$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft File: Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json) Hash identifier: DeIV34omcW3WVxCwlNQLU36EB270JdDw/R7JvK4zqog= Subject key identifier: 6E:0B:AD:45:D4:AA:78:3C:F4:FD:B0:6F:EE:38:62:91:67:D0:48:E8 Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D Certificate issuer: /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Certificate serial: 06DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft Manifest number: 06D9 Signing time: Mon 16 Jun 2025 21:44:21 +0000 Manifest this update: Mon 16 Jun 2025 21:44:21 +0000 Manifest next update: Mon 23 Jun 2025 21:44:21 +0000 Files and hashes: 1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: 75k2F1+aHEo2ANTYJvEf+O0/KeWqx/ZpeAOGprui/3Y=) 2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: fGJYrfdMmxnMU9m3ImkorOWGB4M3nyP+3+G+aL2cIE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1758 (0x6de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D Validity Not Before: Jun 16 21:44:21 2025 GMT Not After : Jun 23 21:44:21 2025 GMT Subject: CN=68509035-5699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:01:77:71:0c:fa:09:2d:ca:9e:5c:92:4d: d6:9a:b6:1f:e4:36:6e:7e:86:a9:03:0c:f2:96:85: 59:53:ab:0d:0f:58:b9:16:1a:e0:d7:6b:fc:b7:bb: 64:4f:f8:2f:cd:23:30:84:c0:d1:3b:b3:2f:79:9f: 55:42:97:f7:82:38:21:9f:07:28:81:40:4c:20:0d: 4f:cd:07:ba:30:5b:75:9f:d2:f8:fb:40:8d:a3:2d: cf:6d:b0:29:05:69:dc:c8:b9:e9:95:4c:38:9a:25: 47:a6:06:22:2b:54:ec:40:b0:70:53:9f:e1:ff:cf: 6e:b1:b5:ea:c8:48:82:22:e7:f1:7c:18:51:ed:0f: 64:ad:5b:63:57:38:fc:44:86:56:79:04:47:67:bf: f4:3f:e8:b6:1d:c4:b3:95:ba:ba:c7:da:29:e3:48: dc:7c:5f:df:3d:04:a6:c5:9c:ca:75:b3:6e:7d:80: 5f:2a:8f:f3:96:4a:c7:d2:c1:ed:54:d9:93:29:a3: 92:58:93:04:92:8e:de:f5:57:65:66:ce:9a:6c:8b: 51:65:5f:2e:7f:60:e3:68:5d:cf:b0:ec:a9:a4:94: d1:f9:92:6a:11:0e:b7:94:b2:cf:3c:33:19:9a:89: c7:8f:5d:4f:9f:80:b6:92:ee:d0:64:fe:c1:74:46: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0B:AD:45:D4:AA:78:3C:F4:FD:B0:6F:EE:38:62:91:67:D0:48:E8 X509v3 Authority Key Identifier: keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b2:0a:41:4e:c2:67:52:35:8a:94:c4:28:f1:ef:5a:76:56: eb:ea:2c:60:6c:b8:02:9a:f3:3e:a9:41:6a:9f:5d:0e:e2:0f: 2e:87:7f:4a:9b:e1:fe:06:b6:56:0c:3c:1b:51:6a:e2:40:76: cf:05:17:48:59:8c:8f:4f:65:fe:5b:93:62:ac:f3:ff:b0:e0: bb:25:bc:ee:95:d2:00:f1:5f:66:f5:b8:f5:ef:7a:e6:07:b6: 2f:4a:92:d1:28:a3:2d:b2:76:25:e6:ab:c6:0a:58:f1:9c:8d: 7b:19:d1:47:a1:52:b3:be:34:27:14:26:46:2d:8a:04:f6:66: 26:47:6c:af:0a:a1:ee:7d:da:d7:5a:52:4f:b5:22:af:c9:77: 60:84:a1:c1:b4:d9:d1:d9:32:65:d2:5a:ef:5a:c4:94:59:5b: 00:a6:d2:77:68:88:11:a2:6b:98:d3:69:a7:13:90:06:40:36: 53:5a:bd:a9:02:a7:f1:e6:54:fe:8a:43:75:0d:78:b4:42:16: 10:05:3f:9f:54:bd:21:84:16:37:5b:1c:31:7b:c7:d2:16:8f: 02:9f:8d:5a:76:74:ac:34:45:6a:ba:28:e1:38:9e:8e:a3:eb: 44:b9:2b:98:b7:23:30:69:34:e9:a4:04:12:70:41:5d:95:59: 4e:c6:c2:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5 Q0YzODhENUQwHhcNMjUwNjE2MjE0NDIxWhcNMjUwNjIzMjE0NDIxWjAYMRYwFAYD VQQDEw02ODUwOTAzNS01Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QoBd3EM+gktyp5ckk3WmrYf5DZufoapAwzyloVZU6sND1i5Fhrg12v8t7tk T/gvzSMwhMDRO7MveZ9VQpf3gjghnwcogUBMIA1PzQe6MFt1n9L4+0CNoy3PbbAp BWncyLnplUw4miVHpgYiK1TsQLBwU5/h/89usbXqyEiCIufxfBhR7Q9krVtjVzj8 RIZWeQRHZ7/0P+i2HcSzlbq6x9op40jcfF/fPQSmxZzKdbNufYBfKo/zlkrH0sHt VNmTKaOSWJMEko7e9VdlZs6abItRZV8uf2DjaF3PsOyppJTR+ZJqEQ63lLLPPDMZ monHj11Pn4C2ku7QZP7BdEYhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4LrUXU qng89P2wb+44YpFn0EjoMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2 NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3 bnpxUWJyQjlXUnljODRqVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/sgpBTsJnUjWKlMQo8e9adlbr6ixgbLgCmvM+qUFqn10O4g8uh39K m+H+BrZWDDwbUWriQHbPBRdIWYyPT2X+W5NirPP/sOC7JbzuldIA8V9m9bj173rm B7YvSpLRKKMtsnYl5qvGCljxnI17GdFHoVKzvjQnFCZGLYoE9mYmR2yvCqHufdrX WlJPtSKvyXdghKHBtNnR2TJl0lrvWsSUWVsAptJ3aIgRomuY02mnE5AGQDZTWr2p Aqfx5lT+ikN1DXi0QhYQBT+fVL0hhBY3Wxwxe8fSFo8Cn41adnSsNEVquijhOJ6O o+tEuSuYtyMwaTTppAQScEFdlVlOxsIS -----END CERTIFICATE-----Generated at Wed Jun 18 02:51:40 2025 by rpki-client