$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: 5Alm3a9pDK7xvNmvwvzjHMFvUeXj7+BBw138tnDkb68= Subject key identifier: D6:4D:04:5E:24:F9:0B:C4:BF:A8:06:79:D9:CA:85:70:B3:54:CD:72 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 0431 Signing time: Thu 12 Jun 2025 23:55:15 +0000 Manifest this update: Thu 12 Jun 2025 23:55:14 +0000 Manifest next update: Thu 19 Jun 2025 23:55:14 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: FtLjQwJSHOfFQMD8VWIyg4cqdQA+b+fZ24Fr9E2YVKM=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Jun 12 23:55:14 2025 GMT Not After : Jun 19 23:55:14 2025 GMT Subject: CN=684b68e3-6eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:4b:b7:7e:37:61:f7:cc:10:ee:4c:33:2d: 2d:83:8c:c3:bf:cc:a8:f3:6d:2b:61:77:d6:ae:0c: f0:ac:34:39:22:63:cb:e7:d8:9f:59:2a:e3:0e:71: 00:06:ed:ad:da:c6:1b:8b:62:72:84:9f:db:64:ae: 77:ba:c3:e0:a1:ad:9f:66:b4:95:b6:30:1b:f9:56: ff:24:94:1f:29:a2:5e:79:d4:8e:9c:e4:7b:8c:90: 41:f7:56:58:13:be:2a:6a:09:bd:39:f5:70:7c:be: 4c:b5:4a:5c:c4:f2:17:13:e5:c5:da:6f:5d:aa:4a: 55:a1:19:da:c1:bb:4d:e2:a2:97:41:7b:b1:91:30: 37:04:75:b2:b3:37:eb:a0:ad:6b:a4:14:79:a6:ea: 01:20:38:54:70:6c:12:cf:5b:ae:6b:df:20:1a:fb: ef:1f:22:e3:fb:24:7e:02:08:41:cd:d1:7e:8f:b2: 73:78:64:66:0d:d6:95:e4:24:37:b7:d4:1c:ff:73: 9b:bf:c3:a4:9a:96:ac:f8:b3:5f:bf:c0:6d:1c:09: 4c:82:85:15:c7:43:b6:14:2f:7e:ed:b1:5d:06:8e: 08:f5:f9:2b:fa:79:e5:2b:ad:f1:88:2f:58:2e:b9: 84:44:dd:a1:65:33:50:94:87:37:85:6e:63:00:51: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4D:04:5E:24:F9:0B:C4:BF:A8:06:79:D9:CA:85:70:B3:54:CD:72 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ab:16:8c:26:fd:b3:80:51:6d:f4:89:10:90:38:0b:92:50: 8b:8e:b9:32:be:77:73:b5:96:46:fc:71:dd:cf:f2:13:c5:9f: b7:9c:97:7e:53:0a:3e:03:28:26:bd:11:c2:45:a9:ae:bc:9a: 6f:1f:ae:95:95:2c:18:24:09:d7:2d:36:31:f4:c0:fe:e1:21: 2b:11:cb:c4:02:ec:5c:89:85:0e:79:5f:03:e1:b5:dd:5e:08: 8c:d1:8b:30:e1:e9:65:f5:30:af:62:7a:2a:ac:14:35:f6:aa: 8f:b4:8b:af:8e:d7:cd:13:d8:89:7f:18:86:1e:0f:78:b8:18: 52:0c:67:75:44:d8:86:25:08:60:78:04:2e:ff:da:8c:28:35: e2:21:f8:ad:8b:ab:55:d6:5f:83:88:23:78:25:ab:4a:9a:9d: 5f:85:cb:55:8d:5a:69:6d:00:df:df:d0:b5:3d:a6:d1:90:79: a2:01:e9:3b:6f:84:f6:e2:13:e9:a6:f4:7b:c7:0e:9e:a6:0c: 53:ca:3d:35:d3:b8:b6:28:2c:f2:ef:5e:c6:50:ab:a2:79:aa: cb:91:7a:31:92:4c:c9:1e:e1:ff:d0:f3:ff:80:41:ca:cf:48: 65:08:3d:14:69:7a:dd:a9:33:27:2b:48:4c:48:f8:a2:04:2f: b7:ee:1b:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwNjEyMjM1NTE0WhcNMjUwNjE5MjM1NTE0WjAYMRYwFAYD VQQDEw02ODRiNjhlMy02ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6pLt343YffMEO5MMy0tg4zDv8yo820rYXfWrgzwrDQ5ImPL59ifWSrjDnEA Bu2t2sYbi2JyhJ/bZK53usPgoa2fZrSVtjAb+Vb/JJQfKaJeedSOnOR7jJBB91ZY E74qagm9OfVwfL5MtUpcxPIXE+XF2m9dqkpVoRnawbtN4qKXQXuxkTA3BHWyszfr oK1rpBR5puoBIDhUcGwSz1uua98gGvvvHyLj+yR+AghBzdF+j7JzeGRmDdaV5CQ3 t9Qc/3Obv8Okmpas+LNfv8BtHAlMgoUVx0O2FC9+7bFdBo4I9fkr+nnlK63xiC9Y LrmERN2hZTNQlIc3hW5jAFGK6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZNBF4k +QvEv6gGednKhXCzVM1yMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANqxaMJv2zgFFt9IkQkDgLklCLjrkyvndztZZG/HHdz/ITxZ+3nJd+ Uwo+AygmvRHCRamuvJpvH66VlSwYJAnXLTYx9MD+4SErEcvEAuxciYUOeV8D4bXd XgiM0Ysw4ell9TCvYnoqrBQ19qqPtIuvjtfNE9iJfxiGHg94uBhSDGd1RNiGJQhg eAQu/9qMKDXiIfiti6tV1l+DiCN4JatKmp1fhctVjVppbQDf39C1PabRkHmiAek7 b4T24hPppvR7xw6epgxTyj0107i2KCzy717GUKuiearLkXoxkkzJHuH/0PP/gEHK z0hlCD0UaXrdqTMnK0hMSPiiBC+37hvA -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:23 2025 by rpki-client