$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: VIC3zIUjzm9eEUxvMXzl9gp+GjieQ6svDNb4tQaFp6U= Subject key identifier: 09:B3:2F:E5:68:CF:50:79:0D:08:A2:46:25:03:A9:D7:E8:79:BC:2A Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 5E Signing time: Thu 03 Jul 2025 07:22:45 +0000 Manifest this update: Thu 03 Jul 2025 07:22:45 +0000 Manifest next update: Thu 10 Jul 2025 07:22:45 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: Kfr9jPE2XGcmjMjAO3mH+KrozqtCVTmj1LrQ7VskZoE=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Jul 3 07:22:45 2025 GMT Not After : Jul 10 07:22:45 2025 GMT Subject: CN=68662fc5-2edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:6f:9a:1c:64:23:70:cc:60:80:12:b9:61: 37:7a:1f:67:0c:48:b2:76:90:cd:4d:1e:89:63:6f: 87:62:8e:dd:33:fc:3c:ce:ec:7f:e3:5f:8a:17:56: db:3e:c8:3b:d7:bd:cf:5b:26:b4:f0:65:1b:3f:41: 52:ad:53:15:14:c3:9d:a4:e0:2d:4a:30:90:dd:e6: b0:9e:40:90:3b:a9:f8:89:d2:2f:ce:80:cf:6a:ed: 15:5d:a0:f4:9d:40:c9:ad:69:e4:25:ad:89:45:70: 14:e4:f9:57:99:de:b1:95:99:e0:5f:b7:64:d9:2e: d0:45:dc:0e:2f:d7:ef:92:58:81:1f:9a:9a:a0:c5: 74:17:87:57:ba:db:45:d0:ff:64:cb:3a:ad:3e:39: 7a:ce:05:96:c3:17:e0:fb:84:7f:04:16:99:f4:ac: 54:71:f2:4c:5a:04:9e:83:ea:5a:ec:d1:b9:c4:67: ab:50:55:f3:30:60:22:a2:b9:5c:34:cf:5f:06:6a: eb:f6:3f:db:51:91:f2:2f:9f:f4:13:15:c8:f3:16: 2f:19:b1:1f:01:78:ad:90:b2:d9:b9:4e:31:b6:c5: 1e:bd:41:8e:56:8c:7d:11:c7:ba:4c:12:38:47:ec: 6d:cf:f4:3d:2d:a4:44:d7:4d:1b:a8:11:be:5e:bd: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:2F:E5:68:CF:50:79:0D:08:A2:46:25:03:A9:D7:E8:79:BC:2A X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:23:a7:18:13:be:55:bd:81:f5:f7:d4:89:30:15:0e:90:10: cb:50:e3:f2:05:fc:4e:87:56:fa:8a:9e:28:f6:73:e0:85:2f: b6:83:5e:e0:24:17:50:61:49:b2:61:ef:29:bb:05:e5:da:bd: 2c:b6:73:59:31:b1:79:e8:00:38:71:0e:cd:5f:13:45:89:7a: 39:c0:df:92:a9:49:ed:e8:e3:2b:9e:5c:88:0d:6c:89:0c:f9: 94:0c:6f:42:87:74:5e:e6:4a:29:b3:2f:71:4c:4b:e2:00:d2: 3e:dc:f3:87:20:20:5e:f5:e7:3b:a8:f0:0b:a4:01:1a:aa:72: d5:e6:33:b4:0e:d9:3b:91:91:5b:b6:70:b2:57:20:17:82:34: 9c:f6:62:b4:6b:83:df:8b:74:f8:a7:bb:9e:f3:57:ee:7c:fa: 34:b1:70:3b:dd:0f:bc:9b:2e:c5:41:76:5d:4e:10:44:1c:c5: ba:0e:1a:88:b6:b7:92:64:8f:83:ef:06:21:a5:1f:63:e9:01: b5:ec:11:ab:0d:cd:d8:f3:b6:c6:97:8a:97:80:db:7a:97:4c: b2:e2:95:a4:73:38:d2:3b:60:15:fe:aa:2f:ee:3c:18:6b:f5: 55:d9:3e:ae:41:71:c7:52:39:0d:b4:a8:2d:0a:07:6a:6b:3a: 79:a0:50:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTA3MDMwNzIyNDVaFw0yNTA3MTAwNzIyNDVaMBgxFjAUBgNV BAMTDTY4NjYyZmM1LTJlZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqUm+aHGQjcMxggBK5YTd6H2cMSLJ2kM1NHoljb4dijt0z/DzO7H/jX4oXVts+ yDvXvc9bJrTwZRs/QVKtUxUUw52k4C1KMJDd5rCeQJA7qfiJ0i/OgM9q7RVdoPSd QMmtaeQlrYlFcBTk+VeZ3rGVmeBft2TZLtBF3A4v1++SWIEfmpqgxXQXh1e620XQ /2TLOq0+OXrOBZbDF+D7hH8EFpn0rFRx8kxaBJ6D6lrs0bnEZ6tQVfMwYCKiuVw0 z18Gauv2P9tRkfIvn/QTFcjzFi8ZsR8BeK2Qstm5TjG2xR69QY5WjH0Rx7pMEjhH 7G3P9D0tpETXTRuoEb5evRQzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCbMv5WjP UHkNCKJGJQOp1+h5vCowHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIojpxgTvlW9gfX31IkwFQ6QEMtQ4/IF/E6HVvqKnij2c+CFL7aDXuAk F1BhSbJh7ym7BeXavSy2c1kxsXnoADhxDs1fE0WJejnA35KpSe3o4yueXIgNbIkM +ZQMb0KHdF7mSimzL3FMS+IA0j7c84cgIF715zuo8AukARqqctXmM7QO2TuRkVu2 cLJXIBeCNJz2YrRrg9+LdPinu57zV+58+jSxcDvdD7ybLsVBdl1OEEQcxboOGoi2 t5Jkj4PvBiGlH2PpAbXsEasNzdjztsaXipeA23qXTLLilaRzONI7YBX+qi/uPBhr 9VXZPq5BccdSOQ20qC0KB2prOnmgUOw= -----END CERTIFICATE-----Generated at Thu Jul 3 20:34:39 2025 by rpki-client