$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: oE6NCTE4L6Gr98dXyMK53UFgdk5X8F7MQIjg8WMgHbU= Subject key identifier: E6:DF:60:D3:A2:F3:F4:38:7D:B1:1B:C2:88:6C:0E:D8:3B:0E:66:DE Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: CB Signing time: Sun 29 Jun 2025 04:44:34 +0000 Manifest this update: Sun 29 Jun 2025 04:44:34 +0000 Manifest next update: Sun 06 Jul 2025 04:44:34 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: DgfXc8M/tpFgr5EdTNix8cxlZUoalAumXMiDmEEqiW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Jun 29 04:44:34 2025 GMT Not After : Jul 6 04:44:34 2025 GMT Subject: CN=6860c4b2-69f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:5d:91:ea:bf:ae:07:45:06:5b:50:00:ce: 26:cf:d9:d7:7e:49:e5:3e:35:ad:a9:d6:cf:54:64: f7:0d:0e:76:18:49:6e:8b:12:56:e8:1e:8e:4c:e5: 0e:e1:ad:b5:61:24:14:68:1e:37:5f:84:6c:92:64: 6f:18:eb:3a:12:92:1d:c8:ed:39:e0:d5:d2:bc:94: 86:bc:88:08:39:e9:43:c9:8a:ce:d7:db:34:1f:67: 8f:91:66:8b:42:46:5f:4c:83:2a:da:64:0e:59:84: 7a:47:da:99:75:ef:38:0c:ae:35:ed:71:11:5f:bb: 3b:25:46:7e:bc:d2:26:b3:84:0b:f3:dc:59:c8:e4: 9b:14:92:5b:88:74:ba:16:7d:bd:3e:05:5a:ad:8e: db:93:52:1f:fb:3a:22:9a:bf:a4:c8:22:86:5c:4f: f2:1c:2f:9b:8d:44:01:d4:6a:f6:9f:7f:5f:31:a9: cc:60:73:6f:14:c6:fe:10:6e:0a:e0:32:a0:91:d1: db:16:61:7b:98:75:d0:b7:cc:8d:68:cf:00:c6:97: d7:f2:c4:3f:3d:e3:90:01:ad:98:21:70:cc:a1:73: 80:50:c7:31:95:c3:0f:8b:2f:85:a9:92:8d:7b:71: 6c:a2:f7:5e:3b:02:40:9f:ea:e9:a9:8e:f5:9d:16: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DF:60:D3:A2:F3:F4:38:7D:B1:1B:C2:88:6C:0E:D8:3B:0E:66:DE X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5c:de:f8:a3:74:13:04:2b:24:73:8d:55:1e:dd:95:e5:a7: 9f:ae:6b:99:78:ac:72:bb:f0:af:cf:c8:35:5b:9d:85:b9:8a: 22:01:14:38:c2:29:35:2a:27:5e:87:6e:d4:ba:ce:ea:63:41: 39:be:44:56:b2:6f:90:b1:0a:ed:6f:03:26:9c:93:1a:98:d8: 9a:c0:8b:c6:1e:c5:7f:ef:a2:11:5b:91:7f:c0:d2:f3:55:42: 05:c7:01:75:df:01:5d:c2:d9:9b:37:44:32:38:52:fb:57:8d: 68:cc:59:8b:a9:32:1b:5c:fe:90:9e:66:02:f3:22:08:4a:14: 2a:a5:d0:df:11:b8:77:58:f8:5c:cf:c8:89:b3:ce:2a:b2:b1: e4:40:bf:c3:13:1d:4d:5b:f3:4b:14:ba:66:05:d6:d2:0f:6e: 2d:f8:10:8d:2f:58:61:69:79:af:a9:16:83:a0:39:3c:f8:d0: 6f:26:4d:a9:0f:84:7c:82:87:1e:b4:3d:cb:fd:a6:83:be:92: 58:8a:64:1a:1c:09:d3:b9:c8:a5:64:a7:c9:78:02:28:92:e4: fa:43:0d:71:b9:70:4b:c4:53:8a:66:e4:1a:70:6f:17:73:bb: 1d:c3:57:68:b3:6c:a0:20:6d:0a:aa:be:69:6f:34:b6:cc:8f: 24:db:08:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwNjI5MDQ0NDM0WhcNMjUwNzA2MDQ0NDM0WjAYMRYwFAYD VQQDEw02ODYwYzRiMi02OWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq5dkeq/rgdFBltQAM4mz9nXfknlPjWtqdbPVGT3DQ52GEluixJW6B6OTOUO 4a21YSQUaB43X4RskmRvGOs6EpIdyO054NXSvJSGvIgIOelDyYrO19s0H2ePkWaL QkZfTIMq2mQOWYR6R9qZde84DK417XERX7s7JUZ+vNIms4QL89xZyOSbFJJbiHS6 Fn29PgVarY7bk1If+zoimr+kyCKGXE/yHC+bjUQB1Gr2n39fManMYHNvFMb+EG4K 4DKgkdHbFmF7mHXQt8yNaM8AxpfX8sQ/PeOQAa2YIXDMoXOAUMcxlcMPiy+FqZKN e3FsovdeOwJAn+rpqY71nRZ5wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObfYNOi 8/Q4fbEbwohsDtg7DmbeMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9XN74o3QTBCskc41VHt2V5aefrmuZeKxyu/Cvz8g1W52FuYoiARQ4 wik1Kideh27Uus7qY0E5vkRWsm+QsQrtbwMmnJMamNiawIvGHsV/76IRW5F/wNLz VUIFxwF13wFdwtmbN0QyOFL7V41ozFmLqTIbXP6QnmYC8yIIShQqpdDfEbh3WPhc z8iJs84qsrHkQL/DEx1NW/NLFLpmBdbSD24t+BCNL1hhaXmvqRaDoDk8+NBvJk2p D4R8gocetD3L/aaDvpJYimQaHAnTucilZKfJeAIokuT6Qw1xuXBLxFOKZuQacG8X c7sdw1dos2ygIG0Kqr5pbzS2zI8k2wiM -----END CERTIFICATE-----Generated at Sun Jun 29 14:25:23 2025 by rpki-client