$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: soJmdhXpNi4re0fgcAuILoUol3zYcGHwl8kW/OYx4E4= Subject key identifier: D6:4F:30:26:77:94:60:FC:F8:EE:A6:E5:65:CC:FC:98:02:C2:18:5E Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 34AF Signing time: Sun 20 Jul 2025 14:57:24 +0000 Manifest this update: Sun 20 Jul 2025 14:57:24 +0000 Manifest next update: Sun 27 Jul 2025 14:57:24 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: aYV6/YWlxypk/HRGoKDNOa5ZXdWaDUQw4l2ouI9egc8=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: alhBAf8jvRhFefsbDXOa8VjrZGUtci5WGYLgfA9nSPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: Jul 20 14:57:24 2025 GMT Not After : Jul 27 14:57:24 2025 GMT Subject: CN=687d03d4-ce7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:2b:e0:db:c5:7a:87:5f:15:26:68:ad:2e: 58:73:ba:9e:aa:ff:dd:9c:10:f0:ed:05:63:37:4c: 57:4f:ef:4a:35:b6:29:4a:aa:f5:6d:76:b8:0e:93: 52:89:76:58:90:52:2a:78:96:0a:71:78:98:ac:fb: b1:2e:8f:1e:28:2c:2d:3f:97:cb:57:8a:0d:8b:e4: c9:04:44:96:af:da:49:74:8b:16:7e:eb:fc:1b:9d: 9e:f1:81:2c:f0:61:82:74:58:81:c7:ab:73:31:cd: a8:b8:10:4a:e9:1c:74:bb:83:95:2e:f4:0d:df:16: ee:2e:7c:34:32:1a:6a:44:63:5a:13:23:ab:f8:23: a7:7e:71:e1:fc:93:81:9a:85:e3:f6:fb:37:aa:6d: 0e:1c:60:29:60:6e:44:37:85:8a:16:ad:fb:48:be: 63:fb:d6:85:a2:cb:42:1e:bb:ae:b1:1f:18:bf:ed: b0:71:99:17:b5:f9:19:2d:29:6f:10:ce:4d:6e:0b: 75:50:75:de:31:70:f4:31:f6:4d:e8:9e:98:0e:91: b6:60:07:cc:86:98:3b:b8:91:53:02:29:cf:86:e3: f6:d1:11:a1:b6:06:36:e4:f1:d8:47:a3:46:04:fd: e7:17:27:ba:72:2b:32:be:d7:72:49:d6:85:0f:c2: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4F:30:26:77:94:60:FC:F8:EE:A6:E5:65:CC:FC:98:02:C2:18:5E X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:41:a2:70:e6:e5:5b:8f:21:b2:46:6c:fb:87:bb:74:c2:ef: 81:e3:5a:07:ac:57:65:88:4a:e7:08:8b:bb:0b:b8:f2:78:da: a5:a8:ec:cd:4d:5e:42:85:5e:2a:6f:e4:f2:94:31:94:cd:8e: d3:84:93:dc:9e:e3:f5:23:67:19:3e:c4:c3:aa:ec:58:57:49: 1c:9f:da:e3:82:a4:98:50:67:40:9b:bb:69:85:fb:be:af:cb: 57:79:72:92:54:09:a5:46:d2:bb:85:1a:b4:1f:ab:03:34:43: 60:35:c7:4e:94:32:62:39:59:73:a5:54:2f:66:b0:87:d7:93: c5:58:05:2c:89:e8:7f:48:eb:69:9d:e6:c3:03:15:e2:8a:cb: e6:7b:81:5f:aa:74:fd:a4:10:bb:5c:08:d6:26:77:c4:10:e5: d5:23:9f:83:22:fd:ac:5f:d3:c9:e1:c4:33:07:57:c5:ac:7f: 68:b6:64:0c:a5:bd:c9:9e:f9:d9:35:0f:15:4c:03:a1:bd:68: 29:94:c7:fc:49:98:18:20:2b:f0:99:7b:44:36:31:08:f9:16: ca:d6:b3:57:94:0c:0f:83:e6:7c:8c:a8:e8:42:f9:32:c1:e2: 7f:06:36:9b:cf:9c:5e:e8:23:68:eb:be:6b:23:7c:30:a2:cc: c5:ee:fe:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjUwNzIwMTQ1NzI0WhcNMjUwNzI3MTQ1NzI0WjAYMRYwFAYD VQQDEw02ODdkMDNkNC1jZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3Er4NvFeodfFSZorS5Yc7qeqv/dnBDw7QVjN0xXT+9KNbYpSqr1bXa4DpNS iXZYkFIqeJYKcXiYrPuxLo8eKCwtP5fLV4oNi+TJBESWr9pJdIsWfuv8G52e8YEs 8GGCdFiBx6tzMc2ouBBK6Rx0u4OVLvQN3xbuLnw0MhpqRGNaEyOr+COnfnHh/JOB moXj9vs3qm0OHGApYG5EN4WKFq37SL5j+9aFostCHruusR8Yv+2wcZkXtfkZLSlv EM5Nbgt1UHXeMXD0MfZN6J6YDpG2YAfMhpg7uJFTAinPhuP20RGhtgY25PHYR6NG BP3nFye6cisyvtdySdaFD8LJOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZPMCZ3 lGD8+O6m5WXM/JgCwhheMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoQaJw5uVbjyGyRmz7h7t0wu+B41oHrFdliErnCIu7C7jyeNqlqOzN TV5ChV4qb+TylDGUzY7ThJPcnuP1I2cZPsTDquxYV0kcn9rjgqSYUGdAm7tphfu+ r8tXeXKSVAmlRtK7hRq0H6sDNENgNcdOlDJiOVlzpVQvZrCH15PFWAUsieh/SOtp nebDAxXiisvme4FfqnT9pBC7XAjWJnfEEOXVI5+DIv2sX9PJ4cQzB1fFrH9otmQM pb3JnvnZNQ8VTAOhvWgplMf8SZgYICvwmXtENjEI+RbK1rNXlAwPg+Z8jKjoQvky weJ/Bjabz5xe6CNo675rI3wwoszF7v70 -----END CERTIFICATE-----Generated at Tue Jul 22 03:53:00 2025 by rpki-client