$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json) Hash identifier: QJe8xCkqmyWCMt8u31cCdT8cg9rWRJ2cyTTlYX/TLqg= Subject key identifier: 26:C6:11:AF:4C:62:40:C8:7E:A7:E0:E9:05:68:B4:84:B3:58:8F:9C Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft Manifest number: 67 Signing time: Thu 07 Aug 2025 07:36:11 +0000 Manifest this update: Thu 07 Aug 2025 07:36:11 +0000 Manifest next update: Thu 14 Aug 2025 07:36:11 +0000 Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: 8BhonX/j6WbQQnxkAn3w13V166wBDUPk38S5tbkSv20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Validity Not Before: Aug 7 07:36:11 2025 GMT Not After : Aug 14 07:36:11 2025 GMT Subject: CN=6894576b-0875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:3f:be:40:b8:35:97:ee:4e:e5:49:de:87: 39:62:37:f6:9d:3a:50:50:24:9c:0b:89:b6:bd:83: fa:83:4f:53:c5:be:01:33:06:2f:f9:cf:bd:3a:3b: cb:16:4d:ac:8e:ab:a9:27:8e:cc:03:01:07:0a:bc: c8:18:04:80:9a:a9:51:a0:76:f6:93:8e:87:b7:c8: 9f:f6:90:22:3a:56:ae:7d:17:dd:db:28:c1:dd:16: 4b:6f:6d:13:a6:1d:ed:7f:e2:ca:3e:7d:7c:33:78: 4c:2d:50:4c:89:65:aa:eb:e8:d0:54:13:3b:6e:44: af:e2:11:c2:94:73:aa:8f:7f:9a:17:ff:16:af:24: e4:56:17:02:0c:0f:30:2a:5a:78:d0:15:d6:c1:7a: 57:9d:80:fe:37:66:0b:a6:f1:6f:64:3a:97:31:7d: e1:5e:bb:69:4c:78:d2:b1:b0:46:58:1d:3b:d9:f0: c1:5e:53:b4:80:d6:83:05:fb:87:1e:c1:8c:4e:ec: 48:88:b1:21:e6:fa:86:bd:1a:2c:3b:80:af:d4:e6: 16:76:14:65:36:75:24:24:73:5d:8a:fa:88:a4:f8: 90:68:95:94:3a:92:74:9f:1e:2a:dd:d0:d0:47:07: 28:af:08:d8:27:6d:5d:e2:89:62:6a:2a:4d:36:77: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C6:11:AF:4C:62:40:C8:7E:A7:E0:E9:05:68:B4:84:B3:58:8F:9C X509v3 Authority Key Identifier: keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:52:b1:51:54:75:e9:30:28:21:79:5b:16:13:21:36:93: 25:84:8f:80:bb:42:43:c9:97:ea:84:4f:e4:fb:ea:e0:8e:72: 33:51:26:67:da:04:36:d8:d1:cf:be:c5:fb:71:ab:0d:f6:18: 5b:4a:bf:8a:80:d9:f0:8e:ce:8b:12:4b:b8:66:0d:ac:6c:e0: 3c:9a:e3:a6:f6:e2:3c:45:5f:b7:02:9e:73:60:15:86:0a:53: 34:84:66:95:75:fd:55:c2:da:60:2c:76:b9:24:c8:8e:12:dd: a6:15:02:35:7a:98:c2:06:5f:89:9f:02:af:ce:0a:16:ac:3d: fd:e2:29:37:7f:c3:7d:74:7a:da:c6:14:80:aa:94:12:ce:be: a4:62:e1:9f:b1:eb:1c:fa:c2:4d:61:a1:3f:6c:ea:3c:4a:2e: 7b:e5:b1:8c:dd:b2:39:b6:26:3a:fd:11:21:c0:e7:c2:f3:89: 2a:79:94:3b:8b:06:11:37:15:87:5f:d0:38:a5:c4:ea:f3:64: 36:af:d4:e0:f7:05:aa:90:3d:00:2b:67:e4:8b:9d:99:98:f1: 97:b5:9f:1f:30:f4:6b:8a:94:16:2e:a1:24:dc:66:c4:0b:62: b2:ff:d6:bd:99:7a:e2:7c:a3:47:f6:3a:21:45:23:d0:27:91: 12:1f:0b:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoOTg3QTI0MDM1QzE1MzkxNzAyMEI2NTFEQjk4RjA5MUYw QUFBMzIyNzAeFw0yNTA4MDcwNzM2MTFaFw0yNTA4MTQwNzM2MTFaMBgxFjAUBgNV BAMTDTY4OTQ1NzZiLTA4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwjD++QLg1l+5O5UnehzliN/adOlBQJJwLiba9g/qDT1PFvgEzBi/5z706O8sW TayOq6knjswDAQcKvMgYBICaqVGgdvaTjoe3yJ/2kCI6Vq59F93bKMHdFktvbROm He1/4so+fXwzeEwtUEyJZarr6NBUEztuRK/iEcKUc6qPf5oX/xavJORWFwIMDzAq WnjQFdbBeledgP43Zgum8W9kOpcxfeFeu2lMeNKxsEZYHTvZ8MFeU7SA1oMF+4ce wYxO7EiIsSHm+oa9Giw7gK/U5hZ2FGU2dSQkc12K+oik+JBolZQ6knSfHird0NBH ByivCNgnbV3iiWJqKk02d3VnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJsYRr0xi QMh+p+DpBWi0hLNYj5wwHwYDVR0jBBgwFoAUmHokA1wVORcCC2UduY8JHwqqMicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0FGREVGRTU0RDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1JjQ0MyVWR1WThKSHdxcU1p Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUhva0Exd1ZPUmNDQzJVZHVZOEpId3FxTWljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0FGREVGRTU0RDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1Jj Q0MyVWR1WThKSHdxcU1pYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLDUrFRVHXpMCgheVsWEyE2kyWEj4C7QkPJl+qET+T76uCOcjNRJmfa BDbY0c++xftxqw32GFtKv4qA2fCOzosSS7hmDaxs4Dya46b24jxFX7cCnnNgFYYK UzSEZpV1/VXC2mAsdrkkyI4S3aYVAjV6mMIGX4mfAq/OChasPf3iKTd/w310etrG FICqlBLOvqRi4Z+x6xz6wk1hoT9s6jxKLnvlsYzdsjm2Jjr9ESHA58LziSp5lDuL BhE3FYdf0DilxOrzZDav1OD3BaqQPQArZ+SLnZmY8Ze1nx8w9GuKlBYuoSTcZsQL YrL/1r2ZeuJ8o0f2OiFFI9AnkRIfC8w= -----END CERTIFICATE-----Generated at Fri Aug 8 10:13:11 2025 by rpki-client