$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft File: hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json) Hash identifier: +Nk4vxxSOnXgDiqznnaGFbpRusdCQ6mY1o9zz/prGyo= Subject key identifier: CF:56:8F:A1:B7:C4:CA:39:0F:EA:35:73:98:98:64:E2:4C:C0:40:5B Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft Manifest number: 0218 Signing time: Sun 15 Jun 2025 01:50:09 +0000 Manifest this update: Sun 15 Jun 2025 01:50:08 +0000 Manifest next update: Sun 22 Jun 2025 01:50:08 +0000 Files and hashes: 1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: GqjYx0/+VLdpdxxxO81+uHZ6W1pmUXW56dkWkINWgWM=) 2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: bOpqrbhh4Bh4AWp/OZ52rop88bWyVMsrGceDfsrfghM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D Validity Not Before: Jun 15 01:50:08 2025 GMT Not After : Jun 22 01:50:08 2025 GMT Subject: CN=684e26d1-52f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:f1:56:75:27:dc:17:b3:ae:53:e7:5a:8c: e7:f8:e6:00:4c:af:b8:1e:3f:59:75:cd:c7:35:43: 0f:45:87:f7:48:a4:e6:0e:de:24:17:26:0c:cb:ef: ce:35:48:e5:2f:32:0d:7c:ed:79:93:6b:ae:00:5a: 55:1f:55:e1:24:36:04:38:14:4e:f4:c0:c1:e7:c8: 5b:7f:13:87:ed:54:a5:d2:9b:ec:e5:78:77:24:7c: 48:59:90:fe:a0:dd:6b:e2:41:48:f0:48:e3:0a:c0: 7c:7c:e6:8c:e9:8b:59:a2:7d:35:95:eb:0a:78:e8: 7e:e5:f3:f8:b0:0a:9f:0b:a0:50:8a:ad:40:74:cf: a4:b4:18:94:ff:31:dc:6d:24:fc:e4:bc:26:37:45: 69:cb:61:a7:83:94:ae:62:18:3d:43:ee:08:14:45: bc:a7:38:51:87:57:dc:c7:f7:38:ac:44:95:db:b0: 7b:27:73:b2:0b:f1:a3:60:87:52:f0:62:8e:6d:6f: 8b:10:99:9a:8d:5f:b0:40:ff:58:20:b9:f5:5e:fa: 62:54:35:06:39:b7:b1:eb:08:f2:d7:fd:6f:61:70: 2a:44:40:3d:db:fa:40:76:5a:cb:ed:c7:52:89:72: e6:f0:90:49:ce:28:ca:b1:ea:1f:6f:e8:1f:59:89: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:56:8F:A1:B7:C4:CA:39:0F:EA:35:73:98:98:64:E2:4C:C0:40:5B X509v3 Authority Key Identifier: keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:66:b8:b7:71:c0:45:38:fa:ff:af:31:a5:20:a0:ae:23:c9: fd:9c:17:e7:38:4f:49:63:d1:51:d9:15:c9:ed:15:4e:ac:64: 8d:06:c6:e2:54:3d:99:a6:23:1a:c6:eb:ee:73:b7:46:fe:88: 56:a1:4e:28:c5:3a:a4:c3:08:e4:aa:eb:f9:1d:8e:d2:ee:55: d9:ce:60:cd:b8:76:c2:df:6c:fa:8a:8d:51:a5:f7:7d:1b:8e: 2f:56:a2:55:6c:ac:13:d9:7d:4d:7a:7e:4b:b8:c1:63:4c:74: bc:cf:cb:7b:11:7d:1c:fd:79:fb:5f:02:62:73:8f:ad:c6:ed: 92:d8:5d:32:69:3d:5a:a1:3b:5d:b9:f3:a5:7b:09:f5:09:e0: e4:a1:30:73:1e:7f:a2:af:6a:08:77:a4:ff:e9:77:ef:a3:e9: 1d:46:6c:15:94:ac:d1:66:0b:1e:5a:2c:95:c7:6f:a0:52:3c: 68:b7:7d:06:bd:af:45:5f:cb:d6:95:27:bf:31:f2:2d:d1:ae: 43:1c:09:c6:12:51:77:b3:a9:e8:33:b9:b9:b0:0e:0d:fb:53: 87:86:f6:d7:ee:fb:1e:4e:1d:37:f7:a9:ed:8d:73:0e:e6:de: b6:3d:7c:2e:47:97:3a:4d:83:5d:71:f6:35:91:16:04:b0:39: 24:39:88:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1 QjAwQTkzMUQwHhcNMjUwNjE1MDE1MDA4WhcNMjUwNjIyMDE1MDA4WjAYMRYwFAYD VQQDEw02ODRlMjZkMS01MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6vxVnUn3BezrlPnWozn+OYATK+4Hj9Zdc3HNUMPRYf3SKTmDt4kFyYMy+/O NUjlLzINfO15k2uuAFpVH1XhJDYEOBRO9MDB58hbfxOH7VSl0pvs5Xh3JHxIWZD+ oN1r4kFI8EjjCsB8fOaM6YtZon01lesKeOh+5fP4sAqfC6BQiq1AdM+ktBiU/zHc bST85LwmN0Vpy2Gng5SuYhg9Q+4IFEW8pzhRh1fcx/c4rESV27B7J3OyC/GjYIdS 8GKObW+LEJmajV+wQP9YILn1XvpiVDUGObex6wjy1/1vYXAqREA92/pAdlrL7cdS iXLm8JBJzijKseofb+gfWYkYLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Wj6G3 xMo5D+o1c5iYZOJMwEBbMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1 NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ri83RERDNUEyRTU1NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVh Rzg0dnJGN20zSGhiQUtreDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALZri3ccBFOPr/rzGlIKCuI8n9nBfnOE9JY9FR2RXJ7RVOrGSNBsbi VD2ZpiMaxuvuc7dG/ohWoU4oxTqkwwjkquv5HY7S7lXZzmDNuHbC32z6io1Rpfd9 G44vVqJVbKwT2X1Nen5LuMFjTHS8z8t7EX0c/Xn7XwJic4+txu2S2F0yaT1aoTtd ufOlewn1CeDkoTBzHn+ir2oId6T/6Xfvo+kdRmwVlKzRZgseWiyVx2+gUjxot30G va9FX8vWlSe/MfIt0a5DHAnGElF3s6noM7m5sA4N+1OHhvbX7vseTh0396ntjXMO 5t62PXwuR5c6TYNdcfY1kRYEsDkkOYgj -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:15 2025 by rpki-client