$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: Vo5FebaaYp0aERItqqJY6+nPv8oQV1H7gfZrgLXPHpc= Subject key identifier: AD:90:0B:00:CA:F6:23:BF:6C:C9:64:F9:9A:1A:B3:EB:FC:0E:F9:54 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0A01 Signing time: Fri 04 Jul 2025 20:13:37 +0000 Manifest this update: Fri 04 Jul 2025 20:13:37 +0000 Manifest next update: Fri 11 Jul 2025 20:13:37 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: PRHUYK077VmYVa5wjmKD8M0Z5rBHMq9KUEw8SsItfrU=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Jul 4 20:13:37 2025 GMT Not After : Jul 11 20:13:37 2025 GMT Subject: CN=686835f1-fc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:37:3e:ad:08:e6:7a:b9:10:50:90:57:ee:c8: 5d:60:e7:23:25:a1:81:ab:06:0b:7d:3f:53:38:b9: f5:23:72:29:1b:96:5d:7d:23:6f:9f:02:b9:5e:3e: b9:8b:09:24:6f:14:37:af:b8:83:b7:9f:66:3f:2e: e5:09:4a:b1:15:91:8c:0b:09:a2:f6:92:f3:ee:71: e7:eb:bd:9a:ca:15:75:f9:19:87:eb:a4:93:b9:4e: f5:19:0b:33:1c:c7:ac:58:c1:25:e4:8a:2d:7f:8c: e2:2b:e0:b6:7e:ba:b6:9a:9f:3e:32:e6:71:9e:ce: d7:d1:c6:d6:5a:4a:4f:78:ab:fd:a8:af:cb:32:48: 7c:52:ee:83:1a:40:1c:97:3e:c6:b4:3b:5b:82:3f: 8f:6d:6a:49:22:57:56:1f:ce:e1:f7:b3:32:69:3f: ae:05:29:5c:2b:82:7a:03:1e:97:7b:2b:e6:14:ba: 8f:3c:9e:70:10:75:3f:c3:aa:0d:5e:09:6b:e8:a0: 59:bc:42:9e:44:35:1e:d1:de:ed:66:90:ac:9b:63: 12:f0:0c:22:8f:eb:09:c6:61:d1:af:c4:16:c4:92: e2:23:18:3c:6f:b9:23:86:ce:52:90:37:37:38:9c: 76:23:9b:81:d1:0b:e0:8e:4d:fe:d0:95:e6:f5:50: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:0B:00:CA:F6:23:BF:6C:C9:64:F9:9A:1A:B3:EB:FC:0E:F9:54 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:24:30:19:3e:bd:39:36:04:eb:7f:de:05:cf:49:6e:81:66: a5:55:3b:b9:ca:c2:fd:60:50:4c:c0:e7:52:c9:49:0e:28:da: ad:86:b3:86:7f:f3:c9:46:51:c6:22:dd:46:10:4d:00:1b:48: 4e:50:a7:00:28:a1:96:66:d9:f1:50:60:4a:2e:8b:2c:a7:f4: 58:3c:c1:df:9a:04:2e:11:70:8e:6d:89:6f:11:10:7c:0e:5e: 50:f9:62:db:6e:e9:37:24:57:09:a4:34:7d:39:aa:f9:ac:66: 54:66:ef:c6:db:29:e6:fa:1d:df:ea:0d:a2:07:bd:0a:6f:72: 0a:69:f2:4f:9f:3a:aa:57:91:49:48:a7:10:27:1a:42:a5:76: da:68:86:00:95:8f:31:02:75:13:61:30:ea:da:d6:d5:fe:9c: f4:49:fc:08:38:fe:44:95:10:bf:54:b9:27:3a:36:46:d9:df: b6:d4:ce:1b:63:36:08:8e:1a:b3:88:81:41:53:29:1e:e8:76: 09:e1:08:7d:18:c6:25:e4:fb:79:c2:8b:d4:bc:f5:3c:91:25: 64:64:d5:fb:b4:ec:7f:be:4f:5a:66:59:9f:8f:f8:74:6e:ac: 8d:c8:9c:7f:ba:28:62:0b:fa:88:c1:62:b9:b8:b9:1d:d4:bb: bd:f2:97:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjUwNzA0MjAxMzM3WhcNMjUwNzExMjAxMzM3WjAYMRYwFAYD VQQDEw02ODY4MzVmMS1mYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jc+rQjmerkQUJBX7shdYOcjJaGBqwYLfT9TOLn1I3IpG5ZdfSNvnwK5Xj65 iwkkbxQ3r7iDt59mPy7lCUqxFZGMCwmi9pLz7nHn672ayhV1+RmH66STuU71GQsz HMesWMEl5Iotf4ziK+C2frq2mp8+MuZxns7X0cbWWkpPeKv9qK/LMkh8Uu6DGkAc lz7GtDtbgj+PbWpJIldWH87h97MyaT+uBSlcK4J6Ax6XeyvmFLqPPJ5wEHU/w6oN Xglr6KBZvEKeRDUe0d7tZpCsm2MS8Awij+sJxmHRr8QWxJLiIxg8b7kjhs5SkDc3 OJx2I5uB0Qvgjk3+0JXm9VAepQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2QCwDK 9iO/bMlk+Zoas+v8DvlUMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApJDAZPr05NgTrf94Fz0lugWalVTu5ysL9YFBMwOdSyUkOKNqthrOG f/PJRlHGIt1GEE0AG0hOUKcAKKGWZtnxUGBKLossp/RYPMHfmgQuEXCObYlvERB8 Dl5Q+WLbbuk3JFcJpDR9Oar5rGZUZu/G2ynm+h3f6g2iB70Kb3IKafJPnzqqV5FJ SKcQJxpCpXbaaIYAlY8xAnUTYTDq2tbV/pz0SfwIOP5ElRC/VLknOjZG2d+21M4b YzYIjhqziIFBUyke6HYJ4Qh9GMYl5Pt5wovUvPU8kSVkZNX7tOx/vk9aZlmfj/h0 bqyNyJx/uihiC/qIwWK5uLkd1Lu98pcs -----END CERTIFICATE-----Generated at Sat Jul 5 03:30:55 2025 by rpki-client