$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft File: hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json) Hash identifier: MjlaN38enw2G98kU5KOr6ls0zME7m+rLxpsKH2yVd50= Subject key identifier: F8:D1:E0:92:35:97:1B:37:9D:F7:53:AC:67:CD:06:80:5A:1A:6C:E5 Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 Certificate issuer: /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft Manifest number: 348B Signing time: Sat 14 Jun 2025 14:55:06 +0000 Manifest this update: Sat 14 Jun 2025 14:55:05 +0000 Manifest next update: Sat 21 Jun 2025 14:55:05 +0000 Files and hashes: 1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: Puw5BuSxFvz1WJoKijg+7sxNlwPnLhxWnRcNg5K7Am0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072 Validity Not Before: Jun 14 14:55:05 2025 GMT Not After : Jun 21 14:55:05 2025 GMT Subject: CN=684d8d4a-6217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:9e:10:03:79:d5:c3:f0:14:84:91:d4:a0: 5a:cd:68:30:3f:09:a5:1f:3c:67:3e:70:ce:60:61: 58:d7:5c:bd:13:3a:d3:ac:d4:4b:aa:bf:a1:34:c4: 9a:d0:01:a3:90:f1:76:13:f5:5d:c5:6b:3b:7b:7d: 7f:57:61:90:a2:78:15:30:df:07:99:81:fc:03:f2: 4c:59:4a:7d:1e:ba:c9:8f:ec:d0:0e:cb:65:73:bb: 75:65:c6:b4:6d:be:83:53:e0:15:df:d2:4d:22:0c: 38:0b:9f:a5:9a:1d:12:2b:47:1b:4d:cb:d3:52:c1: c0:27:49:e7:e6:ee:d4:7a:d7:04:6e:f3:d3:ef:06: 1e:6d:34:ea:e7:da:06:9a:a2:5c:58:7a:63:38:34: c3:94:94:d7:a6:8b:62:89:c1:62:e5:b7:a4:9a:84: 30:59:6e:03:98:f9:f1:25:8b:c7:6d:2d:ba:3d:45: ba:d6:7c:2e:98:e6:69:27:dc:7b:36:b9:97:86:63: 16:71:99:76:65:59:6b:8d:a6:7a:f9:db:d0:84:ae: ee:21:41:69:b2:2a:d6:95:2c:83:71:56:f3:a1:c6: 3e:59:ae:45:10:68:43:5e:8b:41:fe:6f:21:f9:56: e3:e8:84:b9:41:80:da:9f:54:c8:78:ca:0f:a7:69: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:E0:92:35:97:1B:37:9D:F7:53:AC:67:CD:06:80:5A:1A:6C:E5 X509v3 Authority Key Identifier: keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:34:e0:52:8c:14:bf:ec:02:d3:a0:27:72:5a:09:91:22:18: 6c:f0:d5:6f:6a:c7:d0:76:5f:90:5a:b6:5e:2d:c1:91:87:1e: c4:3f:df:de:d0:c9:4e:d6:3a:c5:fb:d9:f7:21:c1:78:f1:5a: 83:cf:92:bb:9f:e6:e0:6b:0c:e7:a8:39:d3:17:1e:13:fb:09: 9f:b5:40:bb:d5:15:9b:65:5e:80:5e:fc:5b:11:14:14:58:c7: c7:af:ca:d4:9d:cf:5b:4d:ce:ff:76:22:4a:76:ed:5b:d1:d4: 46:a9:ec:6b:6a:ea:ad:59:1c:db:0f:69:fc:76:ae:a1:96:b4: bf:03:76:ab:30:42:c8:51:d0:14:4d:4d:2c:91:36:1c:f0:fa: 7b:80:68:34:6c:4d:e5:90:12:ac:7d:9d:41:60:9b:83:ec:5e: 6e:a4:28:0e:08:d1:4c:10:f9:36:c2:67:f7:e0:d2:6b:f9:a1: 6d:dc:7a:67:81:eb:3a:6a:a2:e9:bd:4c:07:91:e5:ae:80:5c: a4:a3:c0:8b:1c:64:38:99:a1:dd:c4:03:b2:34:b0:35:24:bf: a0:9e:57:ed:d3:3e:cc:7a:6d:cc:6b:8b:35:0d:2d:39:39:a6: f3:99:64:43:5d:2a:e9:43:6b:14:fb:62:31:29:d2:c0:29:66: 5a:58:0e:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCMTExMTAvBgNVBAUTKDg2QzhEN0ZCNDIyRTE1MjdBMzk5NDQ4M0QxRjlERUYy QzYwQTMwNzIwHhcNMjUwNjE0MTQ1NTA1WhcNMjUwNjIxMTQ1NTA1WjAYMRYwFAYD VQQDEw02ODRkOGQ0YS02MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y2eEAN51cPwFISR1KBazWgwPwmlHzxnPnDOYGFY11y9EzrTrNRLqr+hNMSa 0AGjkPF2E/VdxWs7e31/V2GQongVMN8HmYH8A/JMWUp9HrrJj+zQDstlc7t1Zca0 bb6DU+AV39JNIgw4C5+lmh0SK0cbTcvTUsHAJ0nn5u7UetcEbvPT7wYebTTq59oG mqJcWHpjODTDlJTXpotiicFi5bekmoQwWW4DmPnxJYvHbS26PUW61nwumOZpJ9x7 NrmXhmMWcZl2ZVlrjaZ6+dvQhK7uIUFpsirWlSyDcVbzocY+Wa5FEGhDXotB/m8h +Vbj6IS5QYDan1TIeMoPp2nQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjR4JI1 lxs3nfdTrGfNBoBaGmzlMB8GA1UdIwQYMBaAFIbI1/tCLhUno5lEg9H53vLGCjBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUIxMS85RjQzNTg3RTFE OUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZTZWptVVNEMGZuZThzWUtN SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzalgtMEl1RlNlam1VU0QwZm5lOHNZS01ISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUIxMS85RjQzNTg3RTFEOUExMUUyOUFGNkZDODcwOEIwMkNEMi9oc2pYLTBJdUZT ZWptVVNEMGZuZThzWUtNSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPNOBSjBS/7ALToCdyWgmRIhhs8NVvasfQdl+QWrZeLcGRhx7EP9/e 0MlO1jrF+9n3IcF48VqDz5K7n+bgawznqDnTFx4T+wmftUC71RWbZV6AXvxbERQU WMfHr8rUnc9bTc7/diJKdu1b0dRGqexrauqtWRzbD2n8dq6hlrS/A3arMELIUdAU TU0skTYc8Pp7gGg0bE3lkBKsfZ1BYJuD7F5upCgOCNFMEPk2wmf34NJr+aFt3Hpn ges6aqLpvUwHkeWugFyko8CLHGQ4maHdxAOyNLA1JL+gnlft0z7Mem3Ma4s1DS05 OabzmWRDXSrpQ2sU+2IxKdLAKWZaWA7K -----END CERTIFICATE-----Generated at Sun Jun 15 05:10:14 2025 by rpki-client