$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: CzIaOQgHRsMjDaF4VrPZv5m05gSvHYedICjZ8nHhuCc= Subject key identifier: AC:1F:98:61:AC:77:7B:0A:27:D2:DE:0E:58:AD:63:51:1D:DF:5C:37 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0FE8 Signing time: Wed 02 Jul 2025 17:40:44 +0000 Manifest this update: Wed 02 Jul 2025 17:40:43 +0000 Manifest next update: Wed 09 Jul 2025 17:40:43 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: PsEX4a7w95ZVzMInpkladaj8F5uRva8cKCmBxAcQvHY=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Jul 2 17:40:43 2025 GMT Not After : Jul 9 17:40:43 2025 GMT Subject: CN=68656f1c-294e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:2b:68:f4:12:83:3f:79:ba:bb:3b:56:b8: 83:da:46:22:27:ea:d7:84:cb:ac:05:a7:c9:b4:30: 32:5d:a8:62:fc:da:f3:20:45:3f:cb:f5:fb:f3:07: 4b:34:ec:03:19:a0:56:ed:f8:c2:d8:61:09:19:11: 71:ad:e2:83:c5:d1:50:97:56:9b:74:a1:bb:f1:c4: 54:d3:5d:e4:b7:79:01:e5:df:59:9f:5a:60:ee:b0: 4b:87:e0:43:b5:39:79:94:06:9b:f5:56:67:55:85: cf:04:73:30:72:ce:d5:46:26:3c:ad:ff:90:2a:58: 06:20:2c:ef:fc:a8:ba:a9:c4:3f:1b:a8:fc:c7:f0: 40:d7:06:fd:e1:12:01:9d:7c:47:2b:0b:47:d2:02: 93:e4:bb:c1:e1:ac:f9:c2:8e:73:ca:52:c1:8e:0b: 7c:7f:9f:2f:47:cd:ed:11:be:74:a0:9a:74:d0:e9: cf:27:94:c1:c7:53:a6:d1:f3:dd:d8:41:d4:b5:3f: 96:82:c9:a4:c4:e4:12:20:f2:22:e5:7f:45:06:be: aa:58:07:78:7e:58:c3:49:9b:c9:81:60:e5:3d:cb: 4a:2f:d4:94:02:5c:ff:53:64:af:8c:f7:7b:a0:06: e0:ea:2d:06:8c:97:5f:a5:7b:1d:c4:e8:36:02:54: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:98:61:AC:77:7B:0A:27:D2:DE:0E:58:AD:63:51:1D:DF:5C:37 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d4:e4:07:e3:97:85:d1:a8:6c:a7:cc:45:92:8e:dc:e4:31: 45:ad:7e:27:34:9c:17:bc:d4:fd:21:01:dc:bb:f3:60:6c:72: 11:a6:2e:c6:93:ee:69:78:18:19:f0:1e:cd:2e:ef:d9:0c:66: b9:21:f1:f4:bf:94:cb:15:74:0c:78:6d:a9:9f:da:c4:97:9e: c1:65:13:17:8e:68:1b:fb:19:65:6e:31:e3:39:2b:af:64:61: 0d:cd:a7:98:64:c9:98:52:81:81:50:8e:1b:ed:46:bd:47:77: a1:fc:d6:b4:1e:81:23:27:b6:d4:b9:bd:cc:e5:1a:29:f4:27: 87:af:f5:f1:33:51:42:bb:36:f4:d2:7e:c8:10:43:6f:35:b4: d0:ac:83:45:ef:7d:9d:ac:e4:4e:66:f9:c6:5b:4c:70:2c:bd: bc:b5:7b:a2:8d:37:ad:c5:59:39:1d:ba:ee:2c:17:99:b8:79: ee:a3:56:47:62:3f:27:0e:46:f2:e4:87:cf:44:a1:d7:6e:27: 9d:e9:c4:fd:8f:77:43:0b:79:d0:bc:81:c6:19:b5:3d:42:6d: a7:2b:ec:ac:50:68:d2:bc:00:a7:14:c1:1b:fd:4f:11:ce:24: 42:c8:2b:78:58:46:58:ea:ad:8d:f0:dd:4d:d9:af:57:9f:3c: e3:31:ea:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUwNzAyMTc0MDQzWhcNMjUwNzA5MTc0MDQzWjAYMRYwFAYD VQQDEw02ODY1NmYxYy0yOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0J0raPQSgz95urs7VriD2kYiJ+rXhMusBafJtDAyXahi/NrzIEU/y/X78wdL NOwDGaBW7fjC2GEJGRFxreKDxdFQl1abdKG78cRU013kt3kB5d9Zn1pg7rBLh+BD tTl5lAab9VZnVYXPBHMwcs7VRiY8rf+QKlgGICzv/Ki6qcQ/G6j8x/BA1wb94RIB nXxHKwtH0gKT5LvB4az5wo5zylLBjgt8f58vR83tEb50oJp00OnPJ5TBx1Om0fPd 2EHUtT+WgsmkxOQSIPIi5X9FBr6qWAd4fljDSZvJgWDlPctKL9SUAlz/U2SvjPd7 oAbg6i0GjJdfpXsdxOg2AlTYpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwfmGGs d3sKJ9LeDlitY1Ed31w3MB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA91OQH45eF0ahsp8xFko7c5DFFrX4nNJwXvNT9IQHcu/NgbHIRpi7G k+5peBgZ8B7NLu/ZDGa5IfH0v5TLFXQMeG2pn9rEl57BZRMXjmgb+xllbjHjOSuv ZGENzaeYZMmYUoGBUI4b7Ua9R3eh/Na0HoEjJ7bUub3M5Rop9CeHr/XxM1FCuzb0 0n7IEENvNbTQrINF732drOROZvnGW0xwLL28tXuijTetxVk5HbruLBeZuHnuo1ZH Yj8nDkby5IfPRKHXbied6cT9j3dDC3nQvIHGGbU9Qm2nK+ysUGjSvACnFMEb/U8R ziRCyCt4WEZY6q2N8N1N2a9XnzzjMep7 -----END CERTIFICATE-----Generated at Wed Jul 2 19:56:44 2025 by rpki-client