$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: Oebf/CITuCiEjY6qmSboUBN2dqy5/ko0LB/YJMupTV0= Subject key identifier: 34:AA:48:AA:ED:90:46:85:83:D3:40:14:ED:16:03:D5:AE:4A:EB:0D Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0FF0 Signing time: Fri 18 Jul 2025 17:37:55 +0000 Manifest this update: Fri 18 Jul 2025 17:37:54 +0000 Manifest next update: Fri 25 Jul 2025 17:37:54 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: f5Dhqdu3i+7beVPg+XvzTZzSceoT7ycXw4Z6Tbp+xrg=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4089 (0xff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Jul 18 17:37:54 2025 GMT Not After : Jul 25 17:37:54 2025 GMT Subject: CN=687a8672-68f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:af:9b:3b:27:44:46:58:44:bd:0d:43:6d: 7e:8e:e7:08:b8:d4:e3:44:89:36:68:9e:56:f3:66: 6b:60:d2:dc:85:a8:61:b6:0f:21:92:70:da:18:ad: 4f:61:94:e1:b8:29:5e:8e:c0:80:93:b6:77:86:18: 0a:37:72:bd:02:cb:f0:7c:fe:5c:e7:ff:cd:71:40: fb:e1:63:5e:fb:33:9a:9e:af:28:95:12:cf:87:2c: fe:07:ae:51:96:51:a7:fb:8e:43:9a:7d:99:64:9b: c7:4a:5c:39:b4:6e:b7:ba:a0:03:50:fe:9b:6b:eb: 88:d2:84:ed:dd:5a:c9:80:b1:f3:d7:31:56:5a:1a: cf:ec:b3:f6:ee:36:be:b3:ea:29:05:8a:09:6e:16: a8:dc:b6:b9:d0:26:f9:18:b2:2e:7c:23:21:18:c2: 72:a1:f2:3d:fb:af:84:50:36:05:00:e5:f2:de:68: 80:4d:1e:ca:f3:94:e4:2a:96:1d:4c:37:7e:9b:a7: 22:9a:46:f8:29:c7:88:8b:2b:0c:59:fc:16:ef:22: 79:0c:7b:e0:26:b6:ad:ee:49:2f:47:97:15:2a:9f: 0f:3b:c5:0c:1c:b0:e4:25:d1:6c:0e:07:d2:09:ac: 1f:75:e3:89:6d:93:6c:57:f8:90:60:76:29:30:9a: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:48:AA:ED:90:46:85:83:D3:40:14:ED:16:03:D5:AE:4A:EB:0D X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:80:1a:b3:06:f3:f7:3a:88:d3:63:ef:ff:d4:88:7c:aa:f1: 3e:a1:13:e4:0e:68:43:e0:c3:7e:d5:e7:5c:7e:d4:6e:6c:ec: 13:63:88:57:c1:b6:06:2c:2e:d1:4d:c8:1b:77:26:84:04:6a: 53:ea:ba:20:bc:12:0f:e0:df:0f:05:d3:12:f2:59:cc:ff:41: c9:e6:31:e5:37:44:a8:40:06:0f:c9:e5:26:b4:a9:fe:95:03: af:23:de:e1:7b:89:98:73:98:6f:76:8c:b2:7b:0d:f6:4b:1e: 08:6a:0c:ed:34:b3:83:f7:9b:aa:e6:a9:db:6b:7a:01:87:10: d1:c9:a9:0c:64:64:39:8c:51:d5:c1:d7:9a:df:7b:7b:b9:df: 9a:f3:fe:67:46:54:e7:37:d0:37:56:66:fd:b2:0e:e6:dc:fc: 5c:6a:95:1b:c6:0c:20:1e:5f:1d:64:45:f2:39:a5:46:9f:9c: 30:00:ce:7c:fb:2c:5b:84:96:8d:65:38:a3:34:34:76:99:d2: 80:36:d3:c2:51:68:44:83:53:6e:18:71:d6:ed:81:b7:4c:cd: 40:91:b7:56:fa:b0:a3:b6:b9:a4:fe:32:50:5a:46:f1:ef:7f: 95:9d:2b:d2:3d:4a:f4:f7:8e:e0:96:62:cc:1a:fd:6a:06:ae: 9d:3d:67:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUwNzE4MTczNzU0WhcNMjUwNzI1MTczNzU0WjAYMRYwFAYD VQQDEw02ODdhODY3Mi02OGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV6vmzsnREZYRL0NQ21+jucIuNTjRIk2aJ5W82ZrYNLchahhtg8hknDaGK1P YZThuClejsCAk7Z3hhgKN3K9AsvwfP5c5//NcUD74WNe+zOanq8olRLPhyz+B65R llGn+45Dmn2ZZJvHSlw5tG63uqADUP6ba+uI0oTt3VrJgLHz1zFWWhrP7LP27ja+ s+opBYoJbhao3La50Cb5GLIufCMhGMJyofI9+6+EUDYFAOXy3miATR7K85TkKpYd TDd+m6cimkb4KceIiysMWfwW7yJ5DHvgJrat7kkvR5cVKp8PO8UMHLDkJdFsDgfS CawfdeOJbZNsV/iQYHYpMJpMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSqSKrt kEaFg9NAFO0WA9WuSusNMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCgBqzBvP3OojTY+//1Ih8qvE+oRPkDmhD4MN+1edcftRubOwTY4hX wbYGLC7RTcgbdyaEBGpT6rogvBIP4N8PBdMS8lnM/0HJ5jHlN0SoQAYPyeUmtKn+ lQOvI97he4mYc5hvdoyyew32Sx4IagztNLOD95uq5qnba3oBhxDRyakMZGQ5jFHV wdea33t7ud+a8/5nRlTnN9A3Vmb9sg7m3PxcapUbxgwgHl8dZEXyOaVGn5wwAM58 +yxbhJaNZTijNDR2mdKANtPCUWhEg1NuGHHW7YG3TM1AkbdW+rCjtrmk/jJQWkbx 73+VnSvSPUr0947glmLMGv1qBq6dPWe5 -----END CERTIFICATE-----Generated at Sun Jul 20 06:31:10 2025 by rpki-client