$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: l7tk0C+fYyw0UZv+FH5Z+jv8CxukUop4xSj2Uk6QGBo= Subject key identifier: 9C:D2:C8:E2:89:A9:87:C8:8F:78:8C:23:D9:2F:AE:7A:5F:F7:57:35 Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 08F3 Signing time: Thu 12 Jun 2025 20:08:40 +0000 Manifest this update: Thu 12 Jun 2025 20:08:39 +0000 Manifest next update: Thu 19 Jun 2025 20:08:39 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: 1UENkPQCZ9kEbcV3l94nN3m7OMQnmNYTzz6VtZI+SIE=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: WsyWU+GSKy4FFCUwRFHUtgnAnZ3p6nz3YhQIgRrWUrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Jun 12 20:08:39 2025 GMT Not After : Jun 19 20:08:39 2025 GMT Subject: CN=684b33c8-77fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:78:94:77:7d:4f:d1:1b:39:6b:ba:7d:9f: 33:c3:0a:5b:11:06:ed:4d:1c:28:de:27:74:4d:b1: cb:a7:17:0c:e7:5c:f4:50:31:43:45:73:04:8a:d9: 83:06:51:bd:b9:a0:2c:b9:9e:6c:52:52:38:57:72: 21:1a:7d:46:14:61:43:07:c8:c0:d9:ee:af:fc:66: d5:b7:93:46:cc:e4:32:02:7a:49:b1:14:11:30:ab: 6e:fc:58:a0:3d:78:8e:63:c8:fe:2e:88:cf:9e:61: 1d:0b:36:39:30:69:54:60:df:ce:37:15:20:59:b7: 5f:c4:c2:cc:71:b2:25:18:0d:ae:0e:6e:81:45:11: a7:34:8a:6e:3b:ad:20:8e:76:3d:b5:c5:c9:89:93: eb:b9:2f:75:2e:09:1a:d6:58:2d:0e:af:41:2c:f0: 93:98:ca:4b:be:ef:36:18:cb:b9:f8:34:b9:e6:28: 9f:4a:c6:28:d9:9b:8d:01:2b:0b:51:be:cf:b7:69: fa:36:99:a9:32:34:0e:7d:11:6e:ea:62:dd:08:e8: d5:29:e3:a5:f0:89:8b:2d:79:b9:cd:fd:7c:ea:3f: 25:8f:0e:14:6a:ea:c9:54:fa:71:54:95:f3:a6:c4: ae:ab:e1:a0:ce:29:f0:fc:70:3e:f0:a2:9e:a2:9e: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D2:C8:E2:89:A9:87:C8:8F:78:8C:23:D9:2F:AE:7A:5F:F7:57:35 X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a8:c2:ad:cc:38:a1:ba:f5:d4:d3:74:50:ee:16:90:86:94: 51:cd:24:1e:81:2a:de:1b:92:7c:ae:75:4c:b0:ae:86:d3:24: 63:48:21:db:2e:25:5e:95:b9:a9:d7:2d:8d:ea:19:a6:ba:f9: 04:97:8d:f9:50:cc:c3:4e:1e:5c:49:5d:12:83:db:e9:13:04: 8a:31:d6:f4:54:05:38:67:59:3d:ff:d2:68:b9:21:14:88:87: 5c:da:6d:b3:04:25:c6:94:da:d6:06:ee:f1:03:92:14:7b:31: 54:7c:34:b7:05:4a:ba:73:2d:df:3f:0a:d7:57:21:e1:c5:a1: 04:81:29:7e:45:ef:9b:7f:e5:02:43:30:7e:65:91:38:9c:73: d2:1c:eb:1b:c2:b5:9d:62:03:83:5d:c4:8a:0d:da:05:45:c7: 72:34:c5:a3:be:67:35:cb:8b:77:2c:62:f3:c8:7d:81:a1:5d: f2:f4:1b:49:91:d7:12:13:bb:ef:4e:29:30:40:7b:3c:c2:ff: e9:49:99:a5:d9:fb:08:28:fe:a1:20:39:46:ca:19:64:e4:c4: 89:50:12:eb:58:ed:73:07:69:e6:30:4c:97:94:8d:76:11:f9: 3c:0c:b9:50:d2:26:0b:0e:9e:ab:c8:b0:01:68:b1:46:29:f6: f7:10:a5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjUwNjEyMjAwODM5WhcNMjUwNjE5MjAwODM5WjAYMRYwFAYD VQQDEw02ODRiMzNjOC03N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Yp4lHd9T9EbOWu6fZ8zwwpbEQbtTRwo3id0TbHLpxcM51z0UDFDRXMEitmD BlG9uaAsuZ5sUlI4V3IhGn1GFGFDB8jA2e6v/GbVt5NGzOQyAnpJsRQRMKtu/Fig PXiOY8j+LojPnmEdCzY5MGlUYN/ONxUgWbdfxMLMcbIlGA2uDm6BRRGnNIpuO60g jnY9tcXJiZPruS91Lgka1lgtDq9BLPCTmMpLvu82GMu5+DS55iifSsYo2ZuNASsL Ub7Pt2n6NpmpMjQOfRFu6mLdCOjVKeOl8ImLLXm5zf186j8ljw4UaurJVPpxVJXz psSuq+Ggzinw/HA+8KKeop7XYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzSyOKJ qYfIj3iMI9kvrnpf91c1MB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqMKtzDihuvXU03RQ7haQhpRRzSQegSreG5J8rnVMsK6G0yRjSCHb LiVelbmp1y2N6hmmuvkEl435UMzDTh5cSV0Sg9vpEwSKMdb0VAU4Z1k9/9JouSEU iIdc2m2zBCXGlNrWBu7xA5IUezFUfDS3BUq6cy3fPwrXVyHhxaEEgSl+Re+bf+UC QzB+ZZE4nHPSHOsbwrWdYgODXcSKDdoFRcdyNMWjvmc1y4t3LGLzyH2BoV3y9BtJ kdcSE7vvTikwQHs8wv/pSZml2fsIKP6hIDlGyhlk5MSJUBLrWO1zB2nmMEyXlI12 Efk8DLlQ0iYLDp6ryLABaLFGKfb3EKUU -----END CERTIFICATE-----Generated at Sat Jun 14 17:51:05 2025 by rpki-client