$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: 7CyXwbQxRzR6XpbPGm+OZ8DklSplHI4aA8kE5nDQfzo= Subject key identifier: 2D:10:2C:91:30:A3:6C:6F:FA:79:06:B5:FC:6A:90:AC:EE:DA:F4:48 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A1E Signing time: Fri 06 Jun 2025 16:24:48 +0000 Manifest this update: Fri 06 Jun 2025 16:24:48 +0000 Manifest next update: Fri 13 Jun 2025 16:24:48 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: NpTA5mqSq4d0I7T7uQyojJB0ktOyNShOI+yFxo82nAU=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: YOnwHdL+VM4WZZwYTJ66mt2t+UeBiT+rfThROtawpHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 16:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6694 (0x1a26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Jun 6 16:24:48 2025 GMT Not After : Jun 13 16:24:48 2025 GMT Subject: CN=68431650-a562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:92:40:24:87:a2:a7:cb:28:67:40:42:72: 99:7a:90:b3:fd:b8:c3:9e:cf:b8:29:a2:bc:dc:e7: 1d:48:57:fd:1c:1a:df:6a:fe:ff:ba:28:7e:f8:c3: 29:df:1d:90:85:34:33:fc:71:dc:47:23:46:2e:0c: 47:40:3d:c5:bf:3a:e2:61:b9:e0:62:54:3a:da:04: 66:3e:c4:af:6c:66:23:ab:af:19:a0:dd:3b:3c:ab: d4:64:69:0b:36:75:56:20:c8:c0:89:c2:cb:b9:6a: d4:68:93:13:d1:eb:8d:c2:69:0c:49:70:f5:79:63: 5f:52:94:5b:91:ad:1c:22:68:53:43:6c:f1:d1:dd: 47:70:0a:7b:97:8f:16:06:0b:35:10:52:66:c4:bb: 71:43:cc:22:70:8a:d3:cd:ee:cd:8a:f5:4b:1b:82: 3d:1e:4b:3c:9e:a6:b4:0a:3b:f6:89:b6:58:65:3a: 95:28:26:22:9d:4e:b0:1a:ec:45:66:3b:e3:e8:e0: 93:8e:a3:06:36:75:ef:21:6c:f9:c6:f9:ee:b7:f9: 1e:59:b7:2e:88:74:f6:ba:e7:53:46:2c:03:75:d6: fd:6c:62:ba:9b:a5:4f:a0:aa:c2:22:85:0b:5c:33: bc:22:4e:a6:0b:5e:38:97:03:08:79:6c:eb:a7:ea: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:10:2C:91:30:A3:6C:6F:FA:79:06:B5:FC:6A:90:AC:EE:DA:F4:48 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:69:8f:11:8f:87:e4:75:f9:98:a0:c3:0f:f8:b6:5c:54: 15:66:26:52:16:bd:df:4b:1e:89:e7:7f:ef:f6:4d:1c:c3:e1: b5:b8:a3:f6:44:2d:0d:5d:f6:dc:bf:8e:8b:5e:3b:99:ee:44: 2d:ee:99:f1:ae:fb:12:31:de:3b:d2:f1:1f:05:a7:85:0c:eb: 64:3a:25:fd:26:d0:4e:89:17:34:28:21:49:04:9e:3d:5e:df: 7e:3a:6a:ca:bb:c7:ee:cc:4e:d4:56:d0:9a:3b:2c:02:67:64: f0:b3:f2:58:7c:31:48:66:04:8c:21:9e:41:b9:79:97:21:0e: 6b:d7:c6:fa:e5:01:b8:c5:23:84:56:67:19:4f:35:37:8b:4d: b5:27:c4:c7:85:fb:15:4a:02:b3:54:3c:70:87:30:92:6c:86: b7:70:99:33:df:52:6a:f2:dd:bf:79:8c:93:1e:2c:36:dd:e7: 24:d6:f9:b1:ae:77:cc:db:d3:e5:27:6f:fb:72:74:c2:3c:b2: e3:9a:5a:ea:13:98:77:27:1d:ec:41:64:bb:64:c6:1f:b8:fb: b4:1b:04:db:ab:c5:da:6c:31:f8:77:6c:56:07:f5:d9:78:d7: c1:34:2f:8f:35:a3:eb:ae:82:d9:58:0f:90:89:0e:cc:ac:ad: e5:61:78:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwNjA2MTYyNDQ4WhcNMjUwNjEzMTYyNDQ4WjAYMRYwFAYD VQQDEw02ODQzMTY1MC1hNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXGSQCSHoqfLKGdAQnKZepCz/bjDns+4KaK83OcdSFf9HBrfav7/uih++MMp 3x2QhTQz/HHcRyNGLgxHQD3FvzriYbngYlQ62gRmPsSvbGYjq68ZoN07PKvUZGkL NnVWIMjAicLLuWrUaJMT0euNwmkMSXD1eWNfUpRbka0cImhTQ2zx0d1HcAp7l48W Bgs1EFJmxLtxQ8wicIrTze7NivVLG4I9Hks8nqa0Cjv2ibZYZTqVKCYinU6wGuxF Zjvj6OCTjqMGNnXvIWz5xvnut/keWbcuiHT2uudTRiwDddb9bGK6m6VPoKrCIoUL XDO8Ik6mC144lwMIeWzrp+o9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0QLJEw o2xv+nkGtfxqkKzu2vRIMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqqGmPEY+H5HX5mKDDD/i2XFQVZiZSFr3fSx6J53/v9k0cw+G1uKP2 RC0NXfbcv46LXjuZ7kQt7pnxrvsSMd470vEfBaeFDOtkOiX9JtBOiRc0KCFJBJ49 Xt9+OmrKu8fuzE7UVtCaOywCZ2Tws/JYfDFIZgSMIZ5BuXmXIQ5r18b65QG4xSOE VmcZTzU3i021J8THhfsVSgKzVDxwhzCSbIa3cJkz31Jq8t2/eYyTHiw23eck1vmx rnfM29PlJ2/7cnTCPLLjmlrqE5h3Jx3sQWS7ZMYfuPu0GwTbq8XabDH4d2xWB/XZ eNfBNC+PNaPrroLZWA+QiQ7MrK3lYXjO -----END CERTIFICATE-----Generated at Sat Jun 7 05:38:42 2025 by rpki-client