$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: sTLDVSYUtsz5Y2s8ue/Y7HtzvuU0od4wYW7wBrbsmEo= Subject key identifier: 12:09:5A:FC:92:FE:49:A6:07:E9:F7:57:C7:76:72:55:9F:F3:DF:96 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 07A6 Signing time: Thu 12 Jun 2025 20:57:50 +0000 Manifest this update: Thu 12 Jun 2025 20:57:49 +0000 Manifest next update: Thu 19 Jun 2025 20:57:49 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: X03hbNG1ge/rlUXDbQPTNM1T6WXdtSDgGuWuvitr1iA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Jun 12 20:57:49 2025 GMT Not After : Jun 19 20:57:49 2025 GMT Subject: CN=684b3f4d-98ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:19:ba:e3:27:5c:ab:90:8e:46:59:5b:f4: 18:33:cc:bf:11:85:bd:05:df:1c:b5:b7:2c:c1:41: 17:86:6a:4e:8e:ca:68:ff:c9:51:32:ce:31:3f:aa: 6c:d6:6d:18:19:7b:c8:8f:ef:5e:fe:6d:7b:e5:a0: 09:89:f2:89:8f:90:1c:d2:09:7e:44:14:a6:49:d4: f3:cd:06:21:3a:3d:6a:6d:91:e4:fc:67:10:60:a9: eb:23:a5:05:ec:15:ef:c7:94:b0:47:cb:2c:f2:37: 86:44:86:6c:14:c2:48:26:01:6a:c2:6f:0e:9d:7c: 25:7f:f5:6b:03:9a:9c:da:a6:22:ab:b9:71:05:a5: 56:b1:3a:39:c1:3d:7c:ca:88:0a:8d:f9:b4:3f:2a: 1f:26:ad:57:a1:96:9e:82:6a:a0:af:8b:87:c3:71: d8:10:e5:e2:ab:f5:5c:f8:66:a3:a7:20:b5:e4:2c: c5:32:55:2f:6f:8b:cd:2a:7d:de:ed:f0:e0:57:0b: 6c:16:86:26:93:e7:da:2d:06:a9:c4:81:2c:51:59: b7:1a:7b:68:95:0d:91:7e:a5:9a:71:4b:9c:f9:02: 69:54:5b:89:df:cf:1e:7f:49:37:d6:02:9a:d8:ef: 4b:b2:c5:7e:b8:10:8e:27:9d:07:dd:e9:e3:a3:c8: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:5A:FC:92:FE:49:A6:07:E9:F7:57:C7:76:72:55:9F:F3:DF:96 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:20:79:d3:4d:4a:9c:d4:34:e2:9a:64:7d:71:68:49:62:05: 11:4f:e9:c5:83:05:ff:e5:bc:3a:ee:b4:c0:63:23:89:1b:67: cb:ca:56:5e:28:fb:45:67:ab:d1:53:b0:ef:a0:08:8a:6e:57: 22:08:68:29:57:77:0b:cf:00:99:e7:4c:25:6e:52:5c:c8:19: da:1b:00:9e:19:da:d3:13:e0:57:a9:ab:18:b3:09:78:c6:86: a9:00:53:c1:6f:75:79:f6:38:4f:1e:b7:a5:77:c6:66:81:8d: 22:2b:bd:ce:27:2e:f7:8b:f5:45:f8:5e:b4:ff:93:39:24:e7: cd:bd:74:04:5a:47:06:b8:21:cc:76:80:f0:ad:5e:b4:a8:f1: fb:ba:09:d6:60:d9:97:bb:e4:12:9e:e8:b4:e9:d7:75:84:03: 36:c0:f3:03:2f:97:d2:ab:1a:57:70:79:8e:91:72:06:ea:c1: 5f:a5:86:2b:f0:c7:be:35:0f:57:04:27:74:31:4d:3c:96:f7: 17:b4:b7:89:94:c5:77:66:0a:da:6d:4e:cf:25:bc:61:73:a8: 16:a4:a7:5e:c8:1d:91:28:0a:70:95:83:e0:46:38:ee:d3:48: 0a:7a:21:c9:99:5d:b5:40:25:f1:d1:8f:7e:b2:9d:df:9f:5e: 05:e0:d5:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjUwNjEyMjA1NzQ5WhcNMjUwNjE5MjA1NzQ5WjAYMRYwFAYD VQQDEw02ODRiM2Y0ZC05OGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe0ZuuMnXKuQjkZZW/QYM8y/EYW9Bd8ctbcswUEXhmpOjspo/8lRMs4xP6ps 1m0YGXvIj+9e/m175aAJifKJj5Ac0gl+RBSmSdTzzQYhOj1qbZHk/GcQYKnrI6UF 7BXvx5SwR8ss8jeGRIZsFMJIJgFqwm8OnXwlf/VrA5qc2qYiq7lxBaVWsTo5wT18 yogKjfm0PyofJq1XoZaegmqgr4uHw3HYEOXiq/Vc+GajpyC15CzFMlUvb4vNKn3e 7fDgVwtsFoYmk+faLQapxIEsUVm3GntolQ2RfqWacUuc+QJpVFuJ388ef0k31gKa 2O9LssV+uBCOJ50H3enjo8i4/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIJWvyS /kmmB+n3V8d2clWf89+WMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAIHnTTUqc1DTimmR9cWhJYgURT+nFgwX/5bw67rTAYyOJG2fLylZe KPtFZ6vRU7DvoAiKblciCGgpV3cLzwCZ50wlblJcyBnaGwCeGdrTE+BXqasYswl4 xoapAFPBb3V59jhPHreld8ZmgY0iK73OJy73i/VF+F60/5M5JOfNvXQEWkcGuCHM doDwrV60qPH7ugnWYNmXu+QSnui06dd1hAM2wPMDL5fSqxpXcHmOkXIG6sFfpYYr 8Me+NQ9XBCd0MU08lvcXtLeJlMV3ZgrabU7PJbxhc6gWpKdeyB2RKApwlYPgRjju 00gKeiHJmV21QCXx0Y9+sp3fn14F4NUR -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:40 2025 by rpki-client