$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft File: HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json) Hash identifier: cGppvtXEmn0msLDTdgpvhmnXvERKtH22jYT+IEVY4NI= Subject key identifier: 2C:FE:D7:9F:00:45:F8:7E:30:E9:97:F6:5C:B8:AA:1A:73:47:E4:76 Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 Certificate issuer: /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft Manifest number: 1E Signing time: Sat 19 Jul 2025 08:09:53 +0000 Manifest this update: Sat 19 Jul 2025 08:09:53 +0000 Manifest next update: Sat 26 Jul 2025 08:09:53 +0000 Files and hashes: 1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: u4hQlENbpT8IzFGiReFkG6Y/e0511xRn47FjlVhFesc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957 Validity Not Before: Jul 19 08:09:53 2025 GMT Not After : Jul 26 08:09:53 2025 GMT Subject: CN=687b52d1-cff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:25:0d:e7:54:9d:30:e6:c7:72:90:fa:19: a7:89:37:eb:51:8d:0d:9a:ef:81:07:93:19:41:b5: 62:c4:cc:28:84:d4:3c:91:cf:73:fb:00:7d:54:ba: 80:b9:27:cc:e8:8d:c4:b9:50:39:60:25:64:f2:a9: 41:3a:23:6b:86:72:68:a9:c1:54:a1:2f:ac:c8:5e: c5:d9:92:22:43:df:d8:c0:c4:82:4c:f0:12:cd:83: 8f:d6:68:b2:36:ca:da:82:63:4e:0f:4e:4b:25:9f: ee:95:2f:a0:3d:1b:d9:d7:72:29:cb:3c:38:e6:e5: 9c:20:2f:d4:4d:1e:8d:8f:e8:47:98:55:10:d5:04: 05:45:14:d0:a3:f4:d2:6e:71:3b:86:5d:ea:2b:3e: c9:58:9d:ab:ed:aa:e1:79:bf:fe:ef:1e:db:c6:d1: a7:77:bf:6d:11:3f:89:e9:4f:8a:04:aa:86:d7:f1: 8a:98:ba:d3:36:53:d5:15:20:ce:c4:4a:74:2e:8d: ba:1e:5e:da:af:59:22:a7:61:49:a2:44:00:d0:da: 1e:f7:de:db:53:1b:47:21:da:56:c5:51:9d:d0:4a: fd:01:bd:98:90:b2:33:e8:24:b8:3a:ef:9e:83:b7: e3:de:6f:49:b7:78:6c:a0:e6:4d:77:e5:b3:41:98: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FE:D7:9F:00:45:F8:7E:30:E9:97:F6:5C:B8:AA:1A:73:47:E4:76 X509v3 Authority Key Identifier: keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:dc:1f:0b:a9:b0:7d:37:ab:cf:d2:c7:f2:e1:20:54:8b:7c: 44:67:21:ce:c1:99:4a:e9:17:10:36:6d:34:bb:6e:18:b0:e3: e8:78:95:df:5f:68:a8:db:97:4e:af:fe:2e:e1:2b:cd:97:d1: be:52:a6:ff:eb:3a:a1:92:aa:62:5b:00:bd:7c:89:aa:9b:0b: fd:c6:54:25:0a:9c:28:bf:02:69:4a:94:53:c0:15:b5:4b:60: 7c:c4:3b:e7:60:fd:25:14:dd:43:a5:0b:6c:4e:63:5d:23:8c: b0:f4:df:4f:cd:2c:41:f9:e1:b9:50:07:7c:ac:1b:21:1a:7b: 3d:8b:0a:55:9b:b6:8a:99:95:89:be:a2:f2:0f:00:84:6b:31: 6a:ba:68:44:8a:9b:ea:1b:94:4a:a9:24:51:89:47:2b:75:26: 65:12:12:1f:a0:10:da:00:b0:26:95:4c:85:44:eb:fa:a1:61: 0b:13:dc:f0:cc:8f:e1:be:fb:5d:7d:9c:35:db:0e:39:5b:d8: 5b:3f:1b:34:17:06:28:f4:e4:0b:1b:be:03:b7:43:b0:08:fa: 10:04:d1:b9:04:24:c2:3c:08:da:3d:e8:31:2d:b9:60:7a:fe: 3e:62:34:17:12:8e:b2:57:1d:3a:b9:55:e4:80:85:ed:d0:8e: fa:8d:74:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoMUQwREFDMTFFRDgyRTM1QzIzQjBDQkVGRkJFRTAwNjI2 M0IwOTk1NzAeFw0yNTA3MTkwODA5NTNaFw0yNTA3MjYwODA5NTNaMBgxFjAUBgNV BAMTDTY4N2I1MmQxLWNmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/WyUN51SdMObHcpD6GaeJN+tRjQ2a74EHkxlBtWLEzCiE1DyRz3P7AH1UuoC5 J8zojcS5UDlgJWTyqUE6I2uGcmipwVShL6zIXsXZkiJD39jAxIJM8BLNg4/WaLI2 ytqCY04PTksln+6VL6A9G9nXcinLPDjm5ZwgL9RNHo2P6EeYVRDVBAVFFNCj9NJu cTuGXeorPslYnavtquF5v/7vHtvG0ad3v20RP4npT4oEqobX8YqYutM2U9UVIM7E SnQujboeXtqvWSKnYUmiRADQ2h733ttTG0ch2lbFUZ3QSv0BvZiQsjPoJLg6756D t+Peb0m3eGyg5k135bNBmKbBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULP7XnwBF +H4w6Zf2XLiqGnNH5HYwHwYDVR0jBBgwFoAUHQ2sEe2C41wjsMvv++4AYmOwmVcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzVBRkIxNDhFMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL0hRMnNFZTJDNDF3anNNdnYtLTRBWW1Pd21W Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFEyc0VlMkM0MXdqc012di0tNEFZbU93bVZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB OUMwLzVBRkIxNDhFMzg4MjExRjA4Q0NCMTg2NkM0RjlBRTAyL0hRMnNFZTJDNDF3 anNNdnYtLTRBWW1Pd21WYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3cHwupsH03q8/Sx/LhIFSLfERnIc7BmUrpFxA2bTS7bhiw4+h4ld9f aKjbl06v/i7hK82X0b5Spv/rOqGSqmJbAL18iaqbC/3GVCUKnCi/AmlKlFPAFbVL YHzEO+dg/SUU3UOlC2xOY10jjLD030/NLEH54blQB3ysGyEaez2LClWbtoqZlYm+ ovIPAIRrMWq6aESKm+oblEqpJFGJRyt1JmUSEh+gENoAsCaVTIVE6/qhYQsT3PDM j+G++119nDXbDjlb2Fs/GzQXBij05AsbvgO3Q7AI+hAE0bkEJMI8CNo96DEtuWB6 /j5iNBcSjrJXHTq5VeSAhe3QjvqNdOs= -----END CERTIFICATE-----Generated at Mon Jul 21 05:58:43 2025 by rpki-client