$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: DEtB6s702g2QeeAcPrXU+yo4Xn5q5KaN5RnPJtbf1WM= Subject key identifier: 78:D7:3C:E3:B5:18:65:38:11:F2:CB:B0:6C:69:16:1D:83:36:7B:36 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 59 Signing time: Tue 01 Jul 2025 07:55:15 +0000 Manifest this update: Tue 01 Jul 2025 07:55:14 +0000 Manifest next update: Tue 08 Jul 2025 07:55:14 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: sEGO28Tqiwj1VkvD72TrjL0vcx1aUJQ7TYWH8KZz5Jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: Jul 1 07:55:14 2025 GMT Not After : Jul 8 07:55:14 2025 GMT Subject: CN=68639462-deb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:ac:14:39:3a:99:31:87:81:02:34:5a:d0: d0:b3:6c:0d:de:53:70:20:5f:a0:63:69:d1:79:40: d5:7a:d8:60:c8:99:f1:f0:c5:4c:36:d2:99:4b:1e: d6:7e:d9:4f:6c:76:0a:4d:1f:db:e1:c0:2f:6c:30: 50:70:27:e6:02:40:1f:8c:4e:2f:33:ef:52:ec:96: c8:bd:4a:06:30:06:23:b8:65:b9:55:d8:5f:1b:ac: 54:4a:ef:56:7b:69:96:98:47:a3:85:bf:cb:02:6d: 62:dd:5d:7b:58:b2:65:13:f9:04:11:11:d6:10:c5: 50:e9:44:fc:72:42:18:73:cd:64:5d:83:50:d2:42: 74:5d:b9:60:35:be:d2:5e:17:60:44:f8:ec:66:98: 86:ac:1a:42:db:84:8a:a1:d7:e8:4c:38:bb:6e:14: b9:60:7d:d3:7d:8a:e9:1b:5e:e1:c0:cf:71:04:20: df:ba:f6:e1:a3:96:3f:cb:55:e0:84:82:92:9f:34: d7:27:b1:4b:71:2c:44:9b:1f:e3:9a:59:3c:9c:3c: c7:c3:6c:2b:50:b8:54:ce:04:53:2a:39:57:f4:2a: 6d:98:03:4f:7b:51:f5:b7:d9:52:9e:c5:44:b8:2c: 68:e0:b7:ff:25:c3:f7:23:ba:e2:11:3f:ac:ed:1f: 20:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D7:3C:E3:B5:18:65:38:11:F2:CB:B0:6C:69:16:1D:83:36:7B:36 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:dc:d5:d6:8a:1e:5b:fa:6c:e7:c0:30:42:53:98:01:07:6c: 34:d5:4c:4a:70:0e:56:56:9a:04:9c:bb:35:ba:88:41:ab:ae: 54:65:f8:e5:5d:dd:04:9b:1a:67:95:d3:22:37:1a:07:5c:42: d9:b6:d0:cd:3a:6e:d5:da:60:0e:a9:5b:92:6a:b7:5e:6e:d9: 95:e2:77:94:de:10:b1:63:a6:e2:d7:75:d8:18:16:97:ea:47: 80:65:cf:bf:d9:06:18:c7:70:13:66:6c:d7:1a:69:cf:d6:30: 15:74:e8:0c:15:79:b3:5e:61:45:a0:e4:d3:35:65:c7:58:5d: f3:80:5e:e2:c4:14:d3:a3:89:78:1e:1e:9a:fa:8a:1f:3b:4d: 82:7a:71:02:3d:86:0b:fe:b2:5c:8b:be:24:6f:ae:23:98:d3: f7:85:94:12:e8:7f:03:e7:a8:a7:e9:84:76:78:f0:20:2e:ce: 17:29:ca:12:ff:1e:13:d9:98:0e:e5:f0:1b:b4:b8:45:ed:03: 70:72:10:3b:8e:cf:46:e5:bb:f3:1c:4e:da:30:c5:9f:12:77: 86:3b:33:04:31:6a:65:54:e6:76:2f:59:9c:e8:37:23:57:24: 3b:8a:31:f4:d7:08:65:1f:55:b6:94:7b:37:96:b1:5a:78:7f: 2e:9e:20:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUU5QjBEMTYzQ0UwQUExMUU5MUQ1NTYwRjVBM0NDNjY5 RTMyOTFFRjAeFw0yNTA3MDEwNzU1MTRaFw0yNTA3MDgwNzU1MTRaMBgxFjAUBgNV BAMTDTY4NjM5NDYyLWRlYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/dKwUOTqZMYeBAjRa0NCzbA3eU3AgX6BjadF5QNV62GDImfHwxUw20plLHtZ+ 2U9sdgpNH9vhwC9sMFBwJ+YCQB+MTi8z71Lslsi9SgYwBiO4ZblV2F8brFRK71Z7 aZaYR6OFv8sCbWLdXXtYsmUT+QQREdYQxVDpRPxyQhhzzWRdg1DSQnRduWA1vtJe F2BE+OxmmIasGkLbhIqh1+hMOLtuFLlgfdN9iukbXuHAz3EEIN+69uGjlj/LVeCE gpKfNNcnsUtxLESbH+OaWTycPMfDbCtQuFTOBFMqOVf0Km2YA097UfW32VKexUS4 LGjgt/8lw/cjuuIRP6ztHyCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeNc847UY ZTgR8suwbGkWHYM2ezYwHwYDVR0jBBgwFoAUHpsNFjzgqhHpHVVg9aPMZp4yke8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzA5NTMwQThDQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHBzTkZqemdxaEhwSFZWZzlhUE1acDR5a2U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzA5NTMwQThDQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhI cEhWVmc5YVBNWnA0eWtlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD7c1daKHlv6bOfAMEJTmAEHbDTVTEpwDlZWmgScuzW6iEGrrlRl+OVd 3QSbGmeV0yI3GgdcQtm20M06btXaYA6pW5Jqt15u2ZXid5TeELFjpuLXddgYFpfq R4Blz7/ZBhjHcBNmbNcaac/WMBV06AwVebNeYUWg5NM1ZcdYXfOAXuLEFNOjiXge Hpr6ih87TYJ6cQI9hgv+slyLviRvriOY0/eFlBLofwPnqKfphHZ48CAuzhcpyhL/ HhPZmA7l8Bu0uEXtA3ByEDuOz0blu/McTtowxZ8Sd4Y7MwQxamVU5nYvWZzoNyNX JDuKMfTXCGUfVbaUezeWsVp4fy6eIEw= -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:33 2025 by rpki-client