$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: txpJ0m2rgf1b6wnkEiUSCqGSSUtcYgFc/okq64nEIhk= Subject key identifier: 3C:81:8C:37:8A:90:25:10:B0:F3:CB:34:01:28:9B:48:64:ED:19:EF Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 17 Signing time: Thu 03 Jul 2025 08:15:38 +0000 Manifest this update: Thu 03 Jul 2025 08:15:38 +0000 Manifest next update: Thu 10 Jul 2025 08:15:38 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: tpup0XNbtI7FR3jRyEDkJ6pIxYqFxiagyDnguFtiGgI=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Jul 3 08:15:38 2025 GMT Not After : Jul 10 08:15:38 2025 GMT Subject: CN=68663c2a-b678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:9c:11:60:f3:84:b9:47:bd:e7:b6:9e:30: 96:d0:e6:23:e4:a1:c2:1c:8d:6f:ae:f7:a6:69:9f: a4:2f:9e:9e:30:17:86:14:84:be:b1:ee:3f:ac:fb: f6:40:fa:a4:62:f0:b9:f2:84:3a:57:18:fa:fd:a8: c9:b0:75:96:b3:3f:03:7b:a2:a6:da:68:49:85:63: cd:44:49:eb:49:66:e5:6a:fc:3e:b8:15:80:23:83: 22:94:1d:eb:8c:71:b3:91:e8:1a:23:fc:c5:6d:2c: 36:55:59:2c:5b:6f:52:03:9f:90:7f:7f:eb:1e:57: 1a:90:b3:c1:17:5f:af:38:90:3e:19:79:c2:5e:31: 02:a7:ff:df:7f:b6:32:b4:e3:74:e3:98:9e:f9:b5: 3b:6a:94:03:a7:a6:9b:69:d0:c9:9e:1c:60:6b:65: 19:67:6e:95:61:8c:60:8e:6a:94:b1:47:74:89:bc: ea:e4:93:f2:64:91:80:fa:fc:56:dd:ce:24:56:89: 4f:2e:9c:44:59:85:25:a3:45:3b:8d:df:19:b1:81: 31:d9:65:75:d2:cf:1e:c0:ac:a0:71:33:bd:85:8f: 4d:07:5d:0e:10:ff:ae:75:3e:fc:59:ef:4b:ac:c8: f8:4f:02:9f:e4:42:83:17:b5:61:02:1a:af:7c:1d: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:81:8C:37:8A:90:25:10:B0:F3:CB:34:01:28:9B:48:64:ED:19:EF X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:51:c1:26:7f:b2:88:97:b3:13:4e:cf:e4:2b:fb:2f:86:34: c9:cf:92:9f:eb:48:4b:92:65:de:4d:aa:12:58:46:17:0c:8e: 64:5d:24:2a:52:dc:d0:77:1a:e2:9e:5d:73:ae:0c:99:77:ff: 4c:ff:bd:69:35:8a:28:54:2d:04:29:87:be:92:5c:eb:b0:17: 49:d0:27:6e:de:4b:21:80:ab:f1:42:62:1a:c2:cd:de:0d:04: 7b:a8:8e:80:aa:4a:81:51:10:96:3a:db:0c:86:ce:b5:00:74: d1:f9:22:da:f7:49:35:b5:9a:c8:52:a3:2c:55:9a:d6:95:b3: 59:c6:d3:d5:46:96:be:e2:35:86:ba:79:c3:7d:e2:5f:dd:e1: bc:1c:69:41:59:f8:31:5d:56:64:3b:17:93:81:25:f4:e9:9f: ea:72:9f:30:77:6d:0d:3e:75:25:8e:a7:79:4b:e0:48:b5:db: b2:4b:96:3f:b8:07:b3:ce:4a:61:ab:7a:99:62:e4:4d:b7:99: 76:58:2a:ec:b2:5d:c2:f5:1b:60:c4:70:80:4c:86:5e:69:19: 2b:f2:40:53:e0:01:86:3a:40:29:f9:53:7b:f8:26:1a:7f:a9: e8:b2:e5:70:68:49:dc:e2:d7:bc:da:a1:23:37:aa:80:af:9e: be:64:6c:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA3MDMwODE1MzhaFw0yNTA3MTAwODE1MzhaMBgxFjAUBgNV BAMTDTY4NjYzYzJhLWI2NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC5pwRYPOEuUe957aeMJbQ5iPkocIcjW+u96Zpn6Qvnp4wF4YUhL6x7j+s+/ZA +qRi8LnyhDpXGPr9qMmwdZazPwN7oqbaaEmFY81ESetJZuVq/D64FYAjgyKUHeuM cbOR6Boj/MVtLDZVWSxbb1IDn5B/f+seVxqQs8EXX684kD4ZecJeMQKn/99/tjK0 43TjmJ75tTtqlAOnpptp0MmeHGBrZRlnbpVhjGCOapSxR3SJvOrkk/JkkYD6/Fbd ziRWiU8unERZhSWjRTuN3xmxgTHZZXXSzx7ArKBxM72Fj00HXQ4Q/651PvxZ70us yPhPAp/kQoMXtWECGq98HWfXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPIGMN4qQ JRCw88s0ASibSGTtGe8wHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAtRwSZ/soiXsxNOz+Qr+y+GNMnPkp/rSEuSZd5NqhJYRhcMjmRdJCpS 3NB3GuKeXXOuDJl3/0z/vWk1iihULQQph76SXOuwF0nQJ27eSyGAq/FCYhrCzd4N BHuojoCqSoFREJY62wyGzrUAdNH5Itr3STW1mshSoyxVmtaVs1nG09VGlr7iNYa6 ecN94l/d4bwcaUFZ+DFdVmQ7F5OBJfTpn+pynzB3bQ0+dSWOp3lL4Ei127JLlj+4 B7POSmGrepli5E23mXZYKuyyXcL1G2DEcIBMhl5pGSvyQFPgAYY6QCn5U3v4Jhp/ qeiy5XBoSdzi17zaoSM3qoCvnr5kbCg= -----END CERTIFICATE-----Generated at Fri Jul 4 02:20:27 2025 by rpki-client