$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: emsYdBRpBXhAHHvU3IzGK6bLqRtEuwxGbAwBEK1m0GM= Subject key identifier: B9:63:C7:5A:E5:5B:92:61:89:15:33:15:AE:B8:2B:7B:E9:9E:1C:60 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 0FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 0FD7 Signing time: Fri 30 May 2025 17:39:30 +0000 Manifest this update: Fri 30 May 2025 17:39:29 +0000 Manifest next update: Fri 06 Jun 2025 17:39:29 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: B89AsNnk35wGZbERm91b623Wzi6+nsUvWiUqHND7nCY=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: May 30 17:39:29 2025 GMT Not After : Jun 6 17:39:29 2025 GMT Subject: CN=6839ed52-870d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:11:22:65:5c:b8:b4:4d:d9:eb:91:6e:e2: 73:8b:8d:33:b8:42:ce:b1:36:34:5b:b6:9b:d7:96: 66:af:d5:59:30:65:60:60:40:10:ac:98:83:7b:b2: 7f:14:f9:f7:f8:ac:46:7b:64:76:6f:d6:33:5b:da: 41:51:4d:6f:0e:65:cb:7f:ee:19:68:dc:8e:73:36: 02:3a:a3:ef:e1:30:51:0f:93:0b:60:28:3b:d2:d8: 1e:68:c5:17:87:77:e7:1f:0e:00:8b:e9:2d:3e:4c: 6b:42:9c:e3:36:8f:d4:7d:ad:e9:80:85:bc:d1:94: 1f:62:47:af:52:9c:45:5b:64:63:ce:10:b0:94:98: af:1e:ad:e9:00:e1:97:98:be:c8:19:9e:24:43:fc: df:56:a8:40:57:dc:1e:5e:e2:81:c2:c4:a9:d1:ca: 0f:a5:26:dc:49:d3:2e:45:03:63:fb:62:09:c5:9f: 30:39:f6:64:41:3e:18:cb:76:23:5f:06:36:76:2d: 00:c7:c5:21:ed:b4:52:a0:41:fb:f7:8d:32:ef:ab: 8d:aa:47:b6:17:84:81:fa:62:5d:dd:50:53:18:54: 84:48:c3:f6:16:34:29:ca:da:c6:27:5e:84:15:7f: 1b:9d:86:d1:f2:70:5b:b6:39:e8:4f:f8:a0:a1:ad: 28:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:C7:5A:E5:5B:92:61:89:15:33:15:AE:B8:2B:7B:E9:9E:1C:60 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d6:6a:85:a4:d7:5f:d1:52:fb:d2:13:77:54:a0:4a:3f:b0: 2f:5a:28:25:50:ac:0f:6b:6e:ce:e2:65:cc:4e:74:43:d1:35: 8a:ca:c4:ea:63:e9:30:8c:e7:0c:55:81:0e:9f:62:be:4e:1e: 2c:cd:96:e8:7c:5d:d7:f8:74:f2:53:74:8c:f1:86:b4:78:4b: 55:e9:77:83:48:c9:4f:3d:23:2c:84:59:0f:b9:21:79:fc:5f: f7:40:ad:c0:6e:dc:75:e4:e9:43:70:4e:00:72:36:92:44:16: dc:b3:a2:6e:b4:3d:9a:4b:03:33:73:53:80:9c:fc:33:a0:1f: 1c:8d:86:7f:f9:18:c8:9f:cc:3c:3e:71:66:27:05:f1:8c:fe: e5:d7:5a:b4:0e:f6:55:cd:9b:33:ec:24:49:3a:a6:76:dc:82: b9:ad:e0:7f:cb:4d:3e:5c:b3:c3:9e:44:06:82:3e:7f:ec:b6: bb:1b:88:11:1e:dd:d6:9b:51:6b:95:10:eb:81:d9:d5:10:df: 70:e6:df:66:a4:a9:d1:ee:f9:d5:c9:f5:55:07:2f:b8:2c:d6: 9e:2f:1d:f3:ba:2b:b3:f8:ef:33:f4:e4:83:b7:01:9d:02:e8: 38:3b:f5:62:5a:32:59:8d:13:15:12:2a:f1:bd:84:c4:c2:82: 20:85:df:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUwNTMwMTczOTI5WhcNMjUwNjA2MTczOTI5WjAYMRYwFAYD VQQDEw02ODM5ZWQ1Mi04NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud8RImVcuLRN2euRbuJzi40zuELOsTY0W7ab15Zmr9VZMGVgYEAQrJiDe7J/ FPn3+KxGe2R2b9YzW9pBUU1vDmXLf+4ZaNyOczYCOqPv4TBRD5MLYCg70tgeaMUX h3fnHw4Ai+ktPkxrQpzjNo/Ufa3pgIW80ZQfYkevUpxFW2RjzhCwlJivHq3pAOGX mL7IGZ4kQ/zfVqhAV9weXuKBwsSp0coPpSbcSdMuRQNj+2IJxZ8wOfZkQT4Yy3Yj XwY2di0Ax8Uh7bRSoEH7940y76uNqke2F4SB+mJd3VBTGFSESMP2FjQpytrGJ16E FX8bnYbR8nBbtjnoT/igoa0oYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLljx1rl W5JhiRUzFa64K3vpnhxgMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA51mqFpNdf0VL70hN3VKBKP7AvWiglUKwPa27O4mXMTnRD0TWKysTq Y+kwjOcMVYEOn2K+Th4szZbofF3X+HTyU3SM8Ya0eEtV6XeDSMlPPSMshFkPuSF5 /F/3QK3Abtx15OlDcE4AcjaSRBbcs6JutD2aSwMzc1OAnPwzoB8cjYZ/+RjIn8w8 PnFmJwXxjP7l11q0DvZVzZsz7CRJOqZ23IK5reB/y00+XLPDnkQGgj5/7La7G4gR Ht3Wm1FrlRDrgdnVEN9w5t9mpKnR7vnVyfVVBy+4LNaeLx3zuiuz+O8z9OSDtwGd Aug4O/ViWjJZjRMVEirxvYTEwoIghd/v -----END CERTIFICATE-----Generated at Sat May 31 17:00:16 2025 by rpki-client