$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: ma5h/MjdFE0L59TMovHEa2FgSTkjcyAVIEyLk45KFx4= Subject key identifier: 36:4D:D2:95:7E:66:D9:3A:35:1F:FB:EB:32:67:90:C9:9B:F5:E2:41 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 6C Signing time: Sun 15 Jun 2025 06:11:29 +0000 Manifest this update: Sun 15 Jun 2025 06:11:29 +0000 Manifest next update: Sun 22 Jun 2025 06:11:29 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: VXjNsxhap+mDQ3fnEqhm+DCinRcOkQMuczf5cPwAHsU=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: B6GTUBQJjZfy0L/2y0BwFYd9G60axGsfhhHtTmQD3Vw=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: MaCtkavFP9h6cbzbI+/48yQalN3EQ9/HSWusPsbFrP0=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: 8ewBwE8XstXeeqmSvgrbIwTd2CEtwyCXsNRMX6ARDE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Jun 15 06:11:29 2025 GMT Not After : Jun 22 06:11:29 2025 GMT Subject: CN=684e6411-bc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:7a:57:93:c8:fb:28:69:2d:e4:5f:cc:b5: aa:d8:e8:1d:e1:3b:81:59:8b:7e:09:46:55:f5:f8: 64:4f:9e:ee:25:a1:a5:3d:50:c0:0b:fe:81:8b:37: e5:47:bc:85:3f:5b:09:d9:95:3d:c5:7c:6d:53:d1: 45:2e:d6:b8:03:2a:db:fd:da:94:26:1b:41:6d:f0: 54:97:af:7e:60:01:6d:f4:a3:7c:01:6b:4f:a1:f0: 56:e2:7f:46:5e:53:27:35:7d:69:de:66:84:c2:52: d2:85:ea:02:6e:04:78:ad:fe:7a:43:66:75:7e:9f: 5e:09:fe:5f:05:e3:f5:96:f5:f7:81:6c:fa:9e:33: 40:53:2b:53:c1:4e:48:7a:82:d4:8d:ff:a4:5b:b5: fc:ca:77:f5:4d:12:3e:5a:96:8a:d6:74:95:2c:48: 4c:5b:bd:cf:73:9a:c2:ff:6c:b9:ed:56:06:62:ec: 7d:a0:dd:d4:09:9e:9d:c8:0f:41:1b:51:5f:2a:75: 85:79:d7:b3:20:e5:6c:db:7f:09:5a:58:bb:a9:52: ea:00:19:1d:23:30:ef:6a:e0:3c:8c:e2:8e:da:d3: 9d:97:2e:0d:6f:cd:a2:ef:a1:d6:4d:bf:e2:86:42: 89:1c:83:93:08:c3:12:a4:13:eb:6b:d1:49:e8:5a: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:D2:95:7E:66:D9:3A:35:1F:FB:EB:32:67:90:C9:9B:F5:E2:41 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:13:ac:64:a9:5c:b2:22:d3:b0:26:f8:57:1a:9f:88:0f:ec: 94:93:21:f3:84:b2:7e:2b:35:b5:4f:e3:6e:ab:b2:67:e3:ec: a0:b9:f5:7b:ee:dc:57:c7:15:9a:dd:65:1b:3f:79:8b:0a:fb: 59:9a:a1:93:79:94:41:37:b1:e4:f7:ef:09:c5:99:f8:c0:97: 94:4e:3e:01:fc:e8:94:e8:2c:80:8a:71:7a:fe:81:45:75:cb: fa:b5:55:1d:b0:4e:7f:b9:bc:bf:1a:c1:a3:9f:3b:1b:d2:42: 1f:01:13:18:72:97:05:28:09:ca:a4:f6:47:a6:be:63:f8:80: 2e:80:b8:d6:8b:c3:70:1c:b2:43:5b:34:42:8d:61:ae:07:11: 82:1b:6a:35:64:9a:50:3b:dc:12:a7:4b:df:b8:83:87:db:28: 96:d4:11:de:a4:2a:91:e8:4b:37:aa:4c:29:ba:6f:d1:10:69: c8:f3:ab:60:23:bf:35:73:59:9a:c1:80:72:f7:e8:8b:b5:b6: 81:98:9e:54:0b:5a:4a:87:2d:66:58:6c:95:18:3e:9d:38:c1: 9e:d8:46:1f:60:74:4c:5d:c0:be:17:49:2a:0c:fb:1b:15:44: b1:f9:13:26:b5:e5:81:e9:8d:48:92:9f:14:ba:63:0a:92:a4: 13:57:ea:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJFRjExMC8GA1UEBRMoODcxOTdGRDU0NkRDMzE1MjMxMTFERDkzOTBCMUJBM0Yz RDcwMjY1NjAeFw0yNTA2MTUwNjExMjlaFw0yNTA2MjIwNjExMjlaMBgxFjAUBgNV BAMTDTY4NGU2NDExLWJjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+lnpXk8j7KGkt5F/MtarY6B3hO4FZi34JRlX1+GRPnu4loaU9UMAL/oGLN+VH vIU/WwnZlT3FfG1T0UUu1rgDKtv92pQmG0Ft8FSXr35gAW30o3wBa0+h8Fbif0Ze Uyc1fWneZoTCUtKF6gJuBHit/npDZnV+n14J/l8F4/WW9feBbPqeM0BTK1PBTkh6 gtSN/6RbtfzKd/VNEj5alorWdJUsSExbvc9zmsL/bLntVgZi7H2g3dQJnp3ID0Eb UV8qdYV517Mg5WzbfwlaWLupUuoAGR0jMO9q4DyM4o7a052XLg1vzaLvodZNv+KG Qokcg5MIwxKkE+tr0UnoWirLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNk3SlX5m 2To1H/vrMmeQyZv14kEwHwYDVR0jBBgwFoAUhxl/1UbcMVIxEd2TkLG6Pz1wJlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkVGL0ZDNjUwQjcyQjcx RDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0ps WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHhsXzFVYmNNVkl4RWQyVGtMRzZQejF3SmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkVGL0ZDNjUwQjcyQjcxRDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJ eEVkMlRrTEc2UHoxd0psWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGATrGSpXLIi07Am+Fcan4gP7JSTIfOEsn4rNbVP426rsmfj7KC59Xvu 3FfHFZrdZRs/eYsK+1maoZN5lEE3seT37wnFmfjAl5ROPgH86JToLICKcXr+gUV1 y/q1VR2wTn+5vL8awaOfOxvSQh8BExhylwUoCcqk9kemvmP4gC6AuNaLw3AcskNb NEKNYa4HEYIbajVkmlA73BKnS9+4g4fbKJbUEd6kKpHoSzeqTCm6b9EQacjzq2Aj vzVzWZrBgHL36Iu1toGYnlQLWkqHLWZYbJUYPp04wZ7YRh9gdExdwL4XSSoM+xsV RLH5Eya15YHpjUiSnxS6YwqSpBNX6l8= -----END CERTIFICATE-----Generated at Sun Jun 15 10:04:24 2025 by rpki-client