$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: Xi/+iSPFTG+QE8cNHdZYkYfkbWpGLzrEMcBqlA0q+Rk= Subject key identifier: 8A:C8:86:CA:61:CC:57:0D:F9:DE:5C:45:86:42:2B:A0:95:CF:C7:62 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0141 Signing time: Fri 13 Jun 2025 03:19:07 +0000 Manifest this update: Fri 13 Jun 2025 03:19:07 +0000 Manifest next update: Fri 20 Jun 2025 03:19:07 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: E8sOVtCadvNCPRKQVMSzCacM3QndswREQtx11K8/oG8=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Jun 13 03:19:07 2025 GMT Not After : Jun 20 03:19:07 2025 GMT Subject: CN=684b98ab-48b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:88:fb:a8:e3:9c:e6:80:64:b0:f4:01:f3: ee:88:48:e3:d2:4b:7d:1c:a2:95:eb:b8:0c:a3:be: b5:15:3a:73:26:73:f9:67:67:ed:95:ac:71:bf:24: a8:bb:1a:38:35:15:01:d5:fb:9e:99:33:0e:0c:45: 01:84:aa:f4:9e:9e:56:25:88:03:7c:81:c3:87:34: a0:7a:6c:34:98:6b:4d:05:8d:5d:86:e2:18:84:24: 2a:dd:77:af:04:e6:15:d9:00:e5:41:4e:c9:38:6e: 7f:5c:51:9b:de:ee:41:90:3c:94:30:29:b8:43:f8: 2b:42:ac:f4:9d:b8:74:d2:ab:a5:f1:ed:c4:3c:d5: 8b:1a:a2:44:14:53:bd:21:97:f8:0b:0e:a2:b9:1b: f6:58:ca:44:d3:47:b4:74:19:f5:03:52:44:86:ef: 0c:7f:51:42:d5:d7:65:7c:22:3c:50:6d:41:83:ba: c5:0f:5e:ae:c4:f7:40:ce:0b:c7:00:f5:4b:73:14: 88:8d:21:52:bb:e7:1d:eb:72:36:2d:c2:a8:59:87: b9:2b:98:f3:0d:fa:dc:4b:be:62:14:b9:dd:a7:eb: 10:43:ec:92:29:60:c2:06:62:96:72:79:32:11:fe: 27:2d:79:df:83:8e:1f:c0:25:d6:45:28:99:1f:51: 93:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C8:86:CA:61:CC:57:0D:F9:DE:5C:45:86:42:2B:A0:95:CF:C7:62 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a6:2a:b6:4f:98:99:8a:29:e4:ca:b0:3b:f5:e7:56:57:64: 30:a6:5c:99:6c:c5:4c:ad:c9:cc:7f:52:22:a6:4c:c8:f8:65: c6:69:e0:a2:9b:a9:5a:56:3c:47:a4:64:b6:b3:55:8f:3a:6c: 25:7a:a6:45:42:f6:78:f2:9c:9d:a0:06:d9:40:af:df:dc:29: df:ed:a5:45:75:a6:33:51:0e:be:3b:72:a3:5e:ee:04:3e:0a: 6b:69:3e:05:14:ad:9e:4b:06:3e:d5:44:64:34:9e:9d:a4:08: cf:a1:47:05:ce:63:f6:ac:45:06:96:13:b4:94:aa:22:cc:f2: 04:ae:21:7a:d0:ff:86:29:a3:9b:fa:b1:51:c7:f1:ef:30:1e: 08:61:14:f8:9b:78:7a:1d:34:13:c6:cf:80:0f:ec:c5:3b:08: 12:21:87:44:18:48:80:1e:69:33:78:07:71:1a:ac:ee:cf:97: a0:25:c3:11:64:27:32:cb:9f:bb:22:f5:2b:9a:ca:89:90:e9: 78:66:64:64:bd:1a:0b:c2:a0:92:a8:97:95:d4:0f:07:6d:8a: 25:97:e1:88:03:46:dd:56:cd:de:56:0e:3f:bd:d1:4b:b0:a8: 06:aa:fd:7e:d5:db:6d:8b:24:2d:8c:0a:22:8a:de:90:56:d4: 19:4b:c6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwNjEzMDMxOTA3WhcNMjUwNjIwMDMxOTA3WjAYMRYwFAYD VQQDEw02ODRiOThhYi00OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNqI+6jjnOaAZLD0AfPuiEjj0kt9HKKV67gMo761FTpzJnP5Z2ftlaxxvySo uxo4NRUB1fuemTMODEUBhKr0np5WJYgDfIHDhzSgemw0mGtNBY1dhuIYhCQq3Xev BOYV2QDlQU7JOG5/XFGb3u5BkDyUMCm4Q/grQqz0nbh00qul8e3EPNWLGqJEFFO9 IZf4Cw6iuRv2WMpE00e0dBn1A1JEhu8Mf1FC1ddlfCI8UG1Bg7rFD16uxPdAzgvH APVLcxSIjSFSu+cd63I2LcKoWYe5K5jzDfrcS75iFLndp+sQQ+ySKWDCBmKWcnky Ef4nLXnfg44fwCXWRSiZH1GTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrIhsph zFcN+d5cRYZCK6CVz8diMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+piq2T5iZiinkyrA79edWV2QwplyZbMVMrcnMf1IipkzI+GXGaeCi m6laVjxHpGS2s1WPOmwleqZFQvZ48pydoAbZQK/f3Cnf7aVFdaYzUQ6+O3KjXu4E PgpraT4FFK2eSwY+1URkNJ6dpAjPoUcFzmP2rEUGlhO0lKoizPIEriF60P+GKaOb +rFRx/HvMB4IYRT4m3h6HTQTxs+AD+zFOwgSIYdEGEiAHmkzeAdxGqzuz5egJcMR ZCcyy5+7IvUrmsqJkOl4ZmRkvRoLwqCSqJeV1A8HbYoll+GIA0bdVs3eVg4/vdFL sKgGqv1+1dttiyQtjAoiit6QVtQZS8a0 -----END CERTIFICATE-----Generated at Sun Jun 15 01:51:22 2025 by rpki-client