$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json) Hash identifier: 9YX/y0lkrMm8ghoF3n0rTCfyCq2ZlD63742M105jA9U= Subject key identifier: A5:67:A7:0C:96:45:A9:46:13:39:AF:BA:7A:0C:07:6B:3D:C5:EB:D4 Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft Manifest number: 4E Signing time: Tue 17 Jun 2025 06:11:37 +0000 Manifest this update: Tue 17 Jun 2025 06:11:36 +0000 Manifest next update: Tue 24 Jun 2025 06:11:36 +0000 Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: F2mIlbEnTw+qU6wDpQOS8UeyR0KKFtPh04PWHWSzQDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Validity Not Before: Jun 17 06:11:36 2025 GMT Not After : Jun 24 06:11:36 2025 GMT Subject: CN=68510719-e662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:88:5e:43:5d:84:db:40:19:cb:07:96:56: 30:af:41:d6:2c:8b:7c:ae:fd:2a:93:cc:3d:42:3c: fc:bf:c2:61:31:1c:c1:d9:51:e1:bf:1f:ce:f3:80: 5b:bd:d0:88:f0:fc:44:c2:b9:2a:0d:c9:6f:16:1b: 36:fc:c3:ac:d2:90:2f:25:fb:71:cc:e7:ce:03:dd: e1:3c:ac:7e:ba:d5:93:24:2f:57:14:69:1f:86:51: 0f:24:2b:5f:9a:f7:ed:a3:fa:23:c7:5e:12:3c:03: 72:9c:fb:9e:71:b9:96:5c:df:a4:ec:74:1b:a4:20: b3:e2:17:41:d0:93:76:2d:30:40:0b:ce:2a:60:22: e6:4a:c4:14:8f:9e:4a:0e:1a:b4:e3:11:f4:28:30: f3:e5:8c:a0:1b:ec:f6:ee:1c:e9:9e:19:ae:6f:82: 71:76:c4:b1:9e:96:a1:ab:14:45:3a:6e:57:2b:a7: e1:0e:89:35:65:11:a1:3d:e1:da:b6:50:a9:e9:e4: d4:49:6c:10:5e:9e:13:08:f0:56:0d:1b:0a:eb:1c: 14:26:a0:89:6a:d7:2f:15:92:82:e7:74:29:4d:2a: 6f:00:a2:07:41:55:38:0c:ed:74:26:f0:ca:6c:73: 44:da:5c:bf:01:9e:ab:03:5d:b8:bf:9e:31:ce:bf: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:67:A7:0C:96:45:A9:46:13:39:AF:BA:7A:0C:07:6B:3D:C5:EB:D4 X509v3 Authority Key Identifier: keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b8:d8:c5:9a:4b:f0:1d:41:df:d1:9d:d2:73:f8:b0:cc:f6: de:e8:f7:3f:d8:d3:dc:d1:53:55:9f:63:1d:49:bb:0f:8f:91: 0a:47:b1:4a:b0:42:a2:4a:83:7f:35:d3:3c:3f:c6:16:ec:5d: 2b:57:a4:a4:65:a7:9a:b4:37:5b:ea:ca:14:16:03:02:4d:4e: cc:41:47:24:a3:37:84:09:e2:8e:5d:86:e7:26:9f:61:de:36: 92:6b:ab:2e:fe:33:f9:ba:c5:b4:84:a9:4b:09:6c:86:e4:9a: 6d:f4:62:5b:35:6a:b6:a1:da:2b:6d:15:ce:75:7d:27:6c:fa: 79:5b:df:dc:d0:1b:31:a6:b4:6d:04:bd:71:1c:6f:43:ff:ac: 7d:9a:e5:b6:5d:35:2b:47:2e:98:ef:52:f0:46:0f:fd:75:71: f1:c8:b2:98:6f:23:12:3f:c5:b5:68:8a:57:3b:f0:07:3b:3c: 67:52:b9:86:bf:c3:d8:cd:5c:15:64:af:5f:b2:b7:ad:4c:fd: be:42:cd:6a:cd:19:8e:61:f5:d4:07:67:a7:da:25:62:34:2f: 89:08:85:e0:08:9d:7e:6e:b4:04:1d:44:a2:08:45:4d:e5:da: 78:d4:ca:6e:a5:29:de:e2:79:63:e9:7c:27:ca:b6:b8:cb:7c: 11:45:b7:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoODU3NzkwNEM0M0MyQTlCRTExOEZEREQ1QkE3QkI4QjYw NDQzODBGRTAeFw0yNTA2MTcwNjExMzZaFw0yNTA2MjQwNjExMzZaMBgxFjAUBgNV BAMTDTY4NTEwNzE5LWU2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjzIheQ12E20AZyweWVjCvQdYsi3yu/SqTzD1CPPy/wmExHMHZUeG/H87zgFu9 0Ijw/ETCuSoNyW8WGzb8w6zSkC8l+3HM584D3eE8rH661ZMkL1cUaR+GUQ8kK1+a 9+2j+iPHXhI8A3Kc+55xuZZc36TsdBukILPiF0HQk3YtMEALzipgIuZKxBSPnkoO GrTjEfQoMPPljKAb7PbuHOmeGa5vgnF2xLGelqGrFEU6blcrp+EOiTVlEaE94dq2 UKnp5NRJbBBenhMI8FYNGwrrHBQmoIlq1y8VkoLndClNKm8AogdBVTgM7XQm8Mps c0TaXL8BnqsDXbi/njHOv6mFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpWenDJZF qUYTOa+6egwHaz3F69QwHwYDVR0jBBgwFoAUhXeQTEPCqb4Rj93Vunu4tgRDgP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0VDQTJDN0Q2RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyL2hYZVFURVBDcWI0Umo5M1Z1bnU0dGdSRGdQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhlUVRFUENxYjRSajkzVnVudTR0Z1JEZ1A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0VDQTJDN0Q2RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyL2hYZVFURVBDcWI0 Umo5M1Z1bnU0dGdSRGdQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACu42MWaS/AdQd/RndJz+LDM9t7o9z/Y09zRU1WfYx1Juw+PkQpHsUqw QqJKg3810zw/xhbsXStXpKRlp5q0N1vqyhQWAwJNTsxBRySjN4QJ4o5dhucmn2He NpJrqy7+M/m6xbSEqUsJbIbkmm30Yls1arah2ittFc51fSds+nlb39zQGzGmtG0E vXEcb0P/rH2a5bZdNStHLpjvUvBGD/11cfHIsphvIxI/xbVoilc78Ac7PGdSuYa/ w9jNXBVkr1+yt61M/b5CzWrNGY5h9dQHZ6faJWI0L4kIheAInX5utAQdRKIIRU3l 2njUym6lKd7ieWPpfCfKtrjLfBFFtwg= -----END CERTIFICATE-----Generated at Wed Jun 18 08:33:00 2025 by rpki-client