$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: bz25fbu3BluGTWLNOezFqM0Hn4xH2eCoUNhqC7rGrpw= Subject key identifier: 24:8A:45:2A:E7:E0:CA:71:17:6F:46:9F:48:90:5C:2D:D9:40:3C:72 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 1196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1181 Signing time: Sat 14 Jun 2025 17:10:42 +0000 Manifest this update: Sat 14 Jun 2025 17:10:41 +0000 Manifest next update: Sat 21 Jun 2025 17:10:41 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: Rg11GqrxAqDLMa6/uoK4UyUOiIC7yh1xUvI7CVY8Mg8=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4502 (0x1196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Jun 14 17:10:41 2025 GMT Not After : Jun 21 17:10:41 2025 GMT Subject: CN=684dad11-58c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f7:97:e8:f1:89:f9:3a:52:d5:07:38:81:08: 29:53:e1:e3:71:2d:57:c1:cf:0e:1b:a0:00:b8:79: 28:61:c3:ce:6b:67:c6:5f:06:15:34:b3:92:6a:61: e9:e6:d2:ac:52:04:aa:c9:bb:d9:61:61:c9:42:2c: 5b:b5:41:89:0c:a0:f7:17:de:13:7c:d7:3d:9a:c8: 3f:c9:0a:03:39:0f:76:6f:dc:c6:5c:7f:31:61:72: 0e:ff:2a:3a:d9:8d:0f:ae:7f:d0:58:44:e9:86:0a: 5b:e9:71:0f:f6:f2:0e:43:8c:f0:a8:24:d9:94:6b: 26:98:7b:e1:ec:7e:8d:c0:a4:44:81:e1:bb:48:65: 8c:53:8f:f2:35:dd:ea:55:77:10:26:d2:87:df:9c: fb:3a:a2:f0:14:b9:74:91:0c:98:e3:47:1f:e1:01: b3:4f:82:f8:b5:1f:80:b7:f5:e1:40:f9:5a:49:99: 9f:48:1a:33:98:6a:fb:1e:81:17:1a:31:20:ce:3a: 94:56:fd:4c:de:1c:f3:25:22:58:50:b9:8b:63:27: 73:df:af:33:d0:f6:12:6c:24:aa:db:4f:85:9f:4e: 57:3d:7c:2f:5f:1c:ed:cc:76:38:3e:66:77:34:f2: 31:ff:c8:b0:de:1c:b8:2d:9b:df:61:96:65:d5:80: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8A:45:2A:E7:E0:CA:71:17:6F:46:9F:48:90:5C:2D:D9:40:3C:72 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:af:f7:7e:d7:c0:dd:53:1b:ea:19:e7:d3:0c:dd:5a:9a:92: 28:c0:9b:5f:52:e6:f7:5f:80:39:db:05:d4:79:a5:ae:be:a5: 7f:ef:a3:36:1a:15:97:62:c9:e1:72:ec:30:b7:af:76:54:82: 38:c8:26:59:bc:23:9f:ad:b6:24:28:49:cb:89:6a:0a:29:0b: 18:4b:92:fe:f6:91:e7:1c:d4:6c:ca:fe:6d:00:8a:ce:65:1d: 3f:77:f8:b8:16:75:e5:f5:c8:08:45:83:90:bd:67:b4:7c:a7: 08:9f:4f:70:43:46:64:fc:e9:35:2b:64:30:86:70:74:d3:39: 5d:a7:4d:fb:71:3a:3d:bc:a3:35:8a:28:6f:b3:ff:57:c7:fd: 0b:55:f0:29:34:9d:54:87:3f:8f:7e:d2:92:f6:44:f2:9b:90: 75:7c:f7:8e:43:fa:a1:1c:4e:47:2c:74:37:8f:fe:a5:8f:9c: e5:be:61:96:ee:f3:08:1c:b1:73:d8:0d:0b:5f:fd:80:f6:02: 13:dc:9a:b5:1e:af:14:81:9e:f2:86:06:83:9e:e8:c7:06:22: 0a:f4:bf:51:6f:67:d8:2f:ce:e3:41:30:d1:85:70:5a:8e:d7: 8a:8b:03:8d:9c:86:2f:30:96:c8:23:c5:0c:72:ff:4e:d2:b1: e0:ef:50:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwNjE0MTcxMDQxWhcNMjUwNjIxMTcxMDQxWjAYMRYwFAYD VQQDEw02ODRkYWQxMS01OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9feX6PGJ+TpS1Qc4gQgpU+HjcS1Xwc8OG6AAuHkoYcPOa2fGXwYVNLOSamHp 5tKsUgSqybvZYWHJQixbtUGJDKD3F94TfNc9msg/yQoDOQ92b9zGXH8xYXIO/yo6 2Y0Prn/QWETphgpb6XEP9vIOQ4zwqCTZlGsmmHvh7H6NwKREgeG7SGWMU4/yNd3q VXcQJtKH35z7OqLwFLl0kQyY40cf4QGzT4L4tR+At/XhQPlaSZmfSBozmGr7HoEX GjEgzjqUVv1M3hzzJSJYULmLYydz368z0PYSbCSq20+Fn05XPXwvXxztzHY4PmZ3 NPIx/8iw3hy4LZvfYZZl1YA+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSKRSrn 4MpxF29Gn0iQXC3ZQDxyMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQr/d+18DdUxvqGefTDN1ampIowJtfUub3X4A52wXUeaWuvqV/76M2 GhWXYsnhcuwwt692VII4yCZZvCOfrbYkKEnLiWoKKQsYS5L+9pHnHNRsyv5tAIrO ZR0/d/i4FnXl9cgIRYOQvWe0fKcIn09wQ0Zk/Ok1K2QwhnB00zldp037cTo9vKM1 iihvs/9Xx/0LVfApNJ1Uhz+PftKS9kTym5B1fPeOQ/qhHE5HLHQ3j/6lj5zlvmGW 7vMIHLFz2A0LX/2A9gIT3Jq1Hq8UgZ7yhgaDnujHBiIK9L9Rb2fYL87jQTDRhXBa jteKiwONnIYvMJbII8UMcv9O0rHg71BI -----END CERTIFICATE-----Generated at Sun Jun 15 05:54:03 2025 by rpki-client