$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: xk4+iGT7vsZQDEMTCuGqSb4R3OzmEjtz51SfoPPimkE= Subject key identifier: 37:07:5C:D3:54:4D:D5:0B:44:76:49:97:3E:AC:48:1B:F9:B4:91:4F Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 06F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 06D8 Signing time: Wed 02 Jul 2025 22:23:41 +0000 Manifest this update: Wed 02 Jul 2025 22:23:41 +0000 Manifest next update: Wed 09 Jul 2025 22:23:41 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: ZxFztlSxCm8+cv4CxScBIN9hqV0tstF4UH2dA05Q6ZM=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1781 (0x6f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Jul 2 22:23:41 2025 GMT Not After : Jul 9 22:23:41 2025 GMT Subject: CN=6865b16d-8cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:01:18:c7:10:ae:d0:68:14:55:2f:33:d5: 66:ec:75:d0:b3:4b:81:d4:46:a7:db:f1:0a:93:04: 04:5f:5a:fd:a4:96:2e:48:d1:94:b0:a9:44:23:3e: 64:cc:93:4a:96:a5:e5:c6:21:ea:3f:fb:41:f1:7d: 91:8e:36:90:87:14:ef:b2:e5:45:02:f9:9e:8f:3c: d9:20:64:6d:8e:a2:90:3c:20:6a:96:fc:3e:45:d5: f2:41:25:d2:ca:9a:bf:35:af:90:e7:4d:68:51:4f: dd:bf:88:a6:98:9d:55:52:0f:6f:74:c4:d1:d5:e8: 68:d7:a7:a8:f5:2c:a9:48:27:45:ea:fb:26:94:b1: 13:44:3b:ef:ba:3d:df:db:38:a6:dc:24:c6:77:12: eb:9f:97:33:1f:de:cc:59:92:2b:cb:9f:71:2f:53: 9f:4c:e7:bf:94:f0:6c:13:74:27:52:0e:77:de:04: 4d:31:8b:09:10:2c:25:7b:ba:90:48:d1:49:3d:1a: 4b:f8:f3:ac:a0:dc:73:c0:db:21:ee:13:45:ef:b1: 92:b9:05:d2:f0:67:fd:c5:d1:ea:db:d4:9d:c4:77: 3b:36:54:61:15:25:f3:0e:14:f4:cc:dd:bc:94:b2: 49:d3:e1:79:41:f6:1f:6f:31:a0:f9:2b:57:6a:84: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:07:5C:D3:54:4D:D5:0B:44:76:49:97:3E:AC:48:1B:F9:B4:91:4F X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:fa:be:8d:24:7c:c4:88:19:b8:76:20:a0:59:a2:92:9a: fa:ef:0d:9b:a4:9b:9e:38:d0:22:75:30:31:60:23:f3:4f:bf: c0:52:2c:bb:05:5a:2d:ff:81:a8:8b:9a:eb:af:39:6a:4e:89: b1:75:97:5d:32:b6:e1:3d:d6:9f:1f:9b:af:0a:07:5e:f0:ef: e3:4c:5b:b2:19:a9:19:72:2b:36:d7:ac:3a:ad:bb:dd:8f:90: c8:6f:85:48:9a:a2:94:71:a7:1c:63:9d:bf:8b:a5:e3:df:6b: e2:1b:aa:25:3f:61:c8:58:ae:f5:a6:05:9a:81:b3:76:f3:2a: 32:d8:af:c5:9f:9e:35:9c:75:53:a6:b3:3a:ee:14:8a:cf:2d: c1:34:07:f8:60:ca:f5:18:70:da:88:69:52:6a:2e:5a:bb:81: df:31:e4:44:fd:78:b0:df:53:bc:7b:56:26:73:50:35:73:e8: 1b:fd:cb:7f:3f:40:b6:55:e8:bc:2e:d1:58:e2:ef:73:4b:1f: 19:d0:d2:e1:73:80:ef:8b:91:97:0e:09:07:1b:01:d6:61:72: 65:7e:ac:a7:9a:da:bf:d4:17:26:20:b7:2a:74:2a:42:68:b9: c5:bb:5f:fc:76:ce:65:4e:29:6f:03:18:c6:79:19:48:6e:16: f0:8e:85:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwNzAyMjIyMzQxWhcNMjUwNzA5MjIyMzQxWjAYMRYwFAYD VQQDEw02ODY1YjE2ZC04Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlNsBGMcQrtBoFFUvM9Vm7HXQs0uB1Ean2/EKkwQEX1r9pJYuSNGUsKlEIz5k zJNKlqXlxiHqP/tB8X2RjjaQhxTvsuVFAvmejzzZIGRtjqKQPCBqlvw+RdXyQSXS ypq/Na+Q501oUU/dv4immJ1VUg9vdMTR1eho16eo9SypSCdF6vsmlLETRDvvuj3f 2zim3CTGdxLrn5czH97MWZIry59xL1OfTOe/lPBsE3QnUg533gRNMYsJECwle7qQ SNFJPRpL+POsoNxzwNsh7hNF77GSuQXS8Gf9xdHq29SdxHc7NlRhFSXzDhT0zN28 lLJJ0+F5QfYfbzGg+StXaoTDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcHXNNU TdULRHZJlz6sSBv5tJFPMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIEvq+jSR8xIgZuHYgoFmikpr67w2bpJueONAidTAxYCPzT7/AUiy7 BVot/4Goi5rrrzlqTomxdZddMrbhPdafH5uvCgde8O/jTFuyGakZcis216w6rbvd j5DIb4VImqKUcaccY52/i6Xj32viG6olP2HIWK71pgWagbN28yoy2K/Fn541nHVT prM67hSKzy3BNAf4YMr1GHDaiGlSai5au4HfMeRE/Xiw31O8e1Ymc1A1c+gb/ct/ P0C2Vei8LtFY4u9zSx8Z0NLhc4Dvi5GXDgkHGwHWYXJlfqynmtq/1BcmILcqdCpC aLnFu1/8ds5lTilvAxjGeRlIbhbwjoWe -----END CERTIFICATE-----Generated at Thu Jul 3 07:11:41 2025 by rpki-client