$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: xnXm6Vg40ocPQnUDWcEKK5FicCp6P2jhEr9XVxIaaXk= Subject key identifier: 57:91:F7:30:D0:07:10:B8:76:57:AE:29:6F:A1:6C:0D:C9:3B:44:11 Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: 52 Signing time: Sun 15 Jun 2025 06:19:48 +0000 Manifest this update: Sun 15 Jun 2025 06:19:47 +0000 Manifest next update: Sun 22 Jun 2025 06:19:47 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: 5vxNzpbsCIK1GgvHpuT4Q4HvbzSbmmfN8Z9f0/WrN28=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Jun 15 06:19:47 2025 GMT Not After : Jun 22 06:19:47 2025 GMT Subject: CN=684e6604-1b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:e7:b9:ed:ba:c1:6e:63:b2:80:5c:65:fd: 83:ec:04:ea:04:a6:e4:ac:27:ee:ef:02:34:f8:e5: f1:09:dd:97:be:ae:46:10:25:4c:bb:6a:5b:29:40: 4c:c2:24:75:d8:69:e1:17:54:2b:b6:f9:1f:e3:8e: 81:fe:47:82:77:95:b3:e6:70:e1:3a:9d:6e:77:cf: 18:a6:3a:dd:8f:b2:ee:0c:67:fe:9f:21:70:3b:f0: b8:63:20:6f:30:5a:fb:85:f8:0e:e2:0d:83:e8:db: 1a:56:c3:01:88:8a:79:44:93:5f:7d:b2:49:66:6a: bf:3f:c7:a5:ba:6a:88:da:8c:7f:87:b4:ab:82:26: 90:03:38:50:59:65:99:fa:46:23:a9:9b:9f:16:1e: 4a:69:e5:f6:6a:37:02:19:9b:59:20:60:6f:d8:c1: de:46:8b:97:51:ea:ed:cf:14:1a:be:8a:52:bd:f7: 96:b8:24:07:b3:8d:a0:25:86:65:e6:3a:57:7b:17: a9:62:83:06:c1:89:c5:26:0e:07:38:19:14:42:22: 77:62:61:61:cf:da:63:47:ce:8b:48:1c:04:31:69: 1d:87:83:0a:13:e2:17:da:35:5c:a6:7d:c1:c1:61: eb:43:6a:72:03:49:06:e2:38:0f:03:2e:55:2c:f6: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:91:F7:30:D0:07:10:B8:76:57:AE:29:6F:A1:6C:0D:C9:3B:44:11 X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:23:dd:08:9e:d6:3a:84:47:af:c3:52:f8:78:e6:71:d7:eb: d3:37:64:83:33:2e:35:56:bb:62:84:58:34:fc:44:99:3c:56: c6:27:82:a8:39:58:70:e2:06:f2:4e:2b:b5:8e:74:cd:80:6a: c8:99:36:b1:da:46:35:53:bf:ce:14:70:98:9c:e0:df:b6:55: 96:20:5b:1b:d2:6e:bb:c1:3b:0c:7b:75:6c:d0:67:09:33:2a: e6:4d:61:41:b2:4b:de:56:84:31:c5:6d:16:68:09:46:a7:6b: 48:ac:b8:bb:df:14:12:7e:20:3f:dd:77:50:2d:ce:15:1a:72: e6:40:3f:1d:6c:36:42:74:b2:6c:62:9b:7b:7c:b9:c7:f7:2e: 76:24:eb:f8:a5:46:7c:e7:5c:8b:ae:6e:6e:ff:96:ab:4e:88: 99:df:53:c5:89:b5:e3:53:af:da:79:cb:30:37:9a:a9:7d:96: 50:05:6c:ce:1e:b4:1d:51:e0:a3:f7:e7:d6:65:d4:04:55:b3: e0:7d:30:f4:84:02:70:9e:47:7c:5c:a8:1f:9c:93:8f:73:98: 74:96:e3:85:cc:df:1d:a7:18:30:68:6d:5b:0b:5a:fc:fc:d1: 73:40:6d:68:22:65:89:54:31:b1:30:56:6e:37:66:60:58:f8: 06:15:30:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoODUyMDQ2OTE1MTg1Rjg1NUUwOUVCMzQ0Nzg4MTM5NDMw RTc0MEYwNzAeFw0yNTA2MTUwNjE5NDdaFw0yNTA2MjIwNjE5NDdaMBgxFjAUBgNV BAMTDTY4NGU2NjA0LTFiNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAlue57brBbmOygFxl/YPsBOoEpuSsJ+7vAjT45fEJ3Ze+rkYQJUy7alspQEzC JHXYaeEXVCu2+R/jjoH+R4J3lbPmcOE6nW53zximOt2Psu4MZ/6fIXA78LhjIG8w WvuF+A7iDYPo2xpWwwGIinlEk199sklmar8/x6W6aojajH+HtKuCJpADOFBZZZn6 RiOpm58WHkpp5fZqNwIZm1kgYG/Ywd5Gi5dR6u3PFBq+ilK995a4JAezjaAlhmXm Old7F6ligwbBicUmDgc4GRRCIndiYWHP2mNHzotIHAQxaR2HgwoT4hfaNVymfcHB YetDanIDSQbiOA8DLlUs9omfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV5H3MNAH ELh2V64pb6FsDck7RBEwHwYDVR0jBBgwFoAUhSBGkVGF+FXgnrNEeIE5Qw50Dwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0U2MzVGNzk2Q0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNCR2tWR0YtRlhnbnJORWVJRTVRdzUwRHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0U2MzVGNzk2Q0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZY Z25yTkVlSUU1UXc1MER3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADoj3Qie1jqER6/DUvh45nHX69M3ZIMzLjVWu2KEWDT8RJk8VsYngqg5 WHDiBvJOK7WOdM2AasiZNrHaRjVTv84UcJic4N+2VZYgWxvSbrvBOwx7dWzQZwkz KuZNYUGyS95WhDHFbRZoCUana0isuLvfFBJ+ID/dd1AtzhUacuZAPx1sNkJ0smxi m3t8ucf3LnYk6/ilRnznXIuubm7/lqtOiJnfU8WJteNTr9p5yzA3mql9llAFbM4e tB1R4KP359Zl1ARVs+B9MPSEAnCeR3xcqB+ck49zmHSW44XM3x2nGDBobVsLWvz8 0XNAbWgiZYlUMbEwVm43ZmBY+AYVMII= -----END CERTIFICATE-----Generated at Sun Jun 15 22:07:30 2025 by rpki-client