$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: L1x+Vv7QDq48c1VUoOMTRFsdNwQHZ6VUVVZHW9ROzAQ= Subject key identifier: D7:4B:D7:BC:40:9C:D6:A7:B7:B8:4A:7F:7B:E9:81:92:E2:7D:A9:5B Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: 8E Signing time: Sat 19 Jul 2025 06:42:46 +0000 Manifest this update: Sat 19 Jul 2025 06:42:46 +0000 Manifest next update: Sat 26 Jul 2025 06:42:46 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: WrNFyVmAzeMOZ/FoC3X0H2rvU+w5idZqMGCSLcjr60k=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: KqwFgUGGWmZ6w/oc9lE/9i1V2X5VufgZVt2vhykEeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Jul 19 06:42:46 2025 GMT Not After : Jul 26 06:42:46 2025 GMT Subject: CN=687b3e66-c563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:9f:5c:8a:06:4e:39:d4:ac:5d:4e:2e:da: 7c:64:f3:d2:6f:bf:c0:a8:18:79:0f:d4:84:ce:36: 0b:11:43:23:57:35:66:df:88:b7:be:d3:ec:f3:36: e3:36:16:83:c5:46:97:d6:f5:1c:00:ba:11:85:4e: 58:af:1d:bd:77:97:b2:c9:a3:ef:a5:3b:b8:74:93: 0d:37:2b:84:65:22:fa:e9:89:f4:49:3e:70:b6:30: 37:8e:de:c8:bf:a9:b6:6f:43:8e:1c:74:15:30:48: 10:cb:01:a7:d2:98:f8:ef:12:6b:8a:6e:df:69:96: 55:c9:53:0e:d0:ee:b7:04:96:1e:41:7c:c1:e4:f8: 8e:cf:ff:6a:d6:b6:00:e7:45:04:b2:82:1a:61:16: b2:55:4b:e7:40:82:06:c6:9f:cb:c2:50:10:b3:c0: 5b:03:b4:98:2c:a0:5e:28:1b:cc:8b:e5:18:e0:af: 16:f6:ac:c5:d5:dd:6d:96:90:25:f9:55:6a:fa:7c: 44:59:f8:18:66:72:98:78:05:7a:9e:9b:6c:12:d2: 9d:e2:cd:45:20:d6:5d:be:ef:ca:b4:e6:cb:59:1b: 9c:2c:74:b5:00:ce:8b:da:33:fd:2d:aa:f8:23:d1: a8:e6:a1:f6:7c:1a:64:c8:53:51:c9:21:8a:fa:ea: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4B:D7:BC:40:9C:D6:A7:B7:B8:4A:7F:7B:E9:81:92:E2:7D:A9:5B X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:43:4e:91:c5:8b:b5:1b:7a:7b:e4:eb:be:31:c9:9a:e7:49: 7c:ce:b6:38:48:41:8a:f2:0f:64:42:1d:f2:23:d0:31:7b:94: 32:8f:ea:b5:cd:c6:1d:24:d5:6a:a2:13:76:4c:bc:cb:5c:18: 3c:ba:f3:14:f8:93:b4:ee:1d:c6:5c:85:f4:23:a8:7e:37:8a: 45:72:05:a4:7d:c3:f8:d8:45:5a:9e:d6:6f:4c:f9:75:f7:dd: cd:f8:8e:81:ad:dd:d8:8d:85:e5:46:2d:89:77:02:16:17:79: 9d:5d:9f:55:05:76:61:49:5a:31:f5:d2:58:be:14:3e:39:43: f5:05:cb:c2:fb:eb:ad:f7:88:34:4e:c9:64:56:d5:a6:d0:06: ff:cb:13:c0:9f:e1:37:c1:9a:01:f7:54:31:e5:9c:43:f3:f6: 7c:d5:3e:15:f3:15:d5:1f:86:65:b0:13:99:ba:30:e9:40:a9: c6:6a:9c:41:4b:be:64:1c:cd:c2:7d:4a:ab:44:41:ac:ad:3a: c7:d2:9c:a8:85:f1:cb:0a:06:ba:3a:1c:a4:9e:58:b0:39:3a: f4:f8:44:5e:cb:26:4e:a5:e8:30:51:eb:44:44:fa:d4:b2:3a: 56:46:da:14:dc:8b:52:38:44:b5:73:00:8c:49:76:50:34:51: 71:76:dc:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjUwNzE5MDY0MjQ2WhcNMjUwNzI2MDY0MjQ2WjAYMRYwFAYD VQQDEw02ODdiM2U2Ni1jNTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMmfXIoGTjnUrF1OLtp8ZPPSb7/AqBh5D9SEzjYLEUMjVzVm34i3vtPs8zbj NhaDxUaX1vUcALoRhU5Yrx29d5eyyaPvpTu4dJMNNyuEZSL66Yn0ST5wtjA3jt7I v6m2b0OOHHQVMEgQywGn0pj47xJrim7faZZVyVMO0O63BJYeQXzB5PiOz/9q1rYA 50UEsoIaYRayVUvnQIIGxp/LwlAQs8BbA7SYLKBeKBvMi+UY4K8W9qzF1d1tlpAl +VVq+nxEWfgYZnKYeAV6nptsEtKd4s1FINZdvu/KtObLWRucLHS1AM6L2jP9Lar4 I9Go5qH2fBpkyFNRySGK+uoF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdL17xA nNant7hKf3vpgZLifalbMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHQ06RxYu1G3p75Ou+Mcma50l8zrY4SEGK8g9kQh3yI9Axe5Qyj+q1 zcYdJNVqohN2TLzLXBg8uvMU+JO07h3GXIX0I6h+N4pFcgWkfcP42EVantZvTPl1 993N+I6Brd3YjYXlRi2JdwIWF3mdXZ9VBXZhSVox9dJYvhQ+OUP1BcvC++ut94g0 TslkVtWm0Ab/yxPAn+E3wZoB91Qx5ZxD8/Z81T4V8xXVH4ZlsBOZujDpQKnGapxB S75kHM3CfUqrREGsrTrH0pyohfHLCga6OhyknliwOTr0+EReyyZOpegwUetERPrU sjpWRtoU3ItSOES1cwCMSXZQNFFxdtwz -----END CERTIFICATE-----Generated at Sun Jul 20 07:13:48 2025 by rpki-client