$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: eugN7mT7/KztTbdjFVL05I2k4PnzBhsEDzWdCZc8Txg= Subject key identifier: BE:EE:83:D0:8C:E9:0E:4A:E1:F3:01:15:E9:EF:97:43:3C:79:06:2F Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: D1 Signing time: Sat 31 May 2025 01:14:36 +0000 Manifest this update: Sat 31 May 2025 01:14:35 +0000 Manifest next update: Sat 07 Jun 2025 01:14:35 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: s/pi1UgvWIqyClGuBxT70D+W64e9915v7Ki28FgiHIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: May 31 01:14:35 2025 GMT Not After : Jun 7 01:14:35 2025 GMT Subject: CN=683a57fb-867f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:48:94:67:50:33:10:27:fe:1b:53:de:65: 78:14:2e:5f:32:1a:5c:8d:c6:e8:b9:a9:28:99:79: 96:fa:ca:2c:3a:d6:a6:b4:66:af:22:f9:18:4e:37: ff:d3:2c:c2:33:b7:b9:e1:a6:47:58:a8:73:c7:2c: 29:18:ad:32:e3:dd:7a:14:c5:e1:7c:ea:26:d0:a5: 08:62:2f:c0:2a:b4:54:42:24:88:10:28:dc:56:a7: b5:eb:1e:e0:06:42:b8:94:a7:5b:e4:50:68:e4:42: 4e:a3:d3:f4:8f:71:d8:fa:6a:d0:50:13:ba:dc:dc: 88:e5:e5:5f:c6:1a:2f:6c:da:aa:b4:49:40:94:c6: 7c:1e:aa:d4:f8:eb:dc:90:b2:44:ad:e6:8c:2b:ce: 98:fe:53:b1:7e:9c:50:eb:36:d5:18:bd:6d:e2:98: 25:7e:03:06:da:9a:a3:7d:5f:63:bc:b9:25:9f:74: 4d:e3:53:c5:1b:8d:8d:68:93:18:36:48:dc:34:5b: 49:8d:52:f9:b0:aa:6a:ae:f1:7c:3f:2f:2c:3b:f4: 6b:47:94:d9:1e:b8:95:3d:04:07:61:79:3a:08:37: e6:ba:a4:1a:ab:63:99:40:d6:90:8e:d4:82:99:c6: ca:2c:f5:db:16:4f:47:0e:b5:2f:b7:a2:18:8c:86: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EE:83:D0:8C:E9:0E:4A:E1:F3:01:15:E9:EF:97:43:3C:79:06:2F X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:af:a4:fe:d3:65:b0:4e:3b:4c:e3:1f:85:d3:76:17:22:9d: 73:f0:c7:0b:02:fd:7e:e9:f7:86:2d:3e:8d:35:89:f7:a7:33: dd:ae:6c:e3:74:e1:35:03:55:14:fa:fe:da:01:ea:30:91:30: 25:b4:c4:82:1d:b5:5f:15:b3:0c:07:bd:ef:ac:fe:1f:62:a0: 01:4e:78:89:f2:c3:41:aa:ed:f4:3d:80:07:f2:41:60:aa:74: 06:d9:b5:ae:92:c0:ae:03:31:d3:96:e3:bf:19:11:90:f7:32: e5:45:6e:46:b7:cf:85:ad:61:ac:3e:ec:00:8d:8d:47:21:de: 57:3e:2b:10:c9:62:48:b8:67:f2:0c:ba:63:49:e3:cd:1c:a0: b3:cb:9d:f9:7c:59:24:d9:ec:6f:b5:ff:28:cf:16:84:ac:d2: 96:30:fa:d2:ab:0a:26:0b:2f:d6:19:c1:db:f9:51:b0:7d:d0: d5:72:f8:3c:bb:86:be:1b:ed:71:54:32:9e:36:4b:b3:6a:46: 58:27:2f:c5:9e:33:7e:36:d8:5a:74:a1:c0:aa:8a:75:91:bb: a3:c8:56:95:9f:a8:3b:e1:ad:f0:01:2f:d7:5b:a1:a5:71:9f: 9b:ef:2a:99:7d:8f:e5:31:02:4f:f9:f7:b9:7d:d3:eb:7b:e7: e7:68:70:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUwNTMxMDExNDM1WhcNMjUwNjA3MDExNDM1WjAYMRYwFAYD VQQDEw02ODNhNTdmYi04NjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI9IlGdQMxAn/htT3mV4FC5fMhpcjcbouakomXmW+sosOtamtGavIvkYTjf/ 0yzCM7e54aZHWKhzxywpGK0y4916FMXhfOom0KUIYi/AKrRUQiSIECjcVqe16x7g BkK4lKdb5FBo5EJOo9P0j3HY+mrQUBO63NyI5eVfxhovbNqqtElAlMZ8HqrU+Ovc kLJEreaMK86Y/lOxfpxQ6zbVGL1t4pglfgMG2pqjfV9jvLkln3RN41PFG42NaJMY NkjcNFtJjVL5sKpqrvF8Py8sO/RrR5TZHriVPQQHYXk6CDfmuqQaq2OZQNaQjtSC mcbKLPXbFk9HDrUvt6IYjIZO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7ug9CM 6Q5K4fMBFenvl0M8eQYvMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDur6T+02WwTjtM4x+F03YXIp1z8McLAv1+6feGLT6NNYn3pzPdrmzj dOE1A1UU+v7aAeowkTAltMSCHbVfFbMMB73vrP4fYqABTniJ8sNBqu30PYAH8kFg qnQG2bWuksCuAzHTluO/GRGQ9zLlRW5Gt8+FrWGsPuwAjY1HId5XPisQyWJIuGfy DLpjSePNHKCzy535fFkk2exvtf8ozxaErNKWMPrSqwomCy/WGcHb+VGwfdDVcvg8 u4a+G+1xVDKeNkuzakZYJy/FnjN+NthadKHAqop1kbujyFaVn6g74a3wAS/XW6Gl cZ+b7yqZfY/lMQJP+fe5fdPre+fnaHBe -----END CERTIFICATE-----Generated at Sat May 31 16:42:07 2025 by rpki-client