$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: k1DsHFcdAmPItU3e7bbiyPWCZJim+BJi02js+iL/2as= Subject key identifier: 60:38:5D:18:FF:CC:71:99:F8:4D:C2:FC:E4:CF:54:BF:63:83:AA:39 Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 04C5 Signing time: Sat 19 Jul 2025 00:13:18 +0000 Manifest this update: Sat 19 Jul 2025 00:13:17 +0000 Manifest next update: Sat 26 Jul 2025 00:13:17 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: owvnuHfw9pWXj3IQVg3UlmJl8i4o1ag9yJq/ZVt+UL8=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: mphoj0oAxZzkXNiDjzgy+jQGtIB0RRer8k5eq/mlzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Jul 19 00:13:17 2025 GMT Not After : Jul 26 00:13:17 2025 GMT Subject: CN=687ae31d-6581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:ce:64:a4:3a:19:85:7f:c9:18:9c:cf:cf: b3:45:51:88:7b:11:72:aa:6a:f3:f3:a4:52:b0:59: 53:27:ad:d9:81:90:13:32:02:8a:d5:98:8e:d5:eb: 72:28:33:83:a3:ef:c7:9a:a9:21:6d:5d:ff:94:63: 66:01:a4:b3:cb:65:62:d7:0e:fb:e0:9c:e0:07:52: 37:a9:ae:c6:8a:34:09:60:61:3a:8c:5a:3b:e7:fe: 32:d2:b1:09:25:e7:66:fa:92:6c:39:bb:4e:d1:13: 70:af:6c:ef:24:11:61:2c:e0:3f:63:d7:09:9f:2b: 98:61:54:78:09:ce:74:ed:28:ac:ce:54:3f:49:21: bf:92:e6:db:a6:1e:de:71:16:16:2c:6a:56:8b:34: 8e:d3:d7:27:5f:a6:85:13:6b:15:4c:c7:a2:c3:14: 1a:02:c8:32:19:4d:83:f1:68:62:5f:95:d9:cd:f0: df:89:15:07:c7:92:ff:c4:0f:3a:f9:71:a3:4b:6f: 67:1e:89:fe:f1:e4:0d:51:83:3f:7d:e0:89:ff:77: df:0a:7c:46:be:35:24:3c:29:75:00:79:52:0a:49: 09:da:23:33:a7:92:e7:0c:36:40:33:8c:ec:04:c0: a6:1e:4a:5f:9a:27:1b:02:4a:dd:03:53:ee:49:4a: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:5D:18:FF:CC:71:99:F8:4D:C2:FC:E4:CF:54:BF:63:83:AA:39 X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:64:41:0d:02:a1:17:5b:a6:bb:67:6a:db:cd:21:12:85:72: 2d:87:6a:48:34:fa:07:bb:c0:19:e3:1e:e8:cc:7a:5e:96:6c: da:59:8d:41:10:ec:c7:79:a3:65:fd:98:21:5c:da:28:80:89: 37:f5:fa:cb:d9:62:75:f3:1f:f2:03:aa:c8:99:43:39:dd:a1: 3e:a4:3c:3f:72:e9:3a:50:94:96:5a:7e:82:6f:43:5a:81:79: ad:29:f8:3b:37:b6:8f:25:06:bc:83:50:68:f0:f2:69:ee:ae: da:89:03:d2:6d:f2:27:2d:cd:4b:a4:5e:9e:41:c6:e0:1d:6b: d4:f6:f9:17:ff:e4:3b:eb:57:ac:69:f7:bb:cc:a2:15:42:d3: 20:0d:b6:dc:fd:b3:88:ab:3b:3a:62:6d:53:0b:b4:ea:fb:1c: 6f:f6:52:4c:70:96:3e:05:a1:17:0b:4a:86:2c:4f:1c:9d:d4: 62:1d:e1:e4:2d:c0:fa:3b:5b:03:28:d3:c2:79:ab:e7:48:de: 72:d9:46:0c:c9:ab:9d:79:00:a0:e0:5c:5d:03:42:63:44:f7: 38:39:a4:ca:6d:c6:fe:94:85:02:aa:a5:01:64:75:b9:e7:f0: 52:c3:72:9c:3e:69:04:6f:80:1a:03:f0:9c:08:b6:88:bf:84: e8:fc:86:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjUwNzE5MDAxMzE3WhcNMjUwNzI2MDAxMzE3WjAYMRYwFAYD VQQDEw02ODdhZTMxZC02NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMHOZKQ6GYV/yRicz8+zRVGIexFyqmrz86RSsFlTJ63ZgZATMgKK1ZiO1ety KDODo+/HmqkhbV3/lGNmAaSzy2Vi1w774JzgB1I3qa7GijQJYGE6jFo75/4y0rEJ Jedm+pJsObtO0RNwr2zvJBFhLOA/Y9cJnyuYYVR4Cc507SiszlQ/SSG/kubbph7e cRYWLGpWizSO09cnX6aFE2sVTMeiwxQaAsgyGU2D8WhiX5XZzfDfiRUHx5L/xA86 +XGjS29nHon+8eQNUYM/feCJ/3ffCnxGvjUkPCl1AHlSCkkJ2iMzp5LnDDZAM4zs BMCmHkpfmicbAkrdA1PuSUp80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGA4XRj/ zHGZ+E3C/OTPVL9jg6o5MB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtZEENAqEXW6a7Z2rbzSEShXIth2pINPoHu8AZ4x7ozHpelmzaWY1B EOzHeaNl/ZghXNoogIk39frL2WJ18x/yA6rImUM53aE+pDw/cuk6UJSWWn6Cb0Na gXmtKfg7N7aPJQa8g1Bo8PJp7q7aiQPSbfInLc1LpF6eQcbgHWvU9vkX/+Q761es afe7zKIVQtMgDbbc/bOIqzs6Ym1TC7Tq+xxv9lJMcJY+BaEXC0qGLE8cndRiHeHk LcD6O1sDKNPCeavnSN5y2UYMyaudeQCg4FxdA0JjRPc4OaTKbcb+lIUCqqUBZHW5 5/BSw3KcPmkEb4AaA/CcCLaIv4To/IZc -----END CERTIFICATE-----Generated at Sun Jul 20 18:32:12 2025 by rpki-client