$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: Goj+QtbQc/enzGjTNcR0pFq3LzDpMLF57mxlTEgdGdI= Subject key identifier: FC:A4:31:3F:50:B3:9F:A8:12:89:E5:86:D6:60:63:FF:A2:33:27:F4 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 5A Signing time: Tue 01 Jul 2025 07:54:25 +0000 Manifest this update: Tue 01 Jul 2025 07:54:25 +0000 Manifest next update: Tue 08 Jul 2025 07:54:25 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: MDh1ION7MNK4C4AMce0nCZ7sO8hi1/XOuQVbc3QkhnY=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: Ih+3aaDaOz/d8dCkRSwBGnuzOxqfvTbU/QJJ8s8nf54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Jul 1 07:54:25 2025 GMT Not After : Jul 8 07:54:25 2025 GMT Subject: CN=68639431-43f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0b:51:22:16:85:b6:91:2e:0f:c8:7c:1d:7e: 64:35:6d:d0:f6:ec:da:0c:62:63:c2:88:e0:0c:34: 04:9f:fd:20:46:cb:17:39:6c:17:2d:87:60:ef:17: ee:1f:ae:c5:ea:a1:0e:87:13:e0:50:0a:48:64:48: 74:e0:0e:3b:03:bd:ca:eb:68:ae:dd:b5:b9:ba:19: 93:de:12:73:16:0e:8f:5f:5c:fa:f5:27:ab:87:f0: 2c:74:07:6d:5b:b4:d8:2e:0e:f9:8d:10:ff:0d:48: f4:58:fc:5e:cb:d6:bd:21:6e:20:23:42:9b:46:46: 90:b0:f3:38:71:8e:58:78:00:ea:bb:83:4e:89:64: c2:6e:77:48:55:74:f6:23:c2:51:11:74:cf:b3:10: 6d:61:8e:80:7c:d2:94:16:83:88:a1:3f:02:ea:9a: 41:01:8e:72:f7:ed:11:42:e7:20:31:d6:b8:48:e0: 8a:b9:c6:e5:45:fa:c8:1a:cc:93:97:7c:12:c7:15: ba:22:90:4b:d4:c9:27:d4:b2:d1:f9:bb:26:db:e3: 40:3c:58:f7:7f:67:ec:41:88:08:96:fa:72:73:d9: a0:84:bc:9d:f4:4b:67:2c:6c:42:db:09:ef:5f:a2: 21:f3:71:de:04:f8:3f:b0:3c:74:f0:97:cc:23:17: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A4:31:3F:50:B3:9F:A8:12:89:E5:86:D6:60:63:FF:A2:33:27:F4 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b0:e9:8a:6f:68:74:cb:95:97:45:bd:ae:99:87:ec:da:aa: 52:6f:56:f5:f5:df:83:eb:30:07:14:f3:ca:b2:4f:3b:1a:59: d4:77:0d:62:57:5e:2f:62:0f:cd:be:7f:9b:f9:52:b9:7b:6c: 96:94:1b:8c:1d:01:e7:a3:30:30:83:ae:f4:49:9e:72:54:6b: 64:60:ca:83:06:bb:7e:ef:2b:2f:82:77:a2:ab:2a:88:d1:9a: e3:1e:0e:ee:5f:3f:0e:3f:0b:d5:db:d3:d4:f9:ae:88:dc:a0: 21:fb:37:f1:47:af:39:7b:d3:76:1d:be:9e:f8:2b:98:75:7d: a5:cd:06:f8:77:d6:6e:33:4c:5f:c8:31:2f:0e:ef:34:2e:81: 6c:eb:df:4b:f2:d5:5d:d2:ee:2d:fa:27:3a:20:a4:23:c1:56: cf:2b:5e:35:23:e0:c0:ce:8d:e7:a7:3b:3b:0e:1a:09:a7:96: 10:e1:db:e7:12:eb:8a:c0:db:9b:cc:20:d0:7e:54:81:16:0d: c2:91:88:da:32:07:15:0a:d8:a1:94:b2:f5:34:f1:c0:3b:4b: 29:28:02:3b:c1:49:f1:96:8f:97:e6:20:7a:2e:90:75:43:63: 08:c0:c7:e5:67:7b:39:2f:2b:ca:eb:82:91:00:d8:bd:8e:4f: a1:a9:39:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoMUU0OEVGRTUzRTYyRUQyMDRCQTdBNjk0Mzg0Q0JBQzky NDY3OTRBNzAeFw0yNTA3MDEwNzU0MjVaFw0yNTA3MDgwNzU0MjVaMBgxFjAUBgNV BAMTDTY4NjM5NDMxLTQzZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmC1EiFoW2kS4PyHwdfmQ1bdD27NoMYmPCiOAMNASf/SBGyxc5bBcth2DvF+4f rsXqoQ6HE+BQCkhkSHTgDjsDvcrraK7dtbm6GZPeEnMWDo9fXPr1J6uH8Cx0B21b tNguDvmNEP8NSPRY/F7L1r0hbiAjQptGRpCw8zhxjlh4AOq7g06JZMJud0hVdPYj wlERdM+zEG1hjoB80pQWg4ihPwLqmkEBjnL37RFC5yAx1rhI4Iq5xuVF+sgazJOX fBLHFboikEvUySfUstH5uybb40A8WPd/Z+xBiAiW+nJz2aCEvJ30S2csbELbCe9f oiHzcd4E+D+wPHTwl8wjF2jbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/KQxP1Cz n6gSieWG1mBj/6IzJ/QwHwYDVR0jBBgwFoAUHkjv5T5i7SBLp6aUOEy6ySRnlKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0I5NTg4QkFDQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGtqdjVUNWk3U0JMcDZhVU9FeTZ5U1JubEtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0I5NTg4QkFDQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NC THA2YVVPRXk2eVNSbmxLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASw6YpvaHTLlZdFva6Zh+zaqlJvVvX134PrMAcU88qyTzsaWdR3DWJX Xi9iD82+f5v5Url7bJaUG4wdAeejMDCDrvRJnnJUa2RgyoMGu37vKy+Cd6KrKojR muMeDu5fPw4/C9Xb09T5rojcoCH7N/FHrzl703Ydvp74K5h1faXNBvh31m4zTF/I MS8O7zQugWzr30vy1V3S7i36JzogpCPBVs8rXjUj4MDOjeenOzsOGgmnlhDh2+cS 64rA25vMINB+VIEWDcKRiNoyBxUK2KGUsvU08cA7SykoAjvBSfGWj5fmIHoukHVD YwjAx+VnezkvK8rrgpEA2L2OT6GpORY= -----END CERTIFICATE-----Generated at Thu Jul 3 08:02:32 2025 by rpki-client