$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: UCaKqtIIwDujL4hj857WTUjvnsEQOQ2aMSDZBbFl4R8= Subject key identifier: 61:B8:4D:F8:13:F2:B1:51:60:74:6B:38:1C:7F:F3:24:B3:AC:86:D0 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 060E Signing time: Fri 30 May 2025 23:02:43 +0000 Manifest this update: Fri 30 May 2025 23:02:42 +0000 Manifest next update: Fri 06 Jun 2025 23:02:42 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: lc9/sMHzXbOnv0nVtRb52B+VAwao1lbtWmBpE6YX7lc=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: May 30 23:02:42 2025 GMT Not After : Jun 6 23:02:42 2025 GMT Subject: CN=683a3913-9374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:a9:0c:0f:06:d8:0e:64:ca:de:b7:9f:4e: ef:e2:f5:cb:33:8c:58:24:ef:62:e3:20:04:cb:af: 2f:d9:bd:d3:3c:51:31:c4:e1:b8:c4:b4:74:d1:d5: 95:32:c1:b5:f5:17:bc:15:51:62:1f:b5:96:82:d0: 93:70:b0:6e:30:d4:66:d8:96:f2:e4:ce:39:d9:2c: 72:92:a0:51:b1:cb:4e:2d:30:4a:8b:bf:30:b5:cd: d8:68:ab:0f:32:b6:11:5a:e0:5b:ed:bc:42:c0:dd: 26:37:fd:e6:02:b1:7e:36:3b:82:48:fd:2c:9e:cb: 7c:92:48:8d:53:ca:56:3d:65:21:1b:18:4a:9e:a8: 1c:d6:b8:14:08:f0:fc:fe:8f:1c:57:67:fd:e0:57: f0:0a:4f:d0:3c:ac:1d:fd:5f:c1:cf:3b:47:9a:86: 5b:48:9b:47:06:a8:94:1a:8d:30:b5:c2:bb:3b:58: 99:13:0c:ed:e7:bb:c0:51:78:83:48:95:28:61:eb: 8f:4e:63:37:8f:4d:fd:85:5d:37:55:bc:e6:0f:08: 71:4f:b6:bc:dd:70:00:57:b4:c9:26:4d:18:66:95: 5c:35:81:81:27:91:91:5e:84:af:cf:97:5f:0c:d8: e0:44:ed:f1:92:5e:b8:94:fe:85:c4:3a:1a:07:ea: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:4D:F8:13:F2:B1:51:60:74:6B:38:1C:7F:F3:24:B3:AC:86:D0 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:89:9c:ab:d7:1c:dd:8c:ec:53:df:3f:09:48:42:3e:7d:8b: ae:0e:f2:86:8b:e0:78:93:24:95:26:a7:2f:0f:c8:62:b3:c0: 2a:a7:26:07:06:55:71:90:65:73:32:79:ca:fa:5d:1e:e3:a0: d6:4c:13:ad:0c:81:ab:e9:d2:6b:7d:5c:a1:11:10:fe:72:ec: 4c:cc:58:ed:33:f5:8e:5d:ef:20:f8:39:1e:c8:a2:d8:ae:fa: f6:88:77:07:6d:07:53:29:2a:bb:ed:dd:f0:c7:97:2c:17:33: 92:eb:ab:8e:e6:9d:cf:16:f2:bb:78:83:1a:a3:36:fe:2a:15: c2:41:92:bb:6d:8e:ea:be:22:b7:c2:b5:8e:3c:5f:c8:7e:96: 4b:25:34:de:15:6b:4d:8e:53:9f:69:ad:10:8c:02:76:3d:13: 7a:d6:a5:31:c2:44:5d:07:fb:88:ab:2e:20:20:56:48:10:94: 7e:90:2d:bd:1d:45:a9:26:30:5b:8f:c8:a5:72:e0:b1:c9:02: 1a:3b:40:d6:ab:8b:62:a5:36:70:1a:4f:dc:a4:c2:4a:55:36: 97:1a:19:e6:0c:ef:af:88:92:f2:e0:82:11:5c:1e:61:16:36: 81:82:24:23:c8:ed:6d:0c:42:e6:2e:80:33:aa:28:8c:2c:7c: ef:93:e4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwNTMwMjMwMjQyWhcNMjUwNjA2MjMwMjQyWjAYMRYwFAYD VQQDEw02ODNhMzkxMy05Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sqpDA8G2A5kyt63n07v4vXLM4xYJO9i4yAEy68v2b3TPFExxOG4xLR00dWV MsG19Re8FVFiH7WWgtCTcLBuMNRm2Jby5M452SxykqBRsctOLTBKi78wtc3YaKsP MrYRWuBb7bxCwN0mN/3mArF+NjuCSP0snst8kkiNU8pWPWUhGxhKnqgc1rgUCPD8 /o8cV2f94FfwCk/QPKwd/V/BzztHmoZbSJtHBqiUGo0wtcK7O1iZEwzt57vAUXiD SJUoYeuPTmM3j039hV03VbzmDwhxT7a83XAAV7TJJk0YZpVcNYGBJ5GRXoSvz5df DNjgRO3xkl64lP6FxDoaB+rU5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG4TfgT 8rFRYHRrOBx/8ySzrIbQMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmiZyr1xzdjOxT3z8JSEI+fYuuDvKGi+B4kySVJqcvD8his8AqpyYH BlVxkGVzMnnK+l0e46DWTBOtDIGr6dJrfVyhERD+cuxMzFjtM/WOXe8g+DkeyKLY rvr2iHcHbQdTKSq77d3wx5csFzOS66uO5p3PFvK7eIMaozb+KhXCQZK7bY7qviK3 wrWOPF/IfpZLJTTeFWtNjlOfaa0QjAJ2PRN61qUxwkRdB/uIqy4gIFZIEJR+kC29 HUWpJjBbj8ilcuCxyQIaO0DWq4tipTZwGk/cpMJKVTaXGhnmDO+viJLy4IIRXB5h FjaBgiQjyO1tDELmLoAzqiiMLHzvk+Qn -----END CERTIFICATE-----Generated at Sat May 31 17:07:42 2025 by rpki-client