$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: w6exAobGbWAW+MrwiEQn136L2Do64qzIXQL2JZuHP50= Subject key identifier: 54:10:06:E9:BA:5C:AC:61:00:55:7F:FA:4F:01:BE:CB:B5:3C:3A:E9 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 0667 Signing time: Sat 14 Jun 2025 22:15:27 +0000 Manifest this update: Sat 14 Jun 2025 22:15:26 +0000 Manifest next update: Sat 21 Jun 2025 22:15:26 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: +RxrjRhROOqgh61XL+wsGERtJzF9hd3sXrbtS12OQyA=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (hash: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Jun 14 22:15:26 2025 GMT Not After : Jun 21 22:15:26 2025 GMT Subject: CN=684df47f-22b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:88:43:3d:72:07:e9:b3:bd:a2:10:4a:58: 18:c0:fd:b0:9c:be:47:73:f2:31:87:03:81:a5:1f: e7:05:84:85:3d:13:bc:bd:90:ef:5e:3d:bb:a0:5b: b7:bf:05:db:45:97:b5:73:e0:9c:85:58:ab:b5:2b: 0d:d9:27:33:a9:2e:10:fc:4b:10:c4:a4:b1:77:58: 2b:7d:6e:b2:35:d5:90:76:24:d6:f0:c6:bf:6e:68: 42:31:95:d6:2e:f3:b8:ca:69:61:c9:0a:69:f8:9f: 44:3f:e9:8b:5a:64:9e:ab:b1:7a:63:cc:1a:41:0c: 99:ce:d1:a5:0a:9a:25:04:38:d2:52:d4:76:a7:58: cf:4c:ab:d9:07:77:13:bc:de:80:7c:34:e0:10:2c: df:56:d2:5b:6f:f9:74:9a:6b:de:76:0f:ee:48:b5: 84:2b:de:e8:f6:96:1f:78:26:dc:03:df:05:69:6b: 61:c2:c9:bc:55:5f:80:e7:b9:ae:de:55:cb:e3:2f: 5a:f0:b1:e4:ca:aa:62:9d:b1:59:02:09:cf:dc:3f: d4:bc:af:36:6e:af:23:a7:39:73:c2:85:74:e3:54: b3:e6:84:66:1c:00:a6:d5:7b:4f:41:23:8a:28:9d: 2d:63:45:1a:f8:22:a9:94:b1:8c:0c:f9:f6:a5:57: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:10:06:E9:BA:5C:AC:61:00:55:7F:FA:4F:01:BE:CB:B5:3C:3A:E9 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d6:13:78:69:48:ad:c0:dd:be:ec:7c:e5:6c:0e:a7:42:7d: 89:f1:12:54:6d:44:5f:85:64:0f:b3:bb:46:b5:ae:f4:e7:bf: c1:07:fd:36:1d:f1:5a:23:2e:8e:f7:b6:4c:6a:33:13:13:14: 7b:53:e5:66:1a:90:af:f9:72:2e:6e:d6:a5:ee:60:77:c7:f6: d1:c2:5f:52:71:80:7a:f7:fc:f6:c4:9c:0e:6b:88:83:f0:b4: 67:bf:77:8f:75:c3:04:69:db:77:e1:4e:7e:61:fe:f3:24:e7: fe:34:65:36:97:a1:8f:d5:7d:74:b1:4a:20:52:10:02:d0:29: a3:a3:dc:ff:30:2e:f7:63:87:73:17:c4:29:9f:23:d1:5f:ab: 08:c5:39:ae:a3:26:2c:c8:96:42:44:72:d0:53:39:f2:2e:53: dc:79:a7:35:61:fa:2a:e6:c4:1b:51:5f:36:e2:ab:f1:cd:13: f4:cf:3f:64:95:3a:16:23:3d:c5:64:be:c7:33:f6:c6:db:11: dd:71:30:ff:cd:3d:14:af:21:ae:19:d1:eb:e0:be:b9:91:7b: e3:65:a4:c9:23:d6:b4:20:bf:7f:e5:4d:c3:c6:cf:e1:0f:03: a4:06:25:8c:b6:be:d9:ef:0d:48:e1:ea:f3:ef:cd:b4:ee:25: bb:ff:7d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNjE0MjIxNTI2WhcNMjUwNjIxMjIxNTI2WjAYMRYwFAYD VQQDEw02ODRkZjQ3Zi0yMmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0mIQz1yB+mzvaIQSlgYwP2wnL5Hc/IxhwOBpR/nBYSFPRO8vZDvXj27oFu3 vwXbRZe1c+CchVirtSsN2SczqS4Q/EsQxKSxd1grfW6yNdWQdiTW8Ma/bmhCMZXW LvO4ymlhyQpp+J9EP+mLWmSeq7F6Y8waQQyZztGlCpolBDjSUtR2p1jPTKvZB3cT vN6AfDTgECzfVtJbb/l0mmvedg/uSLWEK97o9pYfeCbcA98FaWthwsm8VV+A57mu 3lXL4y9a8LHkyqpinbFZAgnP3D/UvK82bq8jpzlzwoV041Sz5oRmHACm1XtPQSOK KJ0tY0Ua+CKplLGMDPn2pVfltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQQBum6 XKxhAFV/+k8Bvsu1PDrpMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH1hN4aUitwN2+7HzlbA6nQn2J8RJUbURfhWQPs7tGta7057/BB/02 HfFaIy6O97ZMajMTExR7U+VmGpCv+XIubtal7mB3x/bRwl9ScYB69/z2xJwOa4iD 8LRnv3ePdcMEadt34U5+Yf7zJOf+NGU2l6GP1X10sUogUhAC0Cmjo9z/MC73Y4dz F8QpnyPRX6sIxTmuoyYsyJZCRHLQUznyLlPceac1Yfoq5sQbUV824qvxzRP0zz9k lToWIz3FZL7HM/bG2xHdcTD/zT0UryGuGdHr4L65kXvjZaTJI9a0IL9/5U3Dxs/h DwOkBiWMtr7Z7w1I4erz78207iW7/31x -----END CERTIFICATE-----Generated at Mon Jun 16 10:33:34 2025 by rpki-client