$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: zaDyMnYK0SBdOILde+inbUXxfs/cf4AF/4pEGcWrjNM= Subject key identifier: CC:C0:83:54:C2:52:74:D8:B6:FA:61:A5:28:87:93:CD:B7:46:E0:88 Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 63 Signing time: Sat 19 Jul 2025 07:16:18 +0000 Manifest this update: Sat 19 Jul 2025 07:16:18 +0000 Manifest next update: Sat 26 Jul 2025 07:16:18 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: GUBQshSdk5rrPRezvgH/lD57TTPeTBhrRoDE0pCGr4E=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: Ih+3aaDaOz/d8dCkRSwBGnuzOxqfvTbU/QJJ8s8nf54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Jul 19 07:16:18 2025 GMT Not After : Jul 26 07:16:18 2025 GMT Subject: CN=687b4642-1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:b3:19:9e:01:2d:28:fe:98:4b:3a:b1:5c: 0e:9c:26:07:97:a2:c4:b5:37:12:1e:7e:83:62:a0: 84:08:53:98:55:33:fc:ec:83:c2:28:a8:d9:ff:14: 1e:82:2c:f4:6c:1f:70:b6:07:69:d1:91:2e:7e:f5: 96:18:c3:92:7f:ee:a5:23:db:a7:29:5c:2a:1e:d3: 16:2f:8c:bb:40:28:77:92:ad:20:50:a3:45:12:0c: 83:5f:35:98:19:31:fe:3e:54:12:90:25:14:e0:0d: 57:38:2f:84:3a:52:c3:b1:8e:e2:79:e0:36:53:b1: e0:aa:3a:6d:99:c2:1c:68:80:16:e4:9e:f1:40:2f: ba:b1:ca:d8:1a:f0:a3:5f:d3:22:c8:99:34:0a:4e: da:f2:f4:ea:0e:c9:ff:b4:11:e0:ee:be:63:ac:7c: 63:5a:13:4d:7f:34:3d:41:4d:ee:89:9b:37:f1:68: da:3c:4f:05:40:8b:5c:b4:8d:11:c1:bb:a7:d8:0b: a4:c0:21:26:2c:05:5f:7a:67:05:09:44:34:1f:5d: 47:36:ab:8b:78:0f:08:6d:7f:4d:45:bc:7b:95:61: 69:df:be:15:ec:49:d8:d3:9b:87:60:f4:a3:a6:31: 15:69:59:ce:df:e7:0b:a2:c1:c2:6c:34:03:a6:f0: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C0:83:54:C2:52:74:D8:B6:FA:61:A5:28:87:93:CD:B7:46:E0:88 X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bc:6c:19:82:e6:e8:e3:cb:d0:fa:ec:05:32:6e:18:30:e2: 8e:53:16:9d:98:18:8b:4e:be:01:b2:a7:0b:9e:8d:28:e1:06: 02:2c:4a:cb:49:8e:6c:dc:08:c7:94:0e:bd:3c:c4:71:51:b8: 30:a4:4f:43:ae:4e:d3:ab:d6:de:67:ca:55:c6:84:c5:80:be: fe:eb:c1:fc:4a:81:21:28:3e:60:06:a1:f8:2f:3d:71:ad:4e: 3e:ef:aa:9b:29:60:72:70:56:f1:8b:28:bc:8c:f4:dd:b5:75: db:3d:22:7e:db:54:2e:65:d2:cc:2a:eb:81:dd:dd:24:4d:67: 3b:a1:4c:91:bc:18:76:e2:22:89:c8:4f:05:b1:d6:0f:af:93: 2e:30:65:d7:05:d1:87:b3:0e:76:0c:ae:82:56:a4:e6:79:a3: 73:29:21:aa:e9:00:8b:d5:ba:2d:a9:a2:a1:87:c6:4f:2d:b9: 64:8c:c8:50:10:33:aa:50:46:30:27:04:f4:98:4d:b8:85:93: f9:0a:75:0d:f0:c6:dc:ab:a1:da:4e:dc:c5:75:9e:27:32:b1: fc:95:24:3a:f2:43:1c:1b:3f:68:2b:7d:d8:1b:16:8d:d6:a2: f5:6f:05:47:6e:33:97:38:2c:d1:e2:4e:1f:65:c7:5c:88:ae: 40:82:b6:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoMUU0OEVGRTUzRTYyRUQyMDRCQTdBNjk0Mzg0Q0JBQzky NDY3OTRBNzAeFw0yNTA3MTkwNzE2MThaFw0yNTA3MjYwNzE2MThaMBgxFjAUBgNV BAMTDTY4N2I0NjQyLTE5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbNLMZngEtKP6YSzqxXA6cJgeXosS1NxIefoNioIQIU5hVM/zsg8IoqNn/FB6C LPRsH3C2B2nRkS5+9ZYYw5J/7qUj26cpXCoe0xYvjLtAKHeSrSBQo0USDINfNZgZ Mf4+VBKQJRTgDVc4L4Q6UsOxjuJ54DZTseCqOm2ZwhxogBbknvFAL7qxytga8KNf 0yLImTQKTtry9OoOyf+0EeDuvmOsfGNaE01/ND1BTe6JmzfxaNo8TwVAi1y0jRHB u6fYC6TAISYsBV96ZwUJRDQfXUc2q4t4Dwhtf01FvHuVYWnfvhXsSdjTm4dg9KOm MRVpWc7f5wuiwcJsNAOm8HsbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzMCDVMJS dNi2+mGlKIeTzbdG4IgwHwYDVR0jBBgwFoAUHkjv5T5i7SBLp6aUOEy6ySRnlKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0I5NTg4QkFDQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxL Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGtqdjVUNWk3U0JMcDZhVU9FeTZ5U1JubEtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0I5NTg4QkFDQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL0hranY1VDVpN1NC THA2YVVPRXk2eVNSbmxLYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD68bBmC5ujjy9D67AUybhgw4o5TFp2YGItOvgGypwuejSjhBgIsSstJ jmzcCMeUDr08xHFRuDCkT0OuTtOr1t5nylXGhMWAvv7rwfxKgSEoPmAGofgvPXGt Tj7vqpspYHJwVvGLKLyM9N21dds9In7bVC5l0swq64Hd3SRNZzuhTJG8GHbiIonI TwWx1g+vky4wZdcF0YezDnYMroJWpOZ5o3MpIarpAIvVui2poqGHxk8tuWSMyFAQ M6pQRjAnBPSYTbiFk/kKdQ3wxtyrodpO3MV1nicysfyVJDryQxwbP2grfdgbFo3W ovVvBUduM5c4LNHiTh9lx1yIrkCCtgo= -----END CERTIFICATE-----Generated at Sun Jul 20 06:35:09 2025 by rpki-client