$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: +VLRa990+qxyL9Wy3Uq8WqzfmB/KQTw4KY+mCW62aaE= Subject key identifier: 9B:4F:4C:FF:A9:1C:DE:D8:C8:CE:6D:81:22:B3:FE:5C:F2:96:6F:2D Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 043F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 043B Signing time: Thu 03 Jul 2025 00:39:21 +0000 Manifest this update: Thu 03 Jul 2025 00:39:20 +0000 Manifest next update: Thu 10 Jul 2025 00:39:20 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: QURMkeGzrdIdHRilhNawGDSKgNLuOWLAI18/US6iBJ4=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Jul 3 00:39:20 2025 GMT Not After : Jul 10 00:39:20 2025 GMT Subject: CN=6865d138-c91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:c9:e8:c1:f6:a2:6b:40:ab:6f:eb:f4:21: 2f:1c:c0:29:d9:05:6e:e1:16:6c:ad:26:24:10:7e: 76:2f:04:15:e4:f6:cf:18:ac:b1:db:a1:c0:7c:fd: b0:3f:6b:ff:f4:df:4e:1c:2e:88:53:f8:de:59:28: aa:5d:19:c4:27:6d:e6:80:2f:ef:9e:b4:16:a7:56: 5c:41:9a:c0:d7:31:2d:ad:5a:b9:e8:19:2f:2c:60: a8:0f:8e:68:40:3a:83:dd:2b:b8:b2:66:4e:ac:56: 27:b5:af:8e:5e:c0:11:71:8d:32:e4:57:16:b0:b4: 4f:b0:81:09:20:2c:6e:76:2d:41:14:91:54:bc:8e: cc:c2:cc:18:fd:0c:03:44:7d:59:08:ba:35:81:71: f7:71:82:62:f3:d3:7a:ac:14:ca:99:59:a6:32:df: ed:0d:96:59:c2:2b:1e:23:e7:22:c0:9f:49:ef:39: bd:81:54:1b:bc:f5:c7:a3:9f:9c:bd:ee:81:c1:9f: 3b:e7:f9:88:78:b7:7e:4b:8e:d8:32:a9:87:aa:9e: 25:55:97:fb:cc:d4:a2:bd:70:bb:cc:44:c0:58:eb: 0e:b8:54:4b:df:5f:83:fa:48:41:46:c2:ab:41:2a: 4a:2e:44:1b:84:7e:97:3a:ae:3a:72:2c:9f:d3:da: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:4C:FF:A9:1C:DE:D8:C8:CE:6D:81:22:B3:FE:5C:F2:96:6F:2D X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:a8:3b:7f:8c:b2:37:e4:44:f9:98:ec:78:dd:de:cb:5d: 90:bd:d8:b2:0c:fc:46:d0:95:aa:3e:96:51:11:15:58:58:49: d0:45:05:31:7d:ce:3a:cd:f1:32:cc:35:af:0f:23:c5:43:76: 32:d2:8b:6f:48:8d:e1:12:24:e0:f2:16:08:e6:3d:41:a4:d0: 56:36:a9:72:a4:17:38:fa:16:bd:62:d2:e2:79:b0:e0:30:d5: 21:f2:03:e3:f6:09:3e:98:4e:fd:c3:1f:ec:1f:e0:57:58:08: 33:c7:b8:aa:14:6e:36:d3:34:bb:14:5a:42:4f:af:b9:5c:2f: 0d:c9:25:c2:27:b6:ef:66:08:48:ea:a6:20:ef:10:35:33:6a: da:2b:99:08:3f:3d:1d:de:ed:1c:0e:17:9b:c5:93:37:ac:64: b0:50:c1:cf:45:ae:bc:dc:01:5a:9a:58:33:52:cb:f2:b7:a1: bd:a6:7f:29:dc:d3:ac:a7:61:d8:a4:04:bb:a6:a0:c5:ea:54: 21:30:b6:02:54:36:c1:b0:1c:e0:68:66:df:0c:45:1b:8f:50: 0e:73:4e:56:31:94:30:5c:66:23:38:92:41:12:45:96:d0:7f: 88:85:32:d9:68:bd:31:e0:55:f0:1f:b5:9b:aa:72:d4:12:5f: ad:d3:8d:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwNzAzMDAzOTIwWhcNMjUwNzEwMDAzOTIwWjAYMRYwFAYD VQQDEw02ODY1ZDEzOC1jOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F3J6MH2omtAq2/r9CEvHMAp2QVu4RZsrSYkEH52LwQV5PbPGKyx26HAfP2w P2v/9N9OHC6IU/jeWSiqXRnEJ23mgC/vnrQWp1ZcQZrA1zEtrVq56BkvLGCoD45o QDqD3Su4smZOrFYnta+OXsARcY0y5FcWsLRPsIEJICxudi1BFJFUvI7MwswY/QwD RH1ZCLo1gXH3cYJi89N6rBTKmVmmMt/tDZZZwiseI+ciwJ9J7zm9gVQbvPXHo5+c ve6BwZ875/mIeLd+S47YMqmHqp4lVZf7zNSivXC7zETAWOsOuFRL31+D+khBRsKr QSpKLkQbhH6XOq46ciyf09oPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtPTP+p HN7YyM5tgSKz/lzylm8tMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk8Kg7f4yyN+RE+ZjseN3ey12QvdiyDPxG0JWqPpZRERVYWEnQRQUx fc46zfEyzDWvDyPFQ3Yy0otvSI3hEiTg8hYI5j1BpNBWNqlypBc4+ha9YtLiebDg MNUh8gPj9gk+mE79wx/sH+BXWAgzx7iqFG420zS7FFpCT6+5XC8NySXCJ7bvZghI 6qYg7xA1M2raK5kIPz0d3u0cDhebxZM3rGSwUMHPRa683AFamlgzUsvyt6G9pn8p 3NOsp2HYpAS7pqDF6lQhMLYCVDbBsBzgaGbfDEUbj1AOc05WMZQwXGYjOJJBEkWW 0H+IhTLZaL0x4FXwH7WbqnLUEl+t043K -----END CERTIFICATE-----Generated at Fri Jul 4 08:29:07 2025 by rpki-client