$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json) Hash identifier: 5zO8AkeK6W6ePdl0/JFQdBMcKDdEdhQr7YyS6Xu2vL4= Subject key identifier: 45:A2:AE:21:31:5F:2D:36:31:CE:78:D3:2B:F4:3D:09:2D:B2:63:82 Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Certificate serial: 0488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft Manifest number: 0484 Signing time: Mon 16 Jun 2025 23:39:57 +0000 Manifest this update: Mon 16 Jun 2025 23:39:56 +0000 Manifest next update: Mon 23 Jun 2025 23:39:56 +0000 Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: pUJKGyIFWalP3xFTvcWw6z2Qg1nimZ0BgNJyQ78nAFs=) 2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: Ib+CF/sk+KvnPvMxoim8MHqeWZYKc+NyST1cJiaAhsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Validity Not Before: Jun 16 23:39:56 2025 GMT Not After : Jun 23 23:39:56 2025 GMT Subject: CN=6850ab4c-7c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:29:45:c7:9d:d0:70:11:b8:07:79:33:3e: 26:eb:a7:8b:c7:a2:9e:8d:5f:d4:c6:90:ae:24:ac: 17:cf:0b:de:a0:ca:8a:49:39:b6:b8:eb:e7:84:ad: 21:68:1c:27:63:bb:f4:c2:ac:ef:27:61:ae:20:e2: 46:3e:a8:7e:1f:53:b2:6f:5d:19:18:a6:d9:eb:f3: f8:6b:5c:13:80:4f:9d:7e:ec:dc:db:a9:15:0f:48: 4a:fc:8d:5e:3a:db:b8:f4:5e:7e:d7:2d:34:df:95: 31:19:a0:59:10:46:76:a7:37:9b:cd:36:4d:ed:11: e1:33:55:7a:c7:dc:83:e9:65:df:9c:b5:ce:c1:46: 6f:1a:22:b5:52:f6:98:cf:61:4e:b6:04:63:f0:44: b9:4f:5c:27:d1:36:96:62:68:f8:df:e3:9d:6c:b6: a6:39:3b:73:90:ee:d7:8d:ac:e8:3b:64:72:f9:de: 7c:8a:f2:b8:90:e7:d8:3f:53:40:78:9a:99:00:d3: 54:b9:d2:9d:72:88:fb:9f:04:91:a9:36:ea:93:35: 11:cb:0f:07:71:b9:69:d8:b5:37:17:02:d7:76:ed: cc:e0:32:41:95:a5:25:d7:87:ae:d6:90:2e:2d:73: 45:78:a3:fb:ce:c3:f0:ce:57:8f:b7:66:70:d3:02: d3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:AE:21:31:5F:2D:36:31:CE:78:D3:2B:F4:3D:09:2D:B2:63:82 X509v3 Authority Key Identifier: keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:f0:bc:b4:84:34:86:71:f6:a6:7e:59:ae:67:f3:fc:c0:90: f6:39:21:c0:ec:fa:f9:5e:bd:70:99:38:b1:95:e3:80:ba:a0: ee:7f:5a:5f:11:5f:f8:5a:fb:cc:e1:63:6f:7b:ca:0e:00:35: e4:62:0e:68:d4:8b:2f:01:f6:fb:15:f4:e6:a4:11:8d:31:3f: 36:46:97:47:28:60:86:f2:cc:ea:3f:a7:63:77:1d:9b:41:e2: 23:b2:b1:84:ac:f8:2c:8f:7f:d5:78:6c:59:a0:66:65:9d:9b: a2:0b:e2:f3:00:b4:27:d1:10:dc:1d:02:e4:f0:6f:46:b4:2c: 07:42:00:6e:6d:0f:12:ce:54:9a:57:ee:7b:15:20:7f:68:a0: 4b:7b:ba:b5:a7:87:55:8c:8f:00:07:d5:7e:c5:7b:2d:9a:27: 82:00:b8:42:0d:77:b4:e0:59:ec:33:c3:fb:60:30:68:63:4c: e7:ef:87:fe:a7:5b:73:68:ea:92:38:13:a0:65:8b:6f:8a:9f: 5d:79:c9:48:ee:b2:9b:51:c7:0a:51:f6:89:1d:01:44:8a:a3: a1:0f:af:4a:5f:52:18:5f:8b:43:1c:1f:b7:54:f4:73:69:47: c0:f6:7d:76:9b:f2:fa:5f:02:27:78:ff:9a:cd:19:88:3b:a2: a8:b6:50:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2 MUM0MUQ5OUEwHhcNMjUwNjE2MjMzOTU2WhcNMjUwNjIzMjMzOTU2WjAYMRYwFAYD VQQDEw02ODUwYWI0Yy03YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGgpRced0HARuAd5Mz4m66eLx6KejV/UxpCuJKwXzwveoMqKSTm2uOvnhK0h aBwnY7v0wqzvJ2GuIOJGPqh+H1Oyb10ZGKbZ6/P4a1wTgE+dfuzc26kVD0hK/I1e Otu49F5+1y0035UxGaBZEEZ2pzebzTZN7RHhM1V6x9yD6WXfnLXOwUZvGiK1UvaY z2FOtgRj8ES5T1wn0TaWYmj43+OdbLamOTtzkO7XjazoO2Ry+d58ivK4kOfYP1NA eJqZANNUudKdcoj7nwSRqTbqkzURyw8Hcblp2LU3FwLXdu3M4DJBlaUl14eu1pAu LXNFeKP7zsPwzlePt2Zw0wLTfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWiriEx Xy02Mc540yv0PQktsmOCMB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ M2M5TnpvUW93enRoeEIyWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF8Ly0hDSGcfamflmuZ/P8wJD2OSHA7Pr5Xr1wmTixleOAuqDuf1pf EV/4WvvM4WNve8oOADXkYg5o1IsvAfb7FfTmpBGNMT82RpdHKGCG8szqP6djdx2b QeIjsrGErPgsj3/VeGxZoGZlnZuiC+LzALQn0RDcHQLk8G9GtCwHQgBubQ8SzlSa V+57FSB/aKBLe7q1p4dVjI8AB9V+xXstmieCALhCDXe04FnsM8P7YDBoY0zn74f+ p1tzaOqSOBOgZYtvip9declI7rKbUccKUfaJHQFEiqOhD69KX1IYX4tDHB+3VPRz aUfA9n12m/L6XwIneP+azRmIO6KotlBc -----END CERTIFICATE-----Generated at Tue Jun 17 12:16:29 2025 by rpki-client