNXzHuzlUxgrGy Qy5/g4kopKpLrZYkC23yWBIbvVllyof5JFbh6/Bl3MOp0idONmlCZ0N0RuuB0nA3 zUUy0LN9BscE7zml13mUUwaBUr5h8BKO -----END CERTIFICATE-----Generated at Thu Jul 3 23:59:22 2025 by rpki-client