$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: dC4nJaL1J93nEWFLx5jIJWvDiv2PS60Ks+BeR1kARzQ= Subject key identifier: 82:9B:D5:5C:4D:20:F1:36:66:97:19:CE:D4:47:B5:F4:1E:82:3C:DB Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0322 Signing time: Sun 15 Jun 2025 00:50:57 +0000 Manifest this update: Sun 15 Jun 2025 00:50:56 +0000 Manifest next update: Sun 22 Jun 2025 00:50:56 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: YyiovjWt4ME3vTdwmG0Ip3h4ETPSaKTA+/jMKVOotkI=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Jun 15 00:50:56 2025 GMT Not After : Jun 22 00:50:56 2025 GMT Subject: CN=684e18f0-ed16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:1b:97:6a:98:91:59:8c:14:2a:66:15:59: c7:cf:77:c3:ea:f4:81:1b:33:cd:d6:25:52:97:ab: 35:78:8a:06:7e:ca:d1:6a:76:dd:0b:7e:dc:c4:86: be:98:f5:c6:4d:71:d5:72:0c:7b:1b:54:b2:86:f8: b6:6b:24:02:f7:32:f1:83:3a:2b:f7:9e:9f:7c:7d: 94:26:f2:5d:56:2a:e2:97:ad:73:62:50:7c:86:e9: 3b:27:1a:19:a5:1d:f7:c0:b3:9f:8a:ec:e3:94:cc: df:f9:5c:a8:1b:7e:3c:90:2f:e1:bf:d7:c7:01:23: 02:f1:c7:b2:68:0e:80:23:80:65:e1:1d:60:0e:7f: 6e:a3:47:0e:d8:d7:83:a6:5e:e3:f7:17:dc:58:cc: 00:54:f2:d8:e4:32:c8:41:0a:80:ba:22:38:6f:64: 9b:48:cf:ce:35:83:74:ae:df:2e:31:ab:f3:26:98: 7f:40:41:9c:13:bc:ee:27:42:20:12:0e:7a:0c:11: 18:78:4b:1e:fc:b5:0b:6d:da:74:af:e1:b8:2d:f7: 4d:2f:b5:2b:20:f2:f0:1a:4a:5c:99:bf:c8:2f:26: b5:7e:7e:00:7e:d4:00:e0:95:88:71:a0:70:22:14: 8e:19:06:d7:d6:54:64:d4:4a:e8:bf:72:62:e3:5b: 21:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:D5:5C:4D:20:F1:36:66:97:19:CE:D4:47:B5:F4:1E:82:3C:DB X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:97:40:c2:87:87:ef:32:d8:39:ac:81:a9:54:4f:6d:c1:61: 49:20:cf:36:01:f5:53:74:32:82:60:51:8e:f4:82:f2:80:db: 79:8f:e0:4a:54:ee:53:10:9f:0d:25:67:c6:61:5e:8b:a8:21: 3c:01:26:89:cc:5b:00:2d:02:90:14:76:92:57:aa:31:0e:8e: 03:5d:c3:47:1f:e3:d7:87:45:6c:d1:41:8d:01:1e:df:e3:05: 33:97:85:61:86:5c:81:d3:57:91:82:7f:4c:ca:01:7c:39:05: c6:e2:7c:13:48:5f:1b:54:34:a7:1f:cf:b8:d6:ed:f1:67:22: b7:c8:cf:35:b2:e8:45:8b:e3:39:7b:fc:ab:9d:bf:62:e0:9b: c3:ab:d5:47:b7:10:1c:c6:b9:f2:1b:b8:55:5a:f3:4d:7e:e1: 57:c9:09:47:6a:8c:60:0b:97:76:1e:12:2e:3b:82:88:97:c8: ea:70:0f:fc:6b:3c:8c:7b:21:e5:b8:00:7a:87:66:82:53:81: c0:93:90:dd:87:3c:61:4e:50:ba:32:ea:c0:c9:03:49:1e:a3: f2:0e:08:12:b8:7c:68:9e:bf:27:ea:c2:01:6d:79:2a:22:c4: b3:e4:ad:29:f3:aa:f0:a4:19:7e:b9:2c:68:be:64:0d:a4:f9: 16:f3:97:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwNjE1MDA1MDU2WhcNMjUwNjIyMDA1MDU2WjAYMRYwFAYD VQQDEw02ODRlMThmMC1lZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEUbl2qYkVmMFCpmFVnHz3fD6vSBGzPN1iVSl6s1eIoGfsrRanbdC37cxIa+ mPXGTXHVcgx7G1Syhvi2ayQC9zLxgzor956ffH2UJvJdViril61zYlB8huk7JxoZ pR33wLOfiuzjlMzf+VyoG348kC/hv9fHASMC8ceyaA6AI4Bl4R1gDn9uo0cO2NeD pl7j9xfcWMwAVPLY5DLIQQqAuiI4b2SbSM/ONYN0rt8uMavzJph/QEGcE7zuJ0Ig Eg56DBEYeEse/LULbdp0r+G4LfdNL7UrIPLwGkpcmb/ILya1fn4AftQA4JWIcaBw IhSOGQbX1lRk1Erov3Ji41shPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKb1VxN IPE2ZpcZztRHtfQegjzbMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACl0DCh4fvMtg5rIGpVE9twWFJIM82AfVTdDKCYFGO9ILygNt5j+BK VO5TEJ8NJWfGYV6LqCE8ASaJzFsALQKQFHaSV6oxDo4DXcNHH+PXh0Vs0UGNAR7f 4wUzl4VhhlyB01eRgn9MygF8OQXG4nwTSF8bVDSnH8+41u3xZyK3yM81suhFi+M5 e/yrnb9i4JvDq9VHtxAcxrnyG7hVWvNNfuFXyQlHaoxgC5d2HhIuO4KIl8jqcA/8 azyMeyHluAB6h2aCU4HAk5DdhzxhTlC6MurAyQNJHqPyDggSuHxonr8n6sIBbXkq IsSz5K0p86rwpBl+uSxovmQNpPkW85cI -----END CERTIFICATE-----Generated at Sun Jun 15 08:34:52 2025 by rpki-client