$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: Pg8mTZ21W6bJtWe/UVDfr/Yfokv7TayWuFZQ232jMIE= Subject key identifier: 0D:BC:4C:07:C9:D4:19:82:B5:48:26:A9:17:86:32:11:00:3F:07:74 Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: 6F Signing time: Sat 07 Jun 2025 06:20:51 +0000 Manifest this update: Sat 07 Jun 2025 06:20:51 +0000 Manifest next update: Sat 14 Jun 2025 06:20:51 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: 2BxGPpJOhyQKQoz9nu/kB7qDq/Bh1vtA2Y25FuAYdA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 06:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Jun 7 06:20:51 2025 GMT Not After : Jun 14 06:20:51 2025 GMT Subject: CN=6843da43-eb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:06:ca:cc:5b:83:9d:81:65:82:39:ab:0e: 57:25:29:79:d6:bc:47:00:b7:28:34:32:cf:b0:3a: 2d:33:63:ab:cf:29:ba:7a:e2:39:a2:69:4a:d6:6b: 35:df:bb:6b:82:73:0d:e9:5c:9e:39:66:74:84:19: b8:c1:9e:a3:44:b6:ff:c8:89:81:15:54:f5:fa:75: e4:6e:85:22:49:c1:3a:74:b4:73:b8:f1:2a:21:0f: ed:2c:51:d7:1f:3a:08:98:e6:97:80:74:84:56:1d: 93:ef:a9:a8:17:f6:97:8b:72:91:50:36:df:8f:ce: 3c:ff:1c:94:6a:e6:42:b9:a4:5c:63:e8:8e:3b:7f: 6b:0a:74:5d:cc:56:7e:31:ce:ec:37:42:8a:86:a0: 79:27:ef:0c:94:cf:3c:ff:ab:8e:1b:41:a2:03:95: eb:6a:b6:9b:6f:df:5d:75:b2:d9:20:87:90:2f:e4: 60:20:55:40:f2:fd:5d:5a:d2:94:00:a4:5b:d6:27: 0e:9d:6e:90:bf:1c:af:3a:53:7f:6d:42:d1:c6:91: 91:d6:43:47:61:68:c9:86:2c:6c:9c:b9:6a:f4:a4: a4:be:9b:dc:59:05:ea:c4:6a:96:c5:7c:73:de:00: 90:4d:c8:b8:23:f3:62:bb:fa:28:08:e2:ff:fb:26: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BC:4C:07:C9:D4:19:82:B5:48:26:A9:17:86:32:11:00:3F:07:74 X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:35:bd:76:f1:a5:aa:9b:72:38:b9:14:9e:d7:09:29:56:60: 7f:44:59:a4:3d:fe:b9:57:57:b0:d0:d1:fb:48:f4:e7:5b:6d: 92:a6:cb:02:69:6b:65:af:94:b8:78:ce:e0:e1:30:cb:d2:67: 5a:69:4e:4f:da:71:d3:54:34:95:9e:b5:5d:14:52:15:ef:6c: ab:f4:de:a5:aa:bf:d3:8e:b0:a8:04:41:77:4d:d5:6e:9a:e8: 9f:98:3c:86:a8:55:29:95:f9:10:3c:dc:8a:f5:32:1c:ba:d9: 65:04:17:5a:a1:00:67:ca:82:55:ea:3c:71:df:2a:76:c2:6a: ad:df:30:cd:d1:45:dd:9f:f4:45:16:82:b7:69:d4:ea:fe:17: 4f:45:32:7b:14:92:cc:9f:b8:b7:2a:00:28:5c:3a:32:50:3f: 4a:d3:86:3e:1c:9c:f6:e3:b4:eb:4b:b0:0f:f1:4a:2b:8d:20: 16:e6:c8:f4:a9:36:93:e9:de:a3:c5:ae:b8:3c:51:fa:3c:dc: ad:d7:9d:a0:cd:3e:40:90:b3:7b:b6:d4:10:01:3b:ac:e2:98: cb:89:7a:b5:72:02:f6:34:97:51:80:71:30:82:f7:4b:96:4c: 7b:62:50:cb:ce:20:56:62:b3:7e:80:60:51:f0:b7:40:29:13: fc:97:67:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDBFNDExMC8GA1UEBRMoODY3Nzk5MDUzRUM5MTc0QjExMUNCQjQ2QjI5N0ZBNjQ3 RTk4MkFBNTAeFw0yNTA2MDcwNjIwNTFaFw0yNTA2MTQwNjIwNTFaMBgxFjAUBgNV BAMTDTY4NDNkYTQzLWViM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb4wbKzFuDnYFlgjmrDlclKXnWvEcAtyg0Ms+wOi0zY6vPKbp64jmiaUrWazXf u2uCcw3pXJ45ZnSEGbjBnqNEtv/IiYEVVPX6deRuhSJJwTp0tHO48SohD+0sUdcf OgiY5peAdIRWHZPvqagX9peLcpFQNt+Pzjz/HJRq5kK5pFxj6I47f2sKdF3MVn4x zuw3QoqGoHkn7wyUzzz/q44bQaIDletqtptv3111stkgh5Av5GAgVUDy/V1a0pQA pFvWJw6dbpC/HK86U39tQtHGkZHWQ0dhaMmGLGycuWr0pKS+m9xZBerEapbFfHPe AJBNyLgj82K7+igI4v/7JnsDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDbxMB8nU GYK1SCapF4YyEQA/B3QwHwYDVR0jBBgwFoAUhneZBT7JF0sRHLtGspf6ZH6YKqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMEU0LzU2MDhBNDk4OUE2 NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaG5lWkJUN0pGMHNSSEx0R3NwZjZaSDZZS3FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MEU0LzU2MDhBNDk4OUE2NTExRUY5RjdBQjIyNkM0RjlBRTAyL2huZVpCVDdKRjBz UkhMdEdzcGY2Wkg2WUtxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFA1vXbxpaqbcji5FJ7XCSlWYH9EWaQ9/rlXV7DQ0ftI9OdbbZKmywJp a2WvlLh4zuDhMMvSZ1ppTk/acdNUNJWetV0UUhXvbKv03qWqv9OOsKgEQXdN1W6a 6J+YPIaoVSmV+RA83Ir1Mhy62WUEF1qhAGfKglXqPHHfKnbCaq3fMM3RRd2f9EUW grdp1Or+F09FMnsUksyfuLcqAChcOjJQP0rThj4cnPbjtOtLsA/xSiuNIBbmyPSp NpPp3qPFrrg8Ufo83K3XnaDNPkCQs3u21BABO6zimMuJerVyAvY0l1GAcTCC90uW THtiUMvOIFZis36AYFHwt0ApE/yXZwY= -----END CERTIFICATE-----Generated at Sun Jun 8 06:35:55 2025 by rpki-client