$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft File: mHokA1wVORcCC2UduY8JHwqqMic.mft (raw, json) Hash identifier: EZ5nLaWatkRFk22JGOVXPTvDkllq5nHxEjxx3FM9kD8= Subject key identifier: E8:71:36:7C:09:E1:B7:12:D6:F1:C3:F7:BF:61:71:39:FB:64:8E:06 Authority key identifier: 98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 Certificate issuer: /CN=A91A31F5/serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft Manifest number: 4B Signing time: Fri 13 Jun 2025 06:14:17 +0000 Manifest this update: Fri 13 Jun 2025 06:14:16 +0000 Manifest next update: Fri 20 Jun 2025 06:14:16 +0000 Files and hashes: 1: mHokA1wVORcCC2UduY8JHwqqMic.crl (hash: xow8Sop6F/2RZFC5+vsWHNa36fCDN7YdUaPhxDq2nLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=987A24035C153917020B651DB98F091F0AAA3227 Validity Not Before: Jun 13 06:14:16 2025 GMT Not After : Jun 20 06:14:16 2025 GMT Subject: CN=684bc1b8-2942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:5a:07:ae:0f:cd:2f:d0:95:e5:47:e8:a1: 9f:ba:7b:4d:7d:78:c5:06:5a:00:89:73:a3:6b:c4: 4d:90:80:2d:37:e6:c0:eb:a8:c1:c9:86:27:8f:97: 96:76:03:8f:11:84:31:6d:31:02:7b:8b:ef:76:c0: 50:19:d5:0b:65:9d:3a:5d:50:11:d3:42:4c:1e:bc: 05:29:a8:af:55:97:9a:07:d0:66:9c:0a:33:28:16: 08:8c:5e:99:e9:99:fe:5c:36:fd:a7:06:cb:82:93: 04:78:a4:1a:6b:b6:e3:7e:ac:1f:42:56:41:65:77: 41:e5:b7:e9:72:7f:ac:0b:1a:17:ea:e1:dd:99:a4: 41:71:3a:15:25:6f:73:fc:b8:c9:c9:cd:f6:18:1c: 04:24:42:e7:80:e7:16:6c:08:2a:3f:b6:70:a8:61: 09:df:5b:8f:ff:7a:b5:92:b0:ca:e1:fb:61:83:a6: a1:0c:dc:39:bc:1d:e8:3d:07:b6:23:44:ef:9a:08: 7b:44:97:eb:f1:e6:62:68:50:09:fa:ae:a9:e0:f7: db:86:45:9a:8a:9d:3a:77:1e:a1:0a:e2:75:69:10: 71:82:29:11:38:91:83:16:78:3e:36:18:b7:8e:31: 35:9f:9a:77:d7:a2:79:ce:cd:58:35:35:40:cf:47: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:71:36:7C:09:E1:B7:12:D6:F1:C3:F7:BF:61:71:39:FB:64:8E:06 X509v3 Authority Key Identifier: keyid:98:7A:24:03:5C:15:39:17:02:0B:65:1D:B9:8F:09:1F:0A:AA:32:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHokA1wVORcCC2UduY8JHwqqMic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/AFDEFE54D6EC11EFA2799C69C4F9AE02/mHokA1wVORcCC2UduY8JHwqqMic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a4:d5:90:06:b4:7f:30:60:22:e9:8d:a5:ea:96:77:77:d1: 8d:b6:28:b3:ee:63:8c:37:ac:41:bf:c4:08:ae:3a:a0:d1:59: 09:93:0c:d0:e7:46:22:17:2b:4d:0a:cd:8f:a8:bd:53:73:91: fe:99:91:66:5f:52:75:23:c5:6b:08:93:07:20:92:bd:78:59: 82:64:6e:15:c8:05:ae:4e:1f:5f:9b:bc:12:1f:5e:ce:70:a3: c2:e8:c7:1c:11:91:67:fb:a7:eb:ea:91:be:98:33:d0:75:b5: be:89:d2:5a:f2:be:af:16:fc:27:96:cd:99:92:93:92:bb:f3: a0:44:bd:eb:85:be:3e:ff:26:b8:0e:98:37:10:e0:1c:bb:f3: 11:f8:fe:8d:fb:ad:30:05:ca:af:0a:16:30:0d:37:17:7d:a4: 61:15:e7:c1:e9:5b:f8:b8:c1:b6:72:2f:00:fe:10:72:f1:03: 5e:c3:ba:59:57:12:d8:79:c1:9a:d6:4c:b6:f0:26:55:55:34: 1c:a4:2b:41:55:f7:74:73:e6:cf:f1:5c:4e:93:4e:a1:d1:7a: 83:70:1e:2a:5e:df:b1:3a:10:86:56:06:a4:f4:de:34:bd:f3: b5:3f:44:e8:94:68:e7:2b:82:7f:67:79:74:6d:9c:a7:9a:e3: 8c:09:e5:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoOTg3QTI0MDM1QzE1MzkxNzAyMEI2NTFEQjk4RjA5MUYw QUFBMzIyNzAeFw0yNTA2MTMwNjE0MTZaFw0yNTA2MjAwNjE0MTZaMBgxFjAUBgNV BAMTDTY4NGJjMWI4LTI5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+bloHrg/NL9CV5UfooZ+6e019eMUGWgCJc6NrxE2QgC035sDrqMHJhiePl5Z2 A48RhDFtMQJ7i+92wFAZ1QtlnTpdUBHTQkwevAUpqK9Vl5oH0GacCjMoFgiMXpnp mf5cNv2nBsuCkwR4pBprtuN+rB9CVkFld0Hlt+lyf6wLGhfq4d2ZpEFxOhUlb3P8 uMnJzfYYHAQkQueA5xZsCCo/tnCoYQnfW4//erWSsMrh+2GDpqEM3Dm8Heg9B7Yj RO+aCHtEl+vx5mJoUAn6rqng99uGRZqKnTp3HqEK4nVpEHGCKRE4kYMWeD42GLeO MTWfmnfXonnOzVg1NUDPR8xbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6HE2fAnh txLW8cP3v2FxOftkjgYwHwYDVR0jBBgwFoAUmHokA1wVORcCC2UduY8JHwqqMicw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0FGREVGRTU0RDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1JjQ0MyVWR1WThKSHdxcU1p Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUhva0Exd1ZPUmNDQzJVZHVZOEpId3FxTWljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0FGREVGRTU0RDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL21Ib2tBMXdWT1Jj Q0MyVWR1WThKSHdxcU1pYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABak1ZAGtH8wYCLpjaXqlnd30Y22KLPuY4w3rEG/xAiuOqDRWQmTDNDn RiIXK00KzY+ovVNzkf6ZkWZfUnUjxWsIkwcgkr14WYJkbhXIBa5OH1+bvBIfXs5w o8LoxxwRkWf7p+vqkb6YM9B1tb6J0lryvq8W/CeWzZmSk5K786BEveuFvj7/JrgO mDcQ4By78xH4/o37rTAFyq8KFjANNxd9pGEV58HpW/i4wbZyLwD+EHLxA17DullX Eth5wZrWTLbwJlVVNBykK0FV93Rz5s/xXE6TTqHReoNwHipe37E6EIZWBqT03jS9 87U/ROiUaOcrgn9neXRtnKea44wJ5V8= -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:00 2025 by rpki-client