$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: 1a+1/UphXtqtTc8WSQq8odNZXbguzwWwtiZ2VLYznYo= Subject key identifier: A7:5C:8E:C7:C5:6B:38:69:D2:98:DA:77:19:C7:B0:09:ED:47:03:95 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 4C Signing time: Sat 31 May 2025 06:51:43 +0000 Manifest this update: Sat 31 May 2025 06:51:43 +0000 Manifest next update: Sat 07 Jun 2025 06:51:43 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: EDALwq7glDc3jMQuh4NW2HDUGzdVKQhY36IwreUfN/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: May 31 06:51:43 2025 GMT Not After : Jun 7 06:51:43 2025 GMT Subject: CN=683aa6ff-0453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:60:98:4a:16:a8:af:3b:c4:94:ba:75:f8: 7a:60:d6:c6:4b:b4:1d:97:9f:60:85:24:21:87:1c: e8:e7:85:19:66:d7:bc:a9:95:88:96:f0:d1:76:ab: b3:a1:93:e1:d5:88:e2:d7:d2:83:e1:0b:cd:5a:41: a5:71:fc:8d:0e:6b:dd:c4:56:57:3f:1a:21:03:49: 28:39:9d:c2:4f:78:77:2f:01:a8:e5:33:70:c7:13: a7:4c:79:28:07:d6:b6:6b:46:aa:2a:4d:7a:d1:18: 8b:61:c2:77:95:00:09:f9:f8:43:cf:58:3a:89:aa: a2:af:e7:95:df:33:53:9c:03:ae:05:43:e8:3b:d0: d5:b5:07:0d:0c:3b:88:01:1c:3a:40:80:24:a1:13: 13:15:78:2e:89:d6:04:85:7a:65:f7:8d:b7:3b:35: 63:e7:0b:2f:70:32:df:75:a1:6c:ca:a8:c0:f5:1e: 15:e1:e4:04:ed:80:0f:f6:2a:f1:59:19:ea:e4:f9: a8:c6:dc:cd:71:32:21:5c:7e:9b:39:25:45:42:a4: e8:35:a3:c5:9a:8d:68:d8:b6:77:fa:45:7b:b1:48: be:7f:f6:98:05:fa:c0:42:bc:04:9c:90:6d:a0:cc: 0d:8d:2d:43:4b:8e:0e:76:12:c4:1a:e3:f0:47:ed: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5C:8E:C7:C5:6B:38:69:D2:98:DA:77:19:C7:B0:09:ED:47:03:95 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e0:81:92:5c:03:71:53:d5:dc:c0:9f:46:8d:ed:95:60:20: 82:da:db:e6:44:0a:cd:dc:3d:c9:51:9d:18:15:5f:fb:a9:78: 30:5f:8c:44:29:af:a1:87:26:bf:bf:71:2a:1a:0f:fd:4b:7b: 5c:49:c0:01:b8:bc:34:29:8f:c5:33:0d:d5:a8:95:47:0d:24: 7f:a1:73:b1:e1:13:5e:e5:f9:21:ce:5d:68:71:9b:17:6a:83: 41:53:82:20:67:9b:5f:5d:8b:f0:53:c2:51:b6:e1:9f:bb:2a: 7c:5d:a1:42:6b:2c:c3:0c:38:c0:92:93:99:6e:06:eb:70:af: 80:05:a7:cb:a2:6f:b3:08:f8:f1:73:24:9d:97:13:46:ab:b8: 48:07:e0:6c:b8:9b:4f:11:ae:d4:5d:d7:c3:9e:db:4b:ef:ba: 29:2f:c7:a8:69:19:1c:1d:70:1a:7d:cb:3d:f2:4c:db:6e:9c: 37:3e:bd:d6:61:16:fb:55:85:e3:bd:2a:41:da:ed:ad:f9:e5: e8:cb:62:95:43:3c:60:58:16:58:88:60:19:50:9b:f8:a0:a4: f0:2c:71:be:50:f4:cf:03:6e:e7:96:7d:27:b9:6c:02:b2:b1: bd:7f:97:a6:48:02:71:84:78:9c:6c:98:78:41:46:1c:39:0c: 73:6c:9c:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA1MzEwNjUxNDNaFw0yNTA2MDcwNjUxNDNaMBgxFjAUBgNV BAMTDTY4M2FhNmZmLTA0NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUf2CYShaorzvElLp1+Hpg1sZLtB2Xn2CFJCGHHOjnhRlm17yplYiW8NF2q7Oh k+HViOLX0oPhC81aQaVx/I0Oa93EVlc/GiEDSSg5ncJPeHcvAajlM3DHE6dMeSgH 1rZrRqoqTXrRGIthwneVAAn5+EPPWDqJqqKv55XfM1OcA64FQ+g70NW1Bw0MO4gB HDpAgCShExMVeC6J1gSFemX3jbc7NWPnCy9wMt91oWzKqMD1HhXh5ATtgA/2KvFZ Gerk+ajG3M1xMiFcfps5JUVCpOg1o8WajWjYtnf6RXuxSL5/9pgF+sBCvASckG2g zA2NLUNLjg52EsQa4/BH7cWNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp1yOx8Vr OGnSmNp3GcewCe1HA5UwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACzggZJcA3FT1dzAn0aN7ZVgIILa2+ZECs3cPclRnRgVX/upeDBfjEQp r6GHJr+/cSoaD/1Le1xJwAG4vDQpj8UzDdWolUcNJH+hc7HhE17l+SHOXWhxmxdq g0FTgiBnm19di/BTwlG24Z+7KnxdoUJrLMMMOMCSk5luButwr4AFp8uib7MI+PFz JJ2XE0aruEgH4Gy4m08RrtRd18Oe20vvuikvx6hpGRwdcBp9yz3yTNtunDc+vdZh FvtVheO9KkHa7a355ejLYpVDPGBYFliIYBlQm/igpPAscb5Q9M8DbueWfSe5bAKy sb1/l6ZIAnGEeJxsmHhBRhw5DHNsnHI= -----END CERTIFICATE-----Generated at Sat May 31 17:42:40 2025 by rpki-client