$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: iyYjSERnhrkupsFFIDpnKTLX2mUQzSPCl4aU6b8XQRs= Subject key identifier: 3F:F7:21:8C:18:87:79:D3:9B:51:8B:FF:71:83:77:88:6D:F8:94:A2 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 6F Signing time: Sat 31 May 2025 06:27:38 +0000 Manifest this update: Sat 31 May 2025 06:27:37 +0000 Manifest next update: Sat 07 Jun 2025 06:27:37 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: /FgYSSJGBtZoXce76i1xQSgxLcA8BT8F7Fogwwbvsgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: May 31 06:27:37 2025 GMT Not After : Jun 7 06:27:37 2025 GMT Subject: CN=683aa15a-4d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:57:38:5b:77:be:2b:29:7a:33:d2:01:77: 94:fd:b4:0b:8b:3c:30:ae:fa:2e:1b:2c:fe:fb:48: 21:d9:0f:49:ab:4a:92:53:24:31:b5:34:f1:27:bd: 9b:5e:13:20:60:d7:67:bd:fb:78:ab:31:a5:8c:cc: 3d:79:e9:13:bd:72:6d:85:33:64:a4:1d:bf:f8:2e: 70:f6:ef:77:2f:3f:49:a9:6f:2c:46:63:a8:b6:73: 67:c9:cc:13:6a:17:b3:55:88:b7:8a:fe:c9:5e:39: 44:b3:01:ad:19:49:95:0f:96:2e:7f:ec:2e:42:9a: de:71:94:64:18:0b:54:70:a8:f1:6e:66:fb:04:94: 61:d3:ad:d2:ac:b3:98:53:49:6e:aa:6b:22:94:f5: 9c:26:6f:11:fc:94:db:46:a8:88:7a:4a:af:3a:f3: 60:23:6d:a2:11:5e:6e:94:29:11:91:80:bd:49:0d: 7a:89:de:fa:99:e0:33:21:3b:20:d8:52:c5:fc:51: 7d:b3:98:dd:f0:03:1f:bc:36:e2:9b:a7:50:48:b3: c6:e9:c7:29:b6:7e:55:b0:42:bd:fc:3b:eb:17:ee: 93:c0:e2:77:b9:3b:d7:11:2f:fd:db:fa:58:dc:e2: 16:6b:fd:f7:2e:47:ce:09:c7:8d:b2:a3:20:7a:d3: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F7:21:8C:18:87:79:D3:9B:51:8B:FF:71:83:77:88:6D:F8:94:A2 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:79:2b:83:e5:2c:d8:58:8f:0a:5a:67:52:1c:ce:65:cb:1a: ce:cd:40:83:27:f1:80:cd:ab:0f:f0:49:eb:48:7b:36:78:56: 66:08:85:fb:0e:a6:1b:e4:38:da:e3:23:4e:6f:06:6a:44:27: 3d:4e:71:f4:0a:a2:bd:28:d5:a0:c6:3c:92:de:26:63:34:b0: b5:dd:36:98:81:73:60:85:1e:43:65:39:5d:7c:88:0e:12:67: 56:f7:f8:76:60:bc:f6:ff:44:48:7d:fe:ec:4a:3e:df:ec:ce: 7e:cf:d2:3a:3c:cd:dd:c7:3c:0c:c1:e6:4b:31:26:b5:21:39: b5:9c:71:2f:5e:0c:9e:b5:8b:45:e2:3b:31:fb:ba:de:ee:10: 97:3f:4b:31:4c:c6:42:10:6a:1d:b1:fa:1b:e7:2f:88:86:5a: d9:56:bd:b9:dd:59:e4:ba:05:2d:9c:25:71:5c:91:9f:e7:15: 19:d8:c5:cf:ec:3c:ed:69:f9:aa:45:fb:00:73:a1:ef:6a:24: 47:06:60:c2:e1:0d:d9:df:c7:9d:8c:32:a4:b7:c5:fb:fc:df: 1a:ef:bf:b9:c0:b3:cb:3e:23:4b:13:b7:6c:7f:4c:db:f3:ab: 87:90:38:14:62:6f:27:36:53:73:67:af:1c:bf:a1:7f:1f:6a: 86:fb:d2:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzIwQTExMC8GA1UEBRMoODYzMkNEMjU2NjlERDg3MjIwMjA0NTE3NDA2RTNGNkIy RjEyOTI1MTAeFw0yNTA1MzEwNjI3MzdaFw0yNTA2MDcwNjI3MzdaMBgxFjAUBgNV BAMTDTY4M2FhMTVhLTRkNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeB1c4W3e+Kyl6M9IBd5T9tAuLPDCu+i4bLP77SCHZD0mrSpJTJDG1NPEnvZte EyBg12e9+3irMaWMzD156RO9cm2FM2SkHb/4LnD273cvP0mpbyxGY6i2c2fJzBNq F7NViLeK/sleOUSzAa0ZSZUPli5/7C5Cmt5xlGQYC1RwqPFuZvsElGHTrdKss5hT SW6qayKU9ZwmbxH8lNtGqIh6Sq8682AjbaIRXm6UKRGRgL1JDXqJ3vqZ4DMhOyDY UsX8UX2zmN3wAx+8NuKbp1BIs8bpxym2flWwQr38O+sX7pPA4ne5O9cRL/3b+ljc 4hZr/fcuR84Jx42yoyB608yXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP/chjBiH edObUYv/cYN3iG34lKIwHwYDVR0jBBgwFoAUhjLNJWad2HIgIEUXQG4/ay8SklEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjBBLzgwQUFFRDgyOTU3 NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2ts RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGpMTkpXYWQySElnSUVVWFFHNF9heThTa2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjBBLzgwQUFFRDgyOTU3NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJ Z0lFVVhRRzRfYXk4U2tsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALF5K4PlLNhYjwpaZ1IczmXLGs7NQIMn8YDNqw/wSetIezZ4VmYIhfsO phvkONrjI05vBmpEJz1OcfQKor0o1aDGPJLeJmM0sLXdNpiBc2CFHkNlOV18iA4S Z1b3+HZgvPb/REh9/uxKPt/szn7P0jo8zd3HPAzB5ksxJrUhObWccS9eDJ61i0Xi OzH7ut7uEJc/SzFMxkIQah2x+hvnL4iGWtlWvbndWeS6BS2cJXFckZ/nFRnYxc/s PO1p+apF+wBzoe9qJEcGYMLhDdnfx52MMqS3xfv83xrvv7nAs8s+I0sTt2x/TNvz q4eQOBRibyc2U3Nnrxy/oX8faob70t4= -----END CERTIFICATE-----Generated at Sat May 31 17:49:37 2025 by rpki-client