$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: b6GJ7Atg5nutGl6ZqYS5Yvx5RVk/5fN+dS7TqO72K84= Subject key identifier: CC:C0:2B:EA:29:A9:0D:E3:07:72:11:00:7C:39:A3:2A:40:03:74:81 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08AF Signing time: Wed 18 Jun 2025 20:22:30 +0000 Manifest this update: Wed 18 Jun 2025 20:22:29 +0000 Manifest next update: Wed 25 Jun 2025 20:22:29 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: hWkyStQUsyx+tUYAGjBJAPsN78q/FtPEdHenm+crqOA=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jun 18 20:22:29 2025 GMT Not After : Jun 25 20:22:29 2025 GMT Subject: CN=68532006-ba1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:a9:4c:08:87:0c:bc:8b:f9:7b:91:e0:25: 14:d7:99:ad:98:63:4e:58:ab:d2:1c:39:11:d5:6c: 17:aa:e1:11:fe:05:63:90:b0:7e:ac:6b:77:61:96: 45:76:11:03:25:08:1e:3e:23:87:c3:1c:b3:a3:07: c7:97:6a:99:21:38:41:f6:92:d0:2b:17:d7:6b:59: 5f:7b:c8:25:f8:c3:a8:23:03:8f:a5:75:36:8a:03: eb:eb:25:33:4e:5d:71:af:45:48:61:f7:24:b3:71: c4:51:fe:31:f9:ad:8e:a0:34:2a:c7:f3:38:97:a6: 20:33:74:dc:ba:45:ca:c0:c2:e1:80:ab:3b:ed:9a: c6:69:7c:32:44:e9:c8:d3:94:36:db:ee:7b:21:29: d8:91:75:f3:c4:59:af:ae:1c:a1:04:5a:02:b9:81: 78:51:e4:d8:dd:f8:fc:7b:3e:b5:8d:5e:eb:ff:67: 2f:19:fb:db:8b:ca:ff:a3:3b:40:34:58:aa:5e:16: ca:a0:fb:9e:79:d2:6d:b8:bd:af:18:3c:15:22:e6: d7:91:e0:2b:37:af:da:e2:df:b4:94:f6:8c:3e:99: 2a:5c:f3:e0:14:92:c4:8b:4d:50:54:28:27:e0:fa: c8:c6:24:ed:c4:f3:10:ea:04:8c:e7:00:5c:c1:75: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C0:2B:EA:29:A9:0D:E3:07:72:11:00:7C:39:A3:2A:40:03:74:81 X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:fa:4c:f6:1a:46:0a:89:6b:72:e2:31:ea:8d:a8:7c:dc:45: 98:a6:16:ef:0e:23:a1:bc:4b:69:45:b4:48:45:ec:93:99:72: 70:5c:df:47:8a:60:a0:36:5d:e4:89:f6:f4:93:b0:a8:c0:ce: 77:91:15:5c:b1:92:7f:f6:c7:e1:e8:93:c1:ae:c6:19:b7:46: c5:3f:8b:a1:bb:78:93:a5:9a:85:59:02:80:76:9c:80:83:c5: 29:b2:4f:2a:00:f7:7b:97:23:33:f0:1f:37:47:08:c3:45:52: dd:bd:0e:23:c7:16:c7:7b:b3:50:0d:74:2a:ac:70:43:ac:40: ad:62:ef:0a:17:a0:2b:91:41:44:88:0c:65:b1:20:ba:dd:bf: 42:25:9d:7c:6a:1b:e3:8a:d2:ff:94:e8:6a:7d:4d:1c:4b:79: 04:9e:62:ea:7d:33:9d:cf:5a:52:a6:a1:d3:a5:0e:b3:4d:92: cc:e6:2a:a2:41:10:8b:25:0d:ee:3a:50:59:93:4c:c0:ec:14: 14:75:a8:32:55:7e:01:c4:7f:3d:ae:0a:ed:d7:07:ba:fd:99: b4:34:5a:38:07:e5:e8:48:38:5d:6e:4e:46:a6:b5:49:4d:52: 1b:f7:6a:d9:71:2e:d3:6d:3f:93:a4:49:4a:4e:fb:9b:05:ad: be:31:78:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwNjE4MjAyMjI5WhcNMjUwNjI1MjAyMjI5WjAYMRYwFAYD VQQDEw02ODUzMjAwNi1iYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu42pTAiHDLyL+XuR4CUU15mtmGNOWKvSHDkR1WwXquER/gVjkLB+rGt3YZZF dhEDJQgePiOHwxyzowfHl2qZIThB9pLQKxfXa1lfe8gl+MOoIwOPpXU2igPr6yUz Tl1xr0VIYfcks3HEUf4x+a2OoDQqx/M4l6YgM3TcukXKwMLhgKs77ZrGaXwyROnI 05Q22+57ISnYkXXzxFmvrhyhBFoCuYF4UeTY3fj8ez61jV7r/2cvGfvbi8r/oztA NFiqXhbKoPueedJtuL2vGDwVIubXkeArN6/a4t+0lPaMPpkqXPPgFJLEi01QVCgn 4PrIxiTtxPMQ6gSM5wBcwXVSWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzAK+op qQ3jB3IRAHw5oypAA3SBMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs+kz2GkYKiWty4jHqjah83EWYphbvDiOhvEtpRbRIReyTmXJwXN9H imCgNl3kifb0k7CowM53kRVcsZJ/9sfh6JPBrsYZt0bFP4uhu3iTpZqFWQKAdpyA g8Upsk8qAPd7lyMz8B83RwjDRVLdvQ4jxxbHe7NQDXQqrHBDrECtYu8KF6ArkUFE iAxlsSC63b9CJZ18ahvjitL/lOhqfU0cS3kEnmLqfTOdz1pSpqHTpQ6zTZLM5iqi QRCLJQ3uOlBZk0zA7BQUdagyVX4BxH89rgrt1we6/Zm0NFo4B+XoSDhdbk5GprVJ TVIb92rZcS7TbT+TpElKTvubBa2+MXg6 -----END CERTIFICATE-----Generated at Thu Jun 19 00:29:44 2025 by rpki-client