$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: 8VI2oZJ2rUYGlni9ZlI/cQGTH/ZtWxJHMi8M6iGBDQc= Subject key identifier: 21:56:96:6A:C8:2F:8E:29:B4:C6:07:D8:8E:7B:1D:72:4B:8F:0C:B9 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 352A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 34E1 Signing time: Sat 14 Jun 2025 14:38:49 +0000 Manifest this update: Sat 14 Jun 2025 14:38:49 +0000 Manifest next update: Sat 21 Jun 2025 14:38:49 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: rEjpuyvVqvCnOQqrS5EnbnJ93vwbrC25xckqU+3hCkI=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Jun 14 14:38:49 2025 GMT Not After : Jun 21 14:38:49 2025 GMT Subject: CN=684d8979-26c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:4d:8a:d5:64:8b:79:6f:c4:96:d5:ac:20: 15:0c:f6:0f:2f:df:b2:08:54:03:ee:69:fc:03:35: e5:97:c1:07:1b:fa:81:5e:7b:78:a1:1a:55:08:cd: 16:b2:33:82:e8:56:57:c3:eb:b5:a1:e7:f0:56:8a: 06:d1:f7:d2:18:28:b8:45:08:44:26:25:9e:19:f6: 52:6b:08:0d:a0:71:71:3d:91:5d:d4:c1:ba:74:20: aa:59:df:f7:96:b4:39:28:e7:44:cc:ec:4a:87:40: 37:8c:10:78:60:5e:7f:57:49:8a:9c:c6:b5:7c:66: b5:d0:d5:1b:f9:f5:c5:f2:31:94:ad:78:4c:7e:7d: 92:10:9e:95:ba:2c:46:3b:ab:7b:e0:5f:98:9d:67: e9:d3:bc:de:30:5e:75:4a:a7:73:c1:30:6d:15:35: 71:37:ea:54:cb:20:44:95:a3:cd:91:86:40:0c:cd: fb:7e:30:24:fe:ff:e3:c3:e2:36:a7:d5:95:a0:66: 69:23:30:75:6f:83:3b:bb:e2:96:97:07:54:00:36: 21:ec:8b:7b:6d:ef:8e:fa:9a:80:52:55:df:25:4d: 7b:60:90:eb:a3:63:c1:b5:88:77:2a:ab:28:82:8d: db:23:0e:98:b3:f6:04:7f:00:b0:f8:23:0f:20:52: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:96:6A:C8:2F:8E:29:B4:C6:07:D8:8E:7B:1D:72:4B:8F:0C:B9 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:50:e6:68:f4:0e:1f:1c:4e:91:42:4b:e7:ab:be:c9:21:fe: 8c:5d:03:8a:54:8e:ec:e3:10:1d:5b:5b:94:77:5c:95:9b:8b: 2d:6a:c3:5c:be:be:69:e9:74:13:a9:d3:e1:97:8f:2b:99:86: 37:7d:9b:f4:8c:56:18:30:30:b7:20:ba:11:3c:2f:5b:d9:03: da:f1:9d:24:e5:39:74:74:cf:c5:ba:24:05:b2:38:22:0b:f1: 50:53:25:e7:1f:27:1e:ef:45:b8:79:8d:52:eb:41:56:be:4d: ef:d8:68:4c:3e:1b:5e:1a:0e:3d:3f:c2:76:8a:37:5a:a7:2b: 55:00:70:aa:20:46:13:58:3a:3a:27:eb:02:e5:12:3d:46:08: 12:d7:0a:6b:3e:60:5f:b1:08:03:51:88:7a:18:6e:9a:db:b2: ad:2d:1f:1a:3a:35:df:02:98:d4:69:d5:8f:0b:5d:a8:e3:e2: 91:4e:59:3a:b2:09:2e:3d:32:05:ab:93:39:f8:a8:14:41:9a: 2e:86:3e:60:33:23:4c:e9:a7:b2:47:06:ad:04:61:55:87:12: ca:d9:5c:79:0a:65:97:52:60:d7:67:23:29:b4:75:41:34:59: 2c:e7:62:04:2f:37:f0:46:ca:50:f7:be:32:25:ed:54:a9:7d: 11:87:f7:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwNjE0MTQzODQ5WhcNMjUwNjIxMTQzODQ5WjAYMRYwFAYD VQQDEw02ODRkODk3OS0yNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1FNitVki3lvxJbVrCAVDPYPL9+yCFQD7mn8AzXll8EHG/qBXnt4oRpVCM0W sjOC6FZXw+u1oefwVooG0ffSGCi4RQhEJiWeGfZSawgNoHFxPZFd1MG6dCCqWd/3 lrQ5KOdEzOxKh0A3jBB4YF5/V0mKnMa1fGa10NUb+fXF8jGUrXhMfn2SEJ6VuixG O6t74F+YnWfp07zeMF51SqdzwTBtFTVxN+pUyyBElaPNkYZADM37fjAk/v/jw+I2 p9WVoGZpIzB1b4M7u+KWlwdUADYh7It7be+O+pqAUlXfJU17YJDro2PBtYh3Kqso go3bIw6Ys/YEfwCw+CMPIFKJvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFWlmrI L44ptMYH2I57HXJLjwy5MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVUOZo9A4fHE6RQkvnq77JIf6MXQOKVI7s4xAdW1uUd1yVm4stasNc vr5p6XQTqdPhl48rmYY3fZv0jFYYMDC3ILoRPC9b2QPa8Z0k5Tl0dM/FuiQFsjgi C/FQUyXnHyce70W4eY1S60FWvk3v2GhMPhteGg49P8J2ijdapytVAHCqIEYTWDo6 J+sC5RI9RggS1wprPmBfsQgDUYh6GG6a27KtLR8aOjXfApjUadWPC12o4+KRTlk6 sgkuPTIFq5M5+KgUQZouhj5gMyNM6aeyRwatBGFVhxLK2Vx5CmWXUmDXZyMptHVB NFks52IELzfwRspQ974yJe1UqX0Rh/fW -----END CERTIFICATE-----Generated at Sat Jun 14 19:41:55 2025 by rpki-client