$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: Q0XFVykgGbUBL/ctX0Qgsv21xAEoX8pCwSzv3YmBlqU= Subject key identifier: A8:98:2A:55:AD:49:E3:EC:4A:BB:E2:59:CC:C8:D3:20:D9:34:C0:EC Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 1413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 140A Signing time: Sat 14 Jun 2025 16:52:55 +0000 Manifest this update: Sat 14 Jun 2025 16:52:55 +0000 Manifest next update: Sat 21 Jun 2025 16:52:55 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: UgT40bpgcViAj50PMNl0w+tDjZg+VIGi75qfNejWSac=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5139 (0x1413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Jun 14 16:52:55 2025 GMT Not After : Jun 21 16:52:55 2025 GMT Subject: CN=684da8e7-270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:26:02:c4:b7:46:5d:4d:a5:20:de:98:42: 81:18:22:e8:4f:5b:85:1e:2b:13:d0:b6:48:31:e2: df:5d:b3:71:4d:a9:10:78:c1:8c:d0:b5:03:21:6d: dc:d7:32:50:fe:82:db:79:8f:34:c0:de:f2:8b:47: e2:cf:dd:f4:4f:ab:d6:af:fb:f4:c8:3d:37:e1:0d: 13:51:de:d4:f6:14:43:0d:d6:50:97:02:a1:67:22: 98:e8:37:da:ee:d9:2f:91:8b:18:ba:f7:24:19:c0: 75:f0:22:72:87:e4:a1:69:5d:9c:10:53:81:7f:8f: f9:48:28:3e:d2:1e:a0:ff:0a:24:23:b9:c2:1e:1e: ff:80:1f:94:ee:17:e2:26:db:09:2e:49:33:43:a5: 13:28:22:74:48:57:e1:bc:11:f0:a0:1b:ad:bc:2e: 08:8e:3f:23:3f:66:0d:7b:ea:8c:c2:f8:51:9f:5a: ed:7b:37:16:e7:5d:17:c9:a6:bd:1b:28:09:b2:7a: 8c:c7:8a:22:16:e6:4a:09:e8:fc:4c:f6:34:48:79: 80:c1:80:cc:08:35:6e:26:b4:6e:e3:6e:44:32:56: 90:3c:01:d4:d1:db:ce:e7:7e:17:94:dd:4e:a7:f7: 0a:75:08:cf:7f:43:e5:92:c6:b8:4f:b5:2b:9b:7c: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:2A:55:AD:49:E3:EC:4A:BB:E2:59:CC:C8:D3:20:D9:34:C0:EC X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:52:e0:17:dd:4f:55:32:33:ce:3c:aa:f7:4d:b7:f9:83: fe:94:b1:40:24:23:c5:eb:e6:4e:cb:bd:3b:ca:6f:30:10:58: e4:41:d0:e7:9d:16:ac:2d:28:da:38:70:bc:3d:36:90:57:92: fb:1f:13:88:50:e7:04:6f:0c:5a:85:b7:69:e9:e3:91:d7:bb: 82:99:81:bc:e6:4c:f7:09:f6:4d:cb:8b:f0:2d:e4:36:8e:a0: 81:7a:ba:47:e5:a4:f8:40:f6:85:4e:a1:4e:d5:20:76:ea:f9: 7e:e6:5f:9c:a7:20:5d:bf:13:e3:d2:f2:fb:c3:43:fa:74:f1: 4c:7f:40:0f:f9:1f:5b:74:0e:f9:b8:40:dc:f1:6d:5f:5b:40: 2c:d0:3c:f7:a7:36:29:27:c7:2e:bc:69:06:36:f0:06:24:bc: 00:26:a6:ed:8e:07:3e:7a:0a:ed:e9:a1:92:33:f2:f6:eb:ec: fd:46:3a:44:44:ae:a4:87:4f:3d:09:9c:1c:d6:22:58:b8:de: 1a:8d:27:60:ed:fa:72:dc:b1:76:c4:64:4c:ce:e8:75:63:4c: 04:76:13:fb:fd:6c:36:3e:b2:16:17:33:b7:26:5b:06:2b:a4: 2f:ee:7b:21:b7:c2:fc:40:27:55:87:9d:f2:34:b7:ec:b5:31: 10:22:1a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwNjE0MTY1MjU1WhcNMjUwNjIxMTY1MjU1WjAYMRYwFAYD VQQDEw02ODRkYThlNy0yNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQUmAsS3Rl1NpSDemEKBGCLoT1uFHisT0LZIMeLfXbNxTakQeMGM0LUDIW3c 1zJQ/oLbeY80wN7yi0fiz930T6vWr/v0yD034Q0TUd7U9hRDDdZQlwKhZyKY6Dfa 7tkvkYsYuvckGcB18CJyh+ShaV2cEFOBf4/5SCg+0h6g/wokI7nCHh7/gB+U7hfi JtsJLkkzQ6UTKCJ0SFfhvBHwoButvC4Ijj8jP2YNe+qMwvhRn1rtezcW510Xyaa9 GygJsnqMx4oiFuZKCej8TPY0SHmAwYDMCDVuJrRu425EMlaQPAHU0dvO534XlN1O p/cKdQjPf0Plksa4T7Urm3zNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiYKlWt SePsSrviWczI0yDZNMDsMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATHlLgF91PVTIzzjyq9023+YP+lLFAJCPF6+ZOy707ym8wEFjkQdDn nRasLSjaOHC8PTaQV5L7HxOIUOcEbwxahbdp6eOR17uCmYG85kz3CfZNy4vwLeQ2 jqCBerpH5aT4QPaFTqFO1SB26vl+5l+cpyBdvxPj0vL7w0P6dPFMf0AP+R9bdA75 uEDc8W1fW0As0Dz3pzYpJ8cuvGkGNvAGJLwAJqbtjgc+egrt6aGSM/L26+z9RjpE RK6kh089CZwc1iJYuN4ajSdg7fpy3LF2xGRMzuh1Y0wEdhP7/Ww2PrIWFzO3JlsG K6Qv7nsht8L8QCdVh53yNLfstTEQIhrc -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:29 2025 by rpki-client