$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: HSCQJ0zyA8va2+Jadj++5rGOO7xVavw0G+aiFupql6Y= Subject key identifier: B9:90:F5:D0:CE:97:76:6D:33:89:50:A5:D4:D3:ED:08:36:C0:D4:CC Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 013F Signing time: Mon 09 Jun 2025 03:26:50 +0000 Manifest this update: Mon 09 Jun 2025 03:26:49 +0000 Manifest next update: Mon 16 Jun 2025 03:26:49 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: ES+uI2NMu3TvIHK7MB3Y0pLpRhQe9DMZquHmXVHpnfo=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 03:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Jun 9 03:26:49 2025 GMT Not After : Jun 16 03:26:49 2025 GMT Subject: CN=68465479-731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:44:01:79:80:74:81:72:77:1a:bf:cc:ef: 28:ca:80:c1:ac:6f:a9:ff:b3:90:f6:19:2b:9c:5c: 7f:a2:6a:7c:3d:b6:0d:bb:95:f6:98:11:eb:b8:7c: 31:f1:9f:2c:c4:47:f6:24:5d:3b:c2:9f:44:87:ea: e7:bf:90:8e:2e:01:be:82:37:2a:0c:cd:ae:09:ef: 95:02:f0:db:66:74:24:ce:29:da:eb:af:f8:2f:a0: e9:98:7c:ef:63:5e:fb:23:84:8d:6c:b7:3b:59:2a: ff:43:4b:72:d0:db:40:67:fd:30:e0:34:7a:94:c1: 94:e9:13:6b:a0:4e:73:1f:b8:17:58:fd:1e:e0:34: 58:37:3c:32:22:c5:75:47:32:b5:19:86:85:c8:bc: 50:37:b9:88:1a:f3:60:25:bc:62:98:b2:29:2a:c8: 8f:02:94:c0:e3:b5:ab:90:63:64:c8:c6:04:32:db: 55:ee:67:9d:45:9b:4a:33:05:d7:0e:20:c9:e9:c2: f9:91:7d:89:38:b9:25:cd:5e:c0:aa:fa:40:81:3e: e0:b7:cd:1a:14:79:76:c8:9f:6a:09:0a:8b:27:d8: ab:f7:2d:4b:39:c5:2c:8f:39:b3:5d:e1:7f:35:04: 14:f8:04:46:87:90:7d:36:65:e6:26:7b:88:90:1c: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:F5:D0:CE:97:76:6D:33:89:50:A5:D4:D3:ED:08:36:C0:D4:CC X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c6:0a:c2:62:30:c1:80:81:48:a3:4f:5e:2f:bd:73:9d:cf: 63:53:c7:68:9e:5e:19:9e:ea:85:05:62:49:02:e3:ee:db:74: 34:a5:88:81:1d:f1:a9:13:51:df:1e:74:7b:b5:0f:96:01:5d: 8e:8e:76:e2:57:40:33:71:fa:f0:97:22:97:d6:66:b8:11:84: 60:89:48:13:57:5d:6e:72:03:fc:55:4e:3f:a8:5d:05:22:e8: 48:32:4e:a0:e8:e4:28:97:50:d1:a1:e1:08:47:d2:70:88:ee: 43:fb:bb:c1:21:44:ff:d4:b8:61:1c:c9:2f:bb:08:69:02:b2: f3:94:74:20:bb:49:e9:53:06:c0:d4:b5:ff:03:de:e9:c5:56: cc:09:51:07:ab:a4:c0:1b:4f:de:54:70:e5:c5:71:91:4e:2b: e2:56:b7:fa:22:27:03:4f:ff:ae:cc:a8:07:be:2f:24:2d:60: 4b:26:68:55:3f:13:a6:11:7b:de:61:76:8c:ef:1a:25:f6:fc: cc:01:af:b5:7c:9b:e7:37:d0:46:28:54:8f:f4:60:e4:7d:20: e6:bd:cc:47:48:4b:c9:61:8a:34:a2:b3:9e:a5:4a:d3:30:ca: d6:18:44:ce:82:f2:1a:94:41:76:38:b1:2d:85:c9:8d:ed:6b: da:4c:03:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwNjA5MDMyNjQ5WhcNMjUwNjE2MDMyNjQ5WjAYMRYwFAYD VQQDEw02ODQ2NTQ3OS03MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqZEAXmAdIFydxq/zO8oyoDBrG+p/7OQ9hkrnFx/omp8PbYNu5X2mBHruHwx 8Z8sxEf2JF07wp9Eh+rnv5COLgG+gjcqDM2uCe+VAvDbZnQkzina66/4L6DpmHzv Y177I4SNbLc7WSr/Q0ty0NtAZ/0w4DR6lMGU6RNroE5zH7gXWP0e4DRYNzwyIsV1 RzK1GYaFyLxQN7mIGvNgJbximLIpKsiPApTA47WrkGNkyMYEMttV7medRZtKMwXX DiDJ6cL5kX2JOLklzV7AqvpAgT7gt80aFHl2yJ9qCQqLJ9ir9y1LOcUsjzmzXeF/ NQQU+ARGh5B9NmXmJnuIkByFsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQ9dDO l3ZtM4lQpdTT7Qg2wNTMMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9xgrCYjDBgIFIo09eL71znc9jU8donl4ZnuqFBWJJAuPu23Q0pYiB HfGpE1HfHnR7tQ+WAV2OjnbiV0AzcfrwlyKX1ma4EYRgiUgTV11ucgP8VU4/qF0F IuhIMk6g6OQol1DRoeEIR9JwiO5D+7vBIUT/1LhhHMkvuwhpArLzlHQgu0npUwbA 1LX/A97pxVbMCVEHq6TAG0/eVHDlxXGRTiviVrf6IicDT/+uzKgHvi8kLWBLJmhV PxOmEXveYXaM7xol9vzMAa+1fJvnN9BGKFSP9GDkfSDmvcxHSEvJYYo0orOepUrT MMrWGETOgvIalEF2OLEthcmN7WvaTANe -----END CERTIFICATE-----Generated at Mon Jun 9 19:39:32 2025 by rpki-client