$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: S2WpZUyAJSIxN8M1rD/r4r0HD1SbskCCBKKl5vVAL88= Subject key identifier: 56:F0:4B:B5:FB:51:46:F3:C9:BF:5F:F1:C3:E9:5B:D5:E9:7F:15:C0 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 02C5 Signing time: Fri 13 Jun 2025 00:56:05 +0000 Manifest this update: Fri 13 Jun 2025 00:56:04 +0000 Manifest next update: Fri 20 Jun 2025 00:56:04 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: Dp7W1hMh+2CLARrPOOCwhx6PidJJa466iVcoBN0/jq4=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: tIjRYvm7kHb3Z/vuy4/Hasw9Jy2neJdJRNnPansBj78=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: llPQK6RAm7smNmRGwi10ZC04JcuM8comzd+cTfPYGBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Jun 13 00:56:04 2025 GMT Not After : Jun 20 00:56:04 2025 GMT Subject: CN=684b7725-c0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:3d:1a:d1:57:75:44:90:9e:54:03:a5:df: 0c:c6:d7:f6:1e:32:a7:fa:a4:37:a4:d2:91:bd:2f: 6e:48:91:d6:0e:b0:55:a4:80:88:e8:7c:f3:86:4a: 6e:24:77:53:67:27:ff:f9:46:2e:95:11:35:a4:23: d2:47:a0:9d:27:f6:4a:00:40:ec:46:40:3f:99:6e: ce:a2:c4:0d:20:57:ce:ee:a1:e3:2e:35:35:11:da: 4d:54:a9:4e:c6:8c:d1:ba:33:ee:ec:1e:37:18:77: 1b:17:40:81:29:f7:e8:ed:d5:34:7c:23:82:42:a9: 3e:7a:ac:d7:40:21:16:68:12:0e:70:c8:30:08:40: 21:7c:35:0c:ee:a1:32:3f:82:79:06:f2:56:8b:e5: e5:b7:51:7f:95:1f:d2:a6:fd:38:5f:ca:fa:9a:73: 52:01:f3:57:26:b0:fd:41:60:2c:57:7e:56:17:74: 90:a4:0b:18:3b:ba:5d:03:3e:c2:25:61:e4:7f:d9: 6d:ae:f0:f0:d8:dc:66:d3:ad:36:8e:10:5a:4c:62: 47:1a:be:a3:52:5e:9a:a1:b1:81:f2:df:02:a7:f9: 3c:9f:cb:14:ca:27:12:6b:6b:92:7f:95:3a:4d:74: c1:cd:c4:76:16:f0:37:8a:bc:59:ab:1e:45:a7:aa: 96:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F0:4B:B5:FB:51:46:F3:C9:BF:5F:F1:C3:E9:5B:D5:E9:7F:15:C0 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:13:4e:70:72:1e:7a:68:70:0b:e7:f9:d0:d0:90:13:76:3b: e9:ed:9c:62:e5:a2:c2:22:4f:2f:12:de:98:0b:62:55:c6:67: c6:f7:2a:9b:9c:87:d0:f4:fb:1c:81:de:0f:ec:11:cc:0a:2c: e0:11:55:56:cb:65:d9:dd:41:e2:71:7e:b8:57:8d:68:5f:2e: ac:9c:db:d4:d8:68:b0:e9:ef:2d:42:5e:97:7b:cb:17:1e:a4: 74:d2:55:14:a3:29:b0:39:5f:8f:4d:f6:3e:40:51:2a:3a:ee: 5a:c5:5d:70:19:30:56:bb:31:22:66:18:3d:e2:87:86:dc:43: 17:97:dc:55:55:5c:00:75:1c:fd:56:a4:14:93:99:2d:84:84: 1d:3e:54:2a:83:e3:e7:ce:6e:1d:20:00:c0:94:df:30:ed:3a: 02:65:d0:cb:7f:e9:34:c9:07:03:34:04:6e:7b:68:8a:ff:29: 77:24:eb:13:7f:5b:36:13:ee:5b:51:6f:31:ea:8d:5e:3e:d4: 74:2d:6e:18:66:c3:4e:8f:ca:9f:bf:7c:ef:c9:ca:51:e6:5a: 65:fd:79:d4:df:58:ba:c6:48:d0:e0:03:f3:94:42:be:33:ec: ef:32:73:74:bf:23:e2:de:23:a9:20:58:a2:59:f6:00:66:86: 4a:d1:0d:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwNjEzMDA1NjA0WhcNMjUwNjIwMDA1NjA0WjAYMRYwFAYD VQQDEw02ODRiNzcyNS1jMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Xc9GtFXdUSQnlQDpd8Mxtf2HjKn+qQ3pNKRvS9uSJHWDrBVpICI6Hzzhkpu JHdTZyf/+UYulRE1pCPSR6CdJ/ZKAEDsRkA/mW7OosQNIFfO7qHjLjU1EdpNVKlO xozRujPu7B43GHcbF0CBKffo7dU0fCOCQqk+eqzXQCEWaBIOcMgwCEAhfDUM7qEy P4J5BvJWi+Xlt1F/lR/Spv04X8r6mnNSAfNXJrD9QWAsV35WF3SQpAsYO7pdAz7C JWHkf9ltrvDw2Nxm0602jhBaTGJHGr6jUl6aobGB8t8Cp/k8n8sUyicSa2uSf5U6 TXTBzcR2FvA3irxZqx5Fp6qWzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbwS7X7 UUbzyb9f8cPpW9XpfxXAMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2E05wch56aHAL5/nQ0JATdjvp7Zxi5aLCIk8vEt6YC2JVxmfG9yqb nIfQ9Pscgd4P7BHMCizgEVVWy2XZ3UHicX64V41oXy6snNvU2Giw6e8tQl6Xe8sX HqR00lUUoymwOV+PTfY+QFEqOu5axV1wGTBWuzEiZhg94oeG3EMXl9xVVVwAdRz9 VqQUk5kthIQdPlQqg+Pnzm4dIADAlN8w7ToCZdDLf+k0yQcDNARue2iK/yl3JOsT f1s2E+5bUW8x6o1ePtR0LW4YZsNOj8qfv3zvycpR5lpl/XnU31i6xkjQ4APzlEK+ M+zvMnN0vyPi3iOpIFiiWfYAZoZK0Q3c -----END CERTIFICATE-----Generated at Sat Jun 14 20:59:04 2025 by rpki-client