$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: zhaW/al/bgjkbfDljvbL+2jMZkv6v1rM3WrskVEwHiY= Subject key identifier: 57:BC:8A:B0:80:42:C6:07:94:7A:8B:8E:2C:04:C1:99:18:46:A9:3F Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 043A Signing time: Tue 01 Jul 2025 00:52:26 +0000 Manifest this update: Tue 01 Jul 2025 00:52:25 +0000 Manifest next update: Tue 08 Jul 2025 00:52:25 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: wauLdilxQol5UQywwprK/GmFShwxwQRuLe6HehnkAn0=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Jul 1 00:52:25 2025 GMT Not After : Jul 8 00:52:25 2025 GMT Subject: CN=6863314a-c278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:73:ad:ea:67:a8:2a:54:57:f7:9e:57:3b: 65:a9:a9:8b:27:71:5d:5e:ef:6f:1d:b0:bb:2f:28: 2f:c5:90:2e:d0:c0:db:0a:1c:36:ea:03:09:bb:4c: f4:68:6a:87:a2:05:10:cf:d3:a1:db:64:25:b3:c0: d1:e3:ad:e8:cd:6b:55:38:fc:55:75:ee:df:e5:aa: af:b8:32:20:63:89:7e:e9:46:8d:a3:17:68:0d:95: dd:f8:f2:ca:2d:9c:b8:e5:47:03:db:cd:ca:5e:18: 73:93:f3:a9:ed:b1:eb:5a:03:84:e6:16:5e:60:67: cd:6d:b7:26:74:64:65:c9:eb:75:71:2e:ca:2a:05: cc:a5:9a:dd:71:70:42:2a:b6:0b:00:c8:71:8b:a9: e2:cd:00:d9:f9:50:b7:1a:59:09:c7:a5:b8:1c:c3: d0:b5:f4:0a:b8:7a:5e:ae:8e:13:77:d0:34:dc:3c: b8:8f:49:78:55:e0:eb:df:75:f5:9f:5e:14:23:da: 32:c0:9c:4b:85:3e:13:46:0f:24:76:e8:d2:88:ae: 84:74:9c:0c:a3:b6:85:1a:66:b1:80:9e:79:da:0c: 1c:4a:88:08:0f:11:72:d2:09:72:6f:95:17:06:a6: 30:f4:2a:84:e4:7c:aa:35:76:4e:0e:61:e2:c7:73: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:8A:B0:80:42:C6:07:94:7A:8B:8E:2C:04:C1:99:18:46:A9:3F X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bf:7d:db:b4:3e:63:32:82:ce:f9:4d:4a:5a:a3:61:5d:9c: 2f:ba:ba:2e:30:31:15:bb:3a:40:2c:21:04:17:d2:28:81:99: ae:fc:c4:d4:34:88:e6:95:43:10:3d:4a:3c:1e:1d:99:b9:eb: 1c:23:a8:21:15:92:d0:58:56:98:e2:ec:11:11:a2:db:c9:dc: f3:f7:5e:bc:97:33:57:35:ee:7f:49:7d:13:c3:93:20:74:15: 7d:fa:9a:2a:ee:4c:4f:32:aa:79:0f:bb:f3:27:00:99:5a:c7: 40:57:17:58:d9:14:aa:ea:4a:5f:2f:b9:d2:7b:fb:17:5d:a4: f3:ba:48:7c:1a:8b:7f:62:62:1f:67:c8:04:f8:ec:8e:22:69: 38:a6:07:e4:5c:f5:bb:5e:c8:dd:ef:1e:57:a6:d6:35:bb:1d: e9:c9:91:9e:79:42:ba:2d:c1:65:38:8a:58:b8:d6:a6:7b:1b: 1e:11:b9:af:58:09:f9:b0:c1:ab:07:3e:48:76:c7:c6:73:21: 2a:39:9c:7a:b9:48:4c:f9:9e:38:3a:be:96:19:56:96:42:f7: 3e:a6:01:7c:d2:eb:fa:c8:e6:86:57:b4:e9:54:4d:2b:d9:a8: 5b:5e:99:cb:13:67:12:66:7d:a1:bf:42:19:05:c6:01:c3:8f: 1c:c7:6b:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwNzAxMDA1MjI1WhcNMjUwNzA4MDA1MjI1WjAYMRYwFAYD VQQDEw02ODYzMzE0YS1jMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5FzrepnqCpUV/eeVztlqamLJ3FdXu9vHbC7LygvxZAu0MDbChw26gMJu0z0 aGqHogUQz9Oh22Qls8DR463ozWtVOPxVde7f5aqvuDIgY4l+6UaNoxdoDZXd+PLK LZy45UcD283KXhhzk/Op7bHrWgOE5hZeYGfNbbcmdGRlyet1cS7KKgXMpZrdcXBC KrYLAMhxi6nizQDZ+VC3GlkJx6W4HMPQtfQKuHpero4Td9A03Dy4j0l4VeDr33X1 n14UI9oywJxLhT4TRg8kdujSiK6EdJwMo7aFGmaxgJ552gwcSogIDxFy0glyb5UX BqYw9CqE5HyqNXZODmHix3MW2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe8irCA QsYHlHqLjiwEwZkYRqk/MB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYv33btD5jMoLO+U1KWqNhXZwvurouMDEVuzpALCEEF9IogZmu/MTU NIjmlUMQPUo8Hh2ZuescI6ghFZLQWFaY4uwREaLbydzz9168lzNXNe5/SX0Tw5Mg dBV9+poq7kxPMqp5D7vzJwCZWsdAVxdY2RSq6kpfL7nSe/sXXaTzukh8Got/YmIf Z8gE+OyOImk4pgfkXPW7Xsjd7x5XptY1ux3pyZGeeUK6LcFlOIpYuNamexseEbmv WAn5sMGrBz5IdsfGcyEqOZx6uUhM+Z44Or6WGVaWQvc+pgF80uv6yOaGV7TpVE0r 2ahbXpnLE2cSZn2hv0IZBcYBw48cx2tE -----END CERTIFICATE-----Generated at Tue Jul 1 22:38:32 2025 by rpki-client