$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: mp61Wa54R2oXZS06T+1Ei+8zlBJIGz4w4pNUEW+vIkk= Subject key identifier: 43:90:78:4A:BB:20:EB:19:34:00:8A:05:B3:1D:4B:91:7E:C3:1B:D3 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 80 Signing time: Thu 03 Jul 2025 06:53:15 +0000 Manifest this update: Thu 03 Jul 2025 06:53:14 +0000 Manifest next update: Thu 10 Jul 2025 06:53:14 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: 4foc6uCOXcS/f+g/Pcvwnr+M1gX1DkvisafXiAj3PpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Jul 3 06:53:14 2025 GMT Not After : Jul 10 06:53:14 2025 GMT Subject: CN=686628db-6383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:47:c2:1b:58:76:ee:b5:d5:87:3f:93:e1: 49:34:f6:4d:6b:bb:32:73:14:cc:ca:10:8f:29:29: 45:87:53:51:d6:cd:ea:57:dc:da:3f:72:8c:48:81: d7:a5:24:10:72:d3:c7:fe:94:ec:c0:90:ba:91:17: 44:cf:20:5d:d6:d0:5d:38:da:00:aa:ed:e7:61:58: c0:35:d5:5b:93:0a:7f:6c:77:e1:65:74:01:d6:f2: 96:fb:67:7c:d5:74:07:cc:c6:8a:35:ff:1d:ca:99: f4:80:8a:58:81:bf:d8:73:7d:d1:01:0b:d2:70:71: 98:96:bd:8f:da:4e:d5:5b:e0:d0:0a:c3:e7:fc:69: 60:31:a7:3a:f5:ff:9d:f7:48:42:10:a5:f7:3f:79: 80:23:5e:1c:d4:23:6e:48:98:01:0c:86:6a:9e:09: 28:33:9a:72:bf:ae:13:31:34:f7:5a:d9:6d:ff:88: d0:26:96:dc:a7:87:04:27:56:5c:d1:c3:b5:2f:60: de:98:06:77:8a:fc:29:52:e2:3a:2d:ce:82:e6:a4: 07:60:e4:f6:23:f9:c9:ee:a9:25:14:2c:8c:f0:25: fa:20:96:f8:1b:e5:52:51:4e:62:a6:9f:9e:72:89: fb:2b:3c:18:fe:23:74:cf:20:1b:3a:5d:3e:31:f7: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:78:4A:BB:20:EB:19:34:00:8A:05:B3:1D:4B:91:7E:C3:1B:D3 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:c9:42:14:73:b3:19:7c:5b:2b:9e:d3:c6:11:6c:6d:98:23: 7e:16:a0:59:54:6f:e5:1f:7f:19:45:f7:b0:4e:ad:ba:68:72: ca:9f:d6:fc:46:2e:f1:8a:1c:39:3b:92:54:d5:b9:7d:e2:3b: 63:72:09:c3:9e:87:7f:40:e5:4b:bf:5d:50:40:eb:07:27:88: 56:7a:91:73:f0:7a:46:2b:97:e0:96:e9:7f:40:8c:6e:55:56: 2d:d1:22:ce:53:95:01:73:f0:d1:7d:f7:34:bf:31:a2:3d:ee: cd:76:e8:73:97:92:a8:04:30:d8:5c:35:4e:d2:9f:c4:54:50: 9e:04:94:db:7c:a5:6a:7a:fc:61:c9:76:fb:4d:ba:dc:83:f3: e9:9f:e3:cd:c2:65:a9:6b:b9:53:2c:45:1d:1a:93:b5:3b:98: f9:e1:06:3c:25:f2:b7:f0:88:79:cf:2a:de:f7:38:79:e9:ab: 56:62:6a:0c:dd:66:c8:36:a1:0f:8c:8a:cd:6b:8b:8c:84:1d: ea:3a:29:82:3a:5f:71:32:22:42:a2:b0:e2:c2:45:1d:7e:f8: e4:b3:0b:f3:17:35:33:0a:3e:df:cb:b5:11:67:07:f3:10:12: 28:d3:ae:a5:a5:39:cc:4a:2a:ca:26:8c:90:84:95:31:cc:6e: d5:cd:6b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC MkYxMjkyNTEwHhcNMjUwNzAzMDY1MzE0WhcNMjUwNzEwMDY1MzE0WjAYMRYwFAYD VQQDEw02ODY2MjhkYi02MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MtHwhtYdu611Yc/k+FJNPZNa7sycxTMyhCPKSlFh1NR1s3qV9zaP3KMSIHX pSQQctPH/pTswJC6kRdEzyBd1tBdONoAqu3nYVjANdVbkwp/bHfhZXQB1vKW+2d8 1XQHzMaKNf8dypn0gIpYgb/Yc33RAQvScHGYlr2P2k7VW+DQCsPn/GlgMac69f+d 90hCEKX3P3mAI14c1CNuSJgBDIZqngkoM5pyv64TMTT3Wtlt/4jQJpbcp4cEJ1Zc 0cO1L2DemAZ3ivwpUuI6Lc6C5qQHYOT2I/nJ7qklFCyM8CX6IJb4G+VSUU5ipp+e con7KzwY/iN0zyAbOl0+MfdnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOQeEq7 IOsZNACKBbMdS5F+wxvTMB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1 NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI SWdJRVVYUUc0X2F5OFNrbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFyUIUc7MZfFsrntPGEWxtmCN+FqBZVG/lH38ZRfewTq26aHLKn9b8 Ri7xihw5O5JU1bl94jtjcgnDnod/QOVLv11QQOsHJ4hWepFz8HpGK5fglul/QIxu VVYt0SLOU5UBc/DRffc0vzGiPe7Nduhzl5KoBDDYXDVO0p/EVFCeBJTbfKVqevxh yXb7Tbrcg/Ppn+PNwmWpa7lTLEUdGpO1O5j54QY8JfK38Ih5zyre9zh56atWYmoM 3WbINqEPjIrNa4uMhB3qOimCOl9xMiJCorDiwkUdfvjkswvzFzUzCj7fy7URZwfz EBIo066lpTnMSirKJoyQhJUxzG7VzWuG -----END CERTIFICATE-----Generated at Thu Jul 3 11:26:30 2025 by rpki-client