$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: +zVqm2mkfvjO27RaKyBvwPL1JAUpwdvYCvYE+/fN2yk= Subject key identifier: 22:F6:6C:8B:D0:55:9C:81:B2:25:F1:99:04:E5:B0:63:A8:BA:26:23 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 01A7 Signing time: Fri 13 Jun 2025 02:17:52 +0000 Manifest this update: Fri 13 Jun 2025 02:17:51 +0000 Manifest next update: Fri 20 Jun 2025 02:17:51 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: f5z+SWngSIJG9JsS7DivhtXb3vWlZmPWmcQToeP4MUM=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: QVA6cnHl8Ur5a0kDBgQcj4pP7Ka7QThHbgUyDhuNztQ=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: El263VSWEusvqzTfH9aiwLLR8nJJvv9GT054yDKZA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Jun 13 02:17:51 2025 GMT Not After : Jun 20 02:17:51 2025 GMT Subject: CN=684b8a50-692d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:bb:c9:05:d4:bf:d6:96:be:51:82:8a:54: 7c:2a:06:a1:b8:44:fc:c3:e8:16:ff:75:04:79:7e: 0c:d6:e3:ae:7b:83:61:cb:bf:be:e2:86:90:42:09: 4b:cc:c8:f8:35:53:cc:10:4e:b4:11:fd:1c:9d:48: 71:89:c9:1e:97:d5:34:3b:e4:5e:3f:b4:ef:9e:ca: 9c:f5:51:c6:06:8d:7c:16:ce:ea:c0:13:2a:ee:f7: ca:41:98:6a:a1:96:49:7f:29:3b:fe:25:07:3f:70: 5a:66:d2:67:66:50:89:b0:3a:1e:43:44:e7:40:eb: a5:44:78:ce:75:35:8a:c7:df:fa:dc:f3:ae:02:96: 96:2a:11:0d:9b:17:6b:3b:31:a4:b0:69:ee:84:76: 42:e6:48:93:65:e9:7f:b6:ad:98:50:db:06:3c:37: 2f:5e:c7:2d:cb:0a:c7:81:65:de:81:0d:b5:22:b2: 34:20:cd:05:94:56:f5:b2:47:a5:c0:67:61:e0:3b: 59:ee:83:2f:0c:33:09:d8:13:e1:ad:e7:3d:97:06: a7:b3:03:78:9d:75:a9:fc:7b:19:b3:2c:31:9f:f7: 8f:42:4c:23:17:40:1f:c6:47:13:45:26:a6:ce:ca: 11:83:f4:a0:b0:96:61:5b:0e:72:0c:4e:28:9d:a1: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:6C:8B:D0:55:9C:81:B2:25:F1:99:04:E5:B0:63:A8:BA:26:23 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:35:15:99:77:64:57:27:13:fc:b8:e9:fe:bd:fd:a4:d7:24: 7c:fc:e8:71:63:ff:18:b6:14:82:2b:d6:06:67:29:93:b8:63: 6d:07:7b:73:20:4d:5b:0a:41:cf:e9:f8:d5:47:6f:bf:39:c1: 1e:26:31:6d:f9:0a:4c:71:55:68:0f:f7:2d:44:37:47:d5:17: 9e:a8:1a:89:b0:b5:51:60:23:d5:2f:31:98:c9:1b:59:c0:58: b4:de:f8:ee:8e:b8:db:91:42:77:19:74:66:03:19:ea:41:28: e3:0c:b1:09:01:2e:84:2a:e4:aa:3c:70:79:0a:ae:12:df:d8: b4:28:fa:60:94:bf:93:d7:14:76:bb:94:e7:e0:bd:ee:e5:ee: fc:c5:3a:74:e7:41:3f:e0:31:65:b3:0b:d4:63:23:c5:d5:6d: 62:2f:32:4d:3f:82:ea:6d:4c:27:24:f9:4d:d7:ce:41:6d:24: 17:d3:63:72:d1:56:80:60:3b:ea:fd:2c:eb:46:05:0c:ac:b1: da:8a:a0:fe:4f:83:aa:77:fa:4d:15:4a:75:03:6f:05:0b:57: c7:af:37:67:2f:32:cf:e3:93:c3:94:4c:2a:e0:6a:31:75:90: 6f:35:de:0a:f0:b3:b2:6a:8c:40:47:e2:05:bd:27:e9:3f:11: bd:4d:96:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUwNjEzMDIxNzUxWhcNMjUwNjIwMDIxNzUxWjAYMRYwFAYD VQQDEw02ODRiOGE1MC02OTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7i7yQXUv9aWvlGCilR8KgahuET8w+gW/3UEeX4M1uOue4Nhy7++4oaQQglL zMj4NVPMEE60Ef0cnUhxickel9U0O+ReP7Tvnsqc9VHGBo18Fs7qwBMq7vfKQZhq oZZJfyk7/iUHP3BaZtJnZlCJsDoeQ0TnQOulRHjOdTWKx9/63POuApaWKhENmxdr OzGksGnuhHZC5kiTZel/tq2YUNsGPDcvXsctywrHgWXegQ21IrI0IM0FlFb1skel wGdh4DtZ7oMvDDMJ2BPhrec9lwanswN4nXWp/HsZsywxn/ePQkwjF0AfxkcTRSam zsoRg/SgsJZhWw5yDE4onaFJmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL2bIvQ VZyBsiXxmQTlsGOouiYjMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzNRWZd2RXJxP8uOn+vf2k1yR8/OhxY/8YthSCK9YGZymTuGNtB3tz IE1bCkHP6fjVR2+/OcEeJjFt+QpMcVVoD/ctRDdH1ReeqBqJsLVRYCPVLzGYyRtZ wFi03vjujrjbkUJ3GXRmAxnqQSjjDLEJAS6EKuSqPHB5Cq4S39i0KPpglL+T1xR2 u5Tn4L3u5e78xTp050E/4DFlswvUYyPF1W1iLzJNP4LqbUwnJPlN185BbSQX02Ny 0VaAYDvq/SzrRgUMrLHaiqD+T4Oqd/pNFUp1A28FC1fHrzdnLzLP45PDlEwq4Gox dZBvNd4K8LOyaoxAR+IFvSfpPxG9TZZU -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:02 2025 by rpki-client