$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: IewsOqoYlvAtj+CB/EKIyp6jOA0Q6/HIqwDyCNepQyw= Subject key identifier: F3:C2:B4:83:D8:D8:B9:7D:76:F0:63:B2:BB:81:E2:FD:AE:0E:93:B4 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08AB Signing time: Tue 10 Jun 2025 20:25:57 +0000 Manifest this update: Tue 10 Jun 2025 20:25:57 +0000 Manifest next update: Tue 17 Jun 2025 20:25:57 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: 5zhv5nvsoC0DmtufnOJLOgDDOLZRdFjVnxgSjYbYonE=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2229 (0x8b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jun 10 20:25:57 2025 GMT Not After : Jun 17 20:25:57 2025 GMT Subject: CN=684894d5-3a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:06:5b:b9:d7:35:5d:da:be:16:d3:2a:35: ad:85:4a:b3:bf:d8:7e:53:ac:00:55:ec:a5:37:85: a0:1a:a4:08:66:96:38:19:5b:e3:1f:9e:6f:76:39: cc:96:c9:0f:1b:03:45:c6:8a:8e:16:57:f8:29:80: 54:57:64:b1:e8:d7:c8:81:ba:0c:1b:9e:aa:9f:a8: 23:c9:bc:93:5a:68:e6:db:db:94:53:b3:07:c5:28: 3d:29:f7:7e:2e:5a:da:1e:31:50:9d:f2:fa:c9:06: 5b:e2:30:8a:45:d5:6e:68:a1:ba:3b:a2:29:49:5e: 4a:3a:76:02:e2:6f:0c:34:d8:e7:be:6d:d9:39:c3: fd:7d:d2:92:47:01:48:ff:0c:c1:81:fa:0f:6e:c3: c0:9b:61:35:59:ff:ee:0a:49:95:28:49:59:5e:52: 9d:2a:b8:02:08:89:44:9e:cc:49:2d:bf:cc:83:82: b7:f7:8a:c3:11:85:08:3e:8c:64:bd:7b:2f:c1:81: 75:a2:c6:47:53:ae:71:88:bb:bf:a2:7b:16:b9:b6: 8a:9d:e4:c2:00:f8:17:a5:37:a7:b8:69:00:bb:e1: c7:eb:17:98:27:be:02:86:ac:71:62:62:4f:1c:6a: 27:6c:f8:1e:cc:88:d7:7a:68:c8:96:19:1f:bf:98: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C2:B4:83:D8:D8:B9:7D:76:F0:63:B2:BB:81:E2:FD:AE:0E:93:B4 X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:52:e8:eb:e6:a5:eb:d7:80:00:3d:c1:58:77:8f:05:68:e1: 21:28:37:f8:5c:61:a3:7d:0a:a0:84:0f:61:66:4f:9d:55:46: 6e:4b:91:f0:8f:5b:2b:92:59:fa:bc:da:a5:4f:4c:06:19:d1: c8:a6:34:9e:7b:78:26:0d:2f:82:2b:0e:d3:58:bb:d7:9a:c2: be:6c:c9:9b:92:71:c2:2c:fc:4e:88:70:fb:cc:76:47:23:5e: ab:d4:af:ca:36:6b:13:47:c0:3a:99:b3:36:fc:01:57:62:1e: 36:c9:cb:21:89:99:6d:12:7b:bf:0f:a3:8b:70:d3:19:a2:d7: 96:fd:0e:3a:b4:2f:75:fd:68:5f:0f:c9:2c:29:c6:e3:2e:f1: 1a:72:4f:71:97:06:29:23:e4:e8:9b:fb:d5:0e:0b:0e:61:e4: e2:f6:fd:fa:66:d0:0a:f3:73:d1:b5:79:a0:00:35:10:b0:ad: dd:32:db:98:f7:f3:72:49:ab:15:07:02:2e:d9:64:9b:8b:0f: b1:54:0c:b7:b7:ae:41:a4:74:09:97:be:d7:0c:03:17:d1:3a: 70:b6:2c:79:4d:3e:5e:3b:3a:6e:5a:bc:c3:c4:31:47:c8:dd: f9:c5:e6:17:1e:05:d4:ec:b2:89:82:fe:af:d5:0a:fd:cf:c9: 25:52:a0:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwNjEwMjAyNTU3WhcNMjUwNjE3MjAyNTU3WjAYMRYwFAYD VQQDEw02ODQ4OTRkNS0zYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b0GW7nXNV3avhbTKjWthUqzv9h+U6wAVeylN4WgGqQIZpY4GVvjH55vdjnM lskPGwNFxoqOFlf4KYBUV2Sx6NfIgboMG56qn6gjybyTWmjm29uUU7MHxSg9Kfd+ LlraHjFQnfL6yQZb4jCKRdVuaKG6O6IpSV5KOnYC4m8MNNjnvm3ZOcP9fdKSRwFI /wzBgfoPbsPAm2E1Wf/uCkmVKElZXlKdKrgCCIlEnsxJLb/Mg4K394rDEYUIPoxk vXsvwYF1osZHU65xiLu/onsWubaKneTCAPgXpTenuGkAu+HH6xeYJ74ChqxxYmJP HGonbPgezIjXemjIlhkfv5gjJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPCtIPY 2Ll9dvBjsruB4v2uDpO0MB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBUujr5qXr14AAPcFYd48FaOEhKDf4XGGjfQqghA9hZk+dVUZuS5Hw j1srkln6vNqlT0wGGdHIpjSee3gmDS+CKw7TWLvXmsK+bMmbknHCLPxOiHD7zHZH I16r1K/KNmsTR8A6mbM2/AFXYh42ycshiZltEnu/D6OLcNMZoteW/Q46tC91/Whf D8ksKcbjLvEack9xlwYpI+Tom/vVDgsOYeTi9v36ZtAK83PRtXmgADUQsK3dMtuY 9/NySasVBwIu2WSbiw+xVAy3t65BpHQJl77XDAMX0Tpwtix5TT5eOzpuWrzDxDFH yN35xeYXHgXU7LKJgv6v1Qr9z8klUqDS -----END CERTIFICATE-----Generated at Thu Jun 12 14:09:06 2025 by rpki-client