$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: 4gWPgZZpnbli8N9iwqdHUwdV7EBqm5vnVNG1FJa+BQ8= Subject key identifier: 45:F8:85:05:C8:8B:2A:7F:0D:71:18:B1:67:A4:51:28:08:A0:75:D4 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 0F Signing time: Tue 17 Jun 2025 06:56:20 +0000 Manifest this update: Tue 17 Jun 2025 06:56:19 +0000 Manifest next update: Tue 24 Jun 2025 06:56:19 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: 3eKukVPWNCxhpFO7F3dsKJ/kbLFmLCsYMvozzXRLnt4=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Jun 17 06:56:19 2025 GMT Not After : Jun 24 06:56:19 2025 GMT Subject: CN=68511193-d965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:7a:1d:6b:06:cd:16:3c:b9:96:8e:ed:55: fb:eb:18:ae:54:04:7f:56:30:a1:45:62:af:81:20: ef:5d:93:c6:74:d8:d1:9c:51:90:e1:5f:05:2d:f3: 95:a3:17:d6:6e:10:bc:f2:00:72:56:66:12:2b:e3: 41:ac:d4:0d:95:00:87:8c:38:b1:c6:04:58:38:a1: 74:3c:e5:42:67:21:ff:73:3e:9a:9b:eb:99:15:9c: ca:95:60:b1:bc:f5:7e:18:0d:4a:6a:d5:95:66:87: 21:b0:bf:8f:5c:61:e3:76:19:de:4c:d6:7e:0e:06: 63:72:b5:2b:5a:5d:6e:64:a8:2a:31:e4:2b:51:8e: 55:9b:01:76:1b:81:d0:a4:05:68:18:94:30:b7:10: ad:f9:8d:4c:4f:b8:c4:99:30:f3:3a:1f:f7:fd:34: 8f:8b:ec:b3:ef:16:b5:ee:e9:c2:fe:79:59:bd:8f: cc:6d:c5:2d:66:24:8d:dd:fe:89:a4:c7:74:ca:a2: 3e:7b:bc:ea:31:68:88:37:a3:18:1e:cb:56:45:1e: fb:d9:77:0e:36:af:4c:68:23:67:0e:87:4d:97:d2: 1b:7c:de:b6:d9:ea:fa:ce:26:46:0c:2c:1e:db:37: 56:d1:aa:ce:0e:93:fb:31:b0:e9:2e:08:91:6e:2c: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F8:85:05:C8:8B:2A:7F:0D:71:18:B1:67:A4:51:28:08:A0:75:D4 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:25:0e:66:42:8f:d1:de:9b:c3:b8:f2:36:90:1a:bf:8e: be:9c:4f:b1:10:18:67:b5:be:a6:4f:b0:89:31:48:17:3c:5f: 52:f6:42:c3:b6:f2:f0:c3:67:07:3d:bc:3c:16:14:99:05:7f: 8f:b2:9f:dc:4a:65:6d:94:91:a4:21:c2:05:58:4c:19:ff:8f: 06:46:e6:6b:75:7d:b7:21:3d:73:bc:e4:66:36:e3:8f:fe:f4: 2e:01:48:49:e5:13:98:06:74:8e:fa:46:3f:cb:e4:37:3c:a6: ea:e0:62:ea:e7:c8:f1:ca:6b:bd:fc:81:0d:87:3a:30:80:da: 25:e7:bd:16:99:93:7a:50:f7:fb:8d:bf:b4:16:97:75:9f:a2: 53:59:6a:f5:12:e8:7b:cf:97:05:68:4a:ed:52:45:40:d0:de: be:da:6b:ea:94:25:6c:61:81:74:b6:5b:e6:f5:72:03:7b:97: 0b:85:f1:8e:2f:9e:23:80:14:9b:9e:46:8b:21:dc:12:56:ec: c1:2d:fa:e1:3c:21:8e:9b:73:eb:86:6c:e0:33:25:7f:e0:56: ec:5d:97:75:f7:06:c7:91:23:ed:8e:30:65:e6:08:44:50:a1: c2:4d:0c:99:29:70:dc:3d:f8:d6:5e:73:3f:c4:e4:92:60:7e: 5a:f8:f7:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA2MTcwNjU2MTlaFw0yNTA2MjQwNjU2MTlaMBgxFjAUBgNV BAMTDTY4NTExMTkzLWQ5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx3XodawbNFjy5lo7tVfvrGK5UBH9WMKFFYq+BIO9dk8Z02NGcUZDhXwUt85Wj F9ZuELzyAHJWZhIr40Gs1A2VAIeMOLHGBFg4oXQ85UJnIf9zPpqb65kVnMqVYLG8 9X4YDUpq1ZVmhyGwv49cYeN2Gd5M1n4OBmNytStaXW5kqCox5CtRjlWbAXYbgdCk BWgYlDC3EK35jUxPuMSZMPM6H/f9NI+L7LPvFrXu6cL+eVm9j8xtxS1mJI3d/omk x3TKoj57vOoxaIg3oxgey1ZFHvvZdw42r0xoI2cOh02X0ht83rbZ6vrOJkYMLB7b N1bRqs4Ok/sxsOkuCJFuLBCFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURfiFBciL Kn8NcRixZ6RRKAigddQwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQLJQ5mQo/R3pvDuPI2kBq/jr6cT7EQGGe1vqZPsIkxSBc8X1L2QsO2 8vDDZwc9vDwWFJkFf4+yn9xKZW2UkaQhwgVYTBn/jwZG5mt1fbchPXO85GY244/+ 9C4BSEnlE5gGdI76Rj/L5Dc8purgYurnyPHKa738gQ2HOjCA2iXnvRaZk3pQ9/uN v7QWl3WfolNZavUS6HvPlwVoSu1SRUDQ3r7aa+qUJWxhgXS2W+b1cgN7lwuF8Y4v niOAFJueRosh3BJW7MEt+uE8IY6bc+uGbOAzJX/gVuxdl3X3BseRI+2OMGXmCERQ ocJNDJkpcNw9+NZecz/E5JJgflr49wk= -----END CERTIFICATE-----Generated at Tue Jun 17 10:35:42 2025 by rpki-client