$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json) Hash identifier: GS/yceuANG0FC+Kg3CbRLK76S898XYw3CCQgkJKmSlA= Subject key identifier: 08:B2:78:3F:3C:8D:59:5A:88:C3:AD:20:69:9B:31:C6:23:A1:74:FF Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft Manifest number: 0198 Signing time: Thu 03 Jul 2025 04:06:37 +0000 Manifest this update: Thu 03 Jul 2025 04:06:37 +0000 Manifest next update: Thu 10 Jul 2025 04:06:37 +0000 Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: vb86c0ClbICzmqLx49JrdkDFCsK0/T3KRt2HqmsdNPM=) 2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: 7Nat9vEjm3uLFRu4zdaHZeOvfAimC/wAZ4j55cSSDsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Validity Not Before: Jul 3 04:06:37 2025 GMT Not After : Jul 10 04:06:37 2025 GMT Subject: CN=686601cd-8404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:76:20:a9:a8:a3:71:ae:6c:a5:0e:d3:e2: 64:d5:04:ef:58:39:9b:dc:b3:4e:c0:bb:51:fc:7b: 42:da:e3:41:74:50:94:21:35:da:86:39:19:b7:99: 3e:13:5e:17:84:a4:e5:af:b5:1f:2c:e6:71:eb:68: 2f:5d:4a:f7:38:a2:fe:27:4d:25:84:8c:60:9f:22: 94:db:63:d5:2c:d4:b3:6a:7b:0e:30:0e:67:86:ba: a1:0c:28:dc:7c:f6:c1:71:fe:c6:7b:ef:eb:06:17: 52:32:56:a4:cd:42:ae:7f:0c:ae:61:60:4a:5f:7e: 06:56:3c:e0:39:ac:a3:89:f2:48:52:46:9f:39:50: 5f:80:fd:60:78:08:d5:21:55:3b:19:82:4c:cd:55: 6a:33:29:c7:ec:28:09:66:d6:b5:56:fe:b0:9d:1a: e4:d4:87:8b:ee:92:6b:82:87:59:13:fa:bf:73:55: 00:59:27:f7:6a:f3:46:eb:4a:bc:9f:a1:74:eb:32: 26:64:c8:42:1c:fe:81:7d:f6:79:6e:0a:fe:f7:82: 18:23:4e:b6:fc:32:6d:01:94:9b:de:e2:26:f2:c6: ff:e6:3e:8e:11:e4:d7:6e:aa:97:63:51:34:76:b6: 9a:e6:9b:e0:80:1d:d1:60:32:9e:40:ca:0c:ba:3f: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B2:78:3F:3C:8D:59:5A:88:C3:AD:20:69:9B:31:C6:23:A1:74:FF X509v3 Authority Key Identifier: keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:5f:d3:2c:ca:b4:db:8c:f9:66:b2:7f:49:32:94:ca:19:1d: e0:a6:20:79:c3:82:0d:1b:8d:c5:2a:3a:70:b9:ab:0e:b3:6f: 62:e7:fe:44:35:fb:69:6d:5c:39:d8:9e:08:8d:ef:e5:8a:53: 48:39:61:2f:78:bf:2a:a4:2b:15:26:b7:bd:fa:e6:ba:fa:e1: d6:72:ed:89:02:a4:b9:d9:de:d0:25:b2:e3:26:60:03:59:12: 7a:ff:08:25:e9:fe:f5:56:95:d0:cc:1e:d5:57:50:b0:01:4c: f9:6e:8e:bd:91:f0:0f:bb:e5:5f:41:58:c3:26:a9:38:96:bf: 67:32:84:bc:09:fa:81:1e:8d:05:fc:84:fa:6c:0d:0e:a0:01: 5e:2e:20:f8:ce:56:ec:a0:7c:c8:3d:b8:03:c2:27:a9:dc:4f: 22:c2:a4:d2:05:9a:ca:eb:58:41:02:f1:97:29:ef:16:9b:db: 09:2a:f4:59:19:a7:c5:63:fc:e1:60:61:8a:d6:4d:3a:5d:e8: 50:04:43:37:ba:a9:fa:24:8e:44:76:63:cc:74:bd:c9:76:ee: a2:e6:0d:b7:ca:8c:02:68:69:88:68:f0:b1:22:98:c3:90:8e: 9a:36:94:96:ec:80:96:e0:9b:94:29:28:c3:d6:67:e8:6d:6e: b3:58:44:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGQUYxMTAvBgNVBAUTKDFFODVBODYwRDYyRTI2MDc5MjMzQ0I3QTAxREIwQkFD QkIwMzY5QTYwHhcNMjUwNzAzMDQwNjM3WhcNMjUwNzEwMDQwNjM3WjAYMRYwFAYD VQQDEw02ODY2MDFjZC04NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxh2IKmoo3GubKUO0+Jk1QTvWDmb3LNOwLtR/HtC2uNBdFCUITXahjkZt5k+ E14XhKTlr7UfLOZx62gvXUr3OKL+J00lhIxgnyKU22PVLNSzansOMA5nhrqhDCjc fPbBcf7Ge+/rBhdSMlakzUKufwyuYWBKX34GVjzgOayjifJIUkafOVBfgP1geAjV IVU7GYJMzVVqMynH7CgJZta1Vv6wnRrk1IeL7pJrgodZE/q/c1UAWSf3avNG60q8 n6F06zImZMhCHP6BffZ5bgr+94IYI062/DJtAZSb3uIm8sb/5j6OEeTXbqqXY1E0 draa5pvggB3RYDKeQMoMuj+F9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiyeD88 jVlaiMOtIGmbMcYjoXT/MB8GA1UdIwQYMBaAFB6FqGDWLiYHkjPLegHbC6y7A2mm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0ZBRi9BOTBEMUI5NjQx NUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpnZVNNOHQ2QWRzTHJMc0Rh YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hvV29ZTll1SmdlU004dDZBZHNMckxzRGFhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0ZBRi9BOTBEMUI5NjQxNUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpn ZVNNOHQ2QWRzTHJMc0RhYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+X9MsyrTbjPlmsn9JMpTKGR3gpiB5w4ING43FKjpwuasOs29i5/5E NftpbVw52J4Ije/lilNIOWEveL8qpCsVJre9+ua6+uHWcu2JAqS52d7QJbLjJmAD WRJ6/wgl6f71VpXQzB7VV1CwAUz5bo69kfAPu+VfQVjDJqk4lr9nMoS8CfqBHo0F /IT6bA0OoAFeLiD4zlbsoHzIPbgDwiep3E8iwqTSBZrK61hBAvGXKe8Wm9sJKvRZ GafFY/zhYGGK1k06XehQBEM3uqn6JI5EdmPMdL3Jdu6i5g23yowCaGmIaPCxIpjD kI6aNpSW7ICW4JuUKSjD1mfobW6zWETH -----END CERTIFICATE-----Generated at Thu Jul 3 08:09:32 2025 by rpki-client