$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: ci7haMAW4+wKYcMXAG22PeQASEbTcUhuaLn6+EHSUyU= Subject key identifier: 63:57:E0:27:4B:D8:E0:F8:DF:30:BB:24:45:9C:08:3F:9F:40:70:ED Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 4F Signing time: Tue 03 Jun 2025 07:11:36 +0000 Manifest this update: Tue 03 Jun 2025 07:11:35 +0000 Manifest next update: Tue 10 Jun 2025 07:11:35 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: ++ArUQAq2ichcyotPXO6fbHXrQmA/Hh2Xdvu2nRzRJo=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Jun 3 07:11:35 2025 GMT Not After : Jun 10 07:11:35 2025 GMT Subject: CN=683ea028-927e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:62:f5:aa:fe:66:8a:10:3d:e8:1f:de:eb: 50:49:04:47:f8:60:55:be:b6:66:fc:90:d6:41:0f: e9:43:e6:86:a1:59:76:d1:7a:23:20:9f:77:39:18: 52:28:42:42:39:f9:e0:8d:7a:a6:0e:be:04:63:9c: 1e:1c:de:97:28:33:d1:a3:8d:67:73:94:ec:16:bf: 1c:c8:5b:cb:2d:ec:86:85:d7:04:29:2a:04:1e:e9: 75:0c:06:8d:ba:26:3c:ac:1a:d8:43:03:a6:a7:20: fe:e4:71:cb:f4:61:d4:db:44:3a:0f:25:6c:40:e1: dc:9a:8c:3a:aa:13:5d:26:23:cf:a9:54:ca:8b:76: 64:03:cb:2b:24:4e:64:a0:a9:2f:ef:39:23:e0:d0: d0:47:85:02:e1:5e:37:02:29:61:da:45:5e:d8:c5: 9e:66:80:62:27:6f:81:fe:fc:c0:6d:f6:40:fb:3f: c5:d4:5f:4f:1b:37:59:dd:14:33:e7:c8:d9:28:5e: 3b:3e:a9:14:76:a1:1e:28:b7:a1:14:76:f2:3b:8a: 07:fc:7b:3b:b2:59:89:c0:62:47:c2:53:75:e9:80: 26:b6:71:32:ed:85:b5:f7:43:40:f6:45:38:6b:fc: 95:bd:9e:24:aa:d4:7e:e0:6e:b3:ad:6c:63:ed:83: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:E0:27:4B:D8:E0:F8:DF:30:BB:24:45:9C:08:3F:9F:40:70:ED X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:6a:5c:9b:b8:00:b6:b1:a7:e2:24:09:cc:66:be:f4:ad:99: 07:47:01:74:8b:19:e5:bb:51:0d:b7:ef:5e:19:fc:3a:be:47: 55:31:85:fc:3e:fa:d2:e9:4f:e4:5e:f9:b3:c4:dc:32:7f:b8: 10:3f:a9:b4:e1:f0:28:c5:db:70:78:f8:35:62:60:cc:10:97: ab:e8:ea:17:d6:fd:45:3f:3f:10:dd:c0:14:5a:30:3e:d8:5a: 00:c7:39:c1:38:f9:40:94:d9:c3:a3:af:3b:b9:3a:72:00:16: 83:70:5b:81:fa:44:d3:7f:68:2c:43:47:e0:03:d1:b6:3c:e4: eb:05:66:64:bb:e1:19:31:c4:b1:10:c4:70:49:d3:74:66:5b: 09:41:c5:f5:53:26:e9:d7:c5:a4:da:63:6d:a3:f2:75:92:d5: 0c:f1:8f:b7:c8:2b:f1:20:a8:e5:85:39:0c:19:5e:de:98:d9: ee:57:b4:2e:5e:fd:b7:00:21:51:17:8b:db:6f:36:ad:da:7a: 3d:77:9a:69:c4:59:06:a0:48:9b:e5:a1:5a:c4:33:05:b3:0d: 23:63:6a:1c:91:76:da:58:02:f7:82:bc:33:02:a3:08:97:94: 6d:32:c3:04:d1:08:7f:07:f5:4a:dd:40:64:5b:80:8c:d8:12: 82:3e:9f:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTA2MDMwNzExMzVaFw0yNTA2MTAwNzExMzVaMBgxFjAUBgNV BAMTDTY4M2VhMDI4LTkyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0oGL1qv5mihA96B/e61BJBEf4YFW+tmb8kNZBD+lD5oahWXbReiMgn3c5GFIo QkI5+eCNeqYOvgRjnB4c3pcoM9GjjWdzlOwWvxzIW8st7IaF1wQpKgQe6XUMBo26 JjysGthDA6anIP7kccv0YdTbRDoPJWxA4dyajDqqE10mI8+pVMqLdmQDyyskTmSg qS/vOSPg0NBHhQLhXjcCKWHaRV7YxZ5mgGInb4H+/MBt9kD7P8XUX08bN1ndFDPn yNkoXjs+qRR2oR4ot6EUdvI7igf8ezuyWYnAYkfCU3XpgCa2cTLthbX3Q0D2RThr /JW9niSq1H7gbrOtbGPtg8g/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY1fgJ0vY 4PjfMLskRZwIP59AcO0wHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMpqXJu4ALaxp+IkCcxmvvStmQdHAXSLGeW7UQ23714Z/Dq+R1Uxhfw+ +tLpT+Re+bPE3DJ/uBA/qbTh8CjF23B4+DViYMwQl6vo6hfW/UU/PxDdwBRaMD7Y WgDHOcE4+UCU2cOjrzu5OnIAFoNwW4H6RNN/aCxDR+AD0bY85OsFZmS74RkxxLEQ xHBJ03RmWwlBxfVTJunXxaTaY22j8nWS1Qzxj7fIK/EgqOWFOQwZXt6Y2e5XtC5e /bcAIVEXi9tvNq3aej13mmnEWQagSJvloVrEMwWzDSNjahyRdtpYAveCvDMCowiX lG0ywwTRCH8H9UrdQGRbgIzYEoI+n9M= -----END CERTIFICATE-----Generated at Wed Jun 4 00:09:18 2025 by rpki-client