$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: D1NvmvyDcZn2NI1WRiMQHx0YIXoKqIthlsykLqo+LPs= Subject key identifier: 97:DA:91:1E:1B:F7:C9:CA:A8:7C:9A:AA:7D:27:0F:83:98:94:63:00 Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 34A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 3495 Signing time: Fri 30 May 2025 14:59:08 +0000 Manifest this update: Fri 30 May 2025 14:59:07 +0000 Manifest next update: Fri 06 Jun 2025 14:59:07 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: QtvGFL5JIW+laGv6M9Das10W1YDKZhxjO5fSE/v9Ai4=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: alhBAf8jvRhFefsbDXOa8VjrZGUtci5WGYLgfA9nSPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13472 (0x34a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: May 30 14:59:07 2025 GMT Not After : Jun 6 14:59:07 2025 GMT Subject: CN=6839c7bb-7496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fc:47:b0:9b:e0:d9:42:79:2f:5c:f2:21:cc: 25:ff:d8:4b:89:be:39:41:b5:eb:84:19:84:47:0f: 34:fa:85:6c:78:8d:40:f8:dc:69:c0:a6:3e:18:19: f2:d7:da:20:f5:28:d6:19:11:fe:8f:a4:58:a5:3b: f4:e8:39:0f:b5:34:f3:24:59:83:cd:49:2a:94:33: 7a:cd:ea:a9:f2:10:61:77:97:9b:3e:ce:c2:ac:d5: 1c:39:3d:85:c7:74:e1:49:45:88:5c:3f:04:db:49: bb:05:6b:f8:2b:b0:0e:1b:35:58:6f:55:4f:a7:18: cb:a4:6c:86:7a:af:2f:6c:3c:b8:b4:3b:29:f3:91: e6:60:d0:61:cd:2d:11:2c:2a:4a:9c:99:d4:23:43: 4c:82:37:10:22:50:0e:e7:5c:91:a2:ba:c2:af:c0: 26:f6:33:17:f8:06:87:40:ea:61:5a:69:97:99:3a: 35:cb:ef:b7:8a:24:fe:34:32:8e:84:63:ba:4c:db: 10:87:53:4b:4b:85:69:70:73:e9:52:cf:d4:81:a6: 88:2f:8b:d2:4a:00:54:cb:30:e5:47:74:3b:df:f5: f8:08:a3:11:39:3f:11:3d:0a:00:cf:29:a3:eb:8f: 0b:66:de:58:a5:1d:7e:97:9c:a3:84:1a:9e:0e:7b: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:91:1E:1B:F7:C9:CA:A8:7C:9A:AA:7D:27:0F:83:98:94:63:00 X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fc:7a:d8:35:1e:f7:a2:c7:bb:89:b7:6f:ea:22:25:3b:6e: a6:c3:7f:33:ad:aa:e0:80:96:db:74:03:93:c4:08:72:9f:40: 16:00:aa:19:d6:97:77:05:2c:3d:7c:47:35:ca:0f:b7:38:f5: 71:18:61:9c:b9:aa:29:07:35:0a:8d:1c:41:0b:e6:84:e0:46: c9:22:d6:9e:82:49:e0:44:c4:df:e3:36:ab:e7:cc:f0:2f:b0: f6:af:f1:6e:fc:a2:ca:0f:f9:1b:ac:a0:2f:f8:3e:1d:e8:c4: 02:0e:f5:6a:71:61:a4:a7:41:04:db:8c:64:13:5a:b4:3e:86: cf:bf:a2:ef:64:b9:84:dc:94:13:78:6c:1e:4f:53:2d:9d:73: 0d:a0:92:33:5e:3f:69:ee:48:95:2f:0e:fe:56:cb:dd:1b:36: 98:1a:97:fc:89:33:b5:7f:45:36:d7:4c:0b:c2:22:85:0d:e2: bf:d8:51:27:42:6b:79:ce:ed:2c:bc:8f:4e:35:d1:8f:88:db: f3:66:0a:0a:53:b2:17:42:a2:47:c2:a8:77:f4:ac:e9:15:86: b6:62:92:b6:65:de:1e:a4:a4:7d:37:e2:a3:ac:52:12:9a:51: 3c:60:34:4f:d5:f6:5d:3e:69:34:4b:b9:ea:f3:78:49:4f:4f: 7f:32:86:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjUwNTMwMTQ1OTA3WhcNMjUwNjA2MTQ1OTA3WjAYMRYwFAYD VQQDEw02ODM5YzdiYi03NDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PxHsJvg2UJ5L1zyIcwl/9hLib45QbXrhBmERw80+oVseI1A+NxpwKY+GBny 19og9SjWGRH+j6RYpTv06DkPtTTzJFmDzUkqlDN6zeqp8hBhd5ebPs7CrNUcOT2F x3ThSUWIXD8E20m7BWv4K7AOGzVYb1VPpxjLpGyGeq8vbDy4tDsp85HmYNBhzS0R LCpKnJnUI0NMgjcQIlAO51yRorrCr8Am9jMX+AaHQOphWmmXmTo1y++3iiT+NDKO hGO6TNsQh1NLS4VpcHPpUs/UgaaIL4vSSgBUyzDlR3Q73/X4CKMROT8RPQoAzymj 648LZt5YpR1+l5yjhBqeDnsMPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfakR4b 98nKqHyaqn0nD4OYlGMAMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/HrYNR73ose7ibdv6iIlO26mw38zrarggJbbdAOTxAhyn0AWAKoZ 1pd3BSw9fEc1yg+3OPVxGGGcuaopBzUKjRxBC+aE4EbJItaegkngRMTf4zar58zw L7D2r/Fu/KLKD/kbrKAv+D4d6MQCDvVqcWGkp0EE24xkE1q0PobPv6LvZLmE3JQT eGweT1MtnXMNoJIzXj9p7kiVLw7+VsvdGzaYGpf8iTO1f0U210wLwiKFDeK/2FEn Qmt5zu0svI9ONdGPiNvzZgoKU7IXQqJHwqh39KzpFYa2YpK2Zd4epKR9N+KjrFIS mlE8YDRP1fZdPmk0S7nq83hJT09/MoZM -----END CERTIFICATE-----Generated at Sat May 31 16:34:02 2025 by rpki-client