$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: zGJSrb2ho5rqwpnLTb8ZCymTB9SFDARuIYeF7EkjAlc= Subject key identifier: 22:1A:F4:A9:58:DF:8E:D0:15:1F:F5:9A:A6:26:71:BD:A8:FB:5B:68 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 0767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 075F Signing time: Sat 14 Jun 2025 21:22:43 +0000 Manifest this update: Sat 14 Jun 2025 21:22:42 +0000 Manifest next update: Sat 21 Jun 2025 21:22:42 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: N86sHfa5dj4H/r3wBJjRNNwMkPVHeJJPYhPayuIGeco=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Jun 14 21:22:42 2025 GMT Not After : Jun 21 21:22:42 2025 GMT Subject: CN=684de823-825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e7:49:8d:d7:0f:8f:56:c8:68:91:8b:85:31: 21:4a:c1:ab:f5:45:97:42:3d:b7:b2:6f:23:70:6c: e8:dc:68:80:5e:e2:31:e7:87:7c:cb:32:1f:7f:63: 06:ad:e5:18:28:61:54:6c:0b:30:21:b3:1a:81:71: 85:1b:ad:ce:8a:62:01:3b:28:86:6f:d3:2b:04:d9: 08:88:33:a5:19:f9:9b:0c:e4:48:65:e5:a3:fe:5f: 2c:c2:9b:c0:a5:c8:ae:9f:0f:81:9f:8e:1a:75:8a: 66:26:6a:93:9d:fa:cb:95:79:3e:e4:9d:21:88:62: d6:1a:e0:f6:c8:9f:71:93:03:01:3b:a7:c9:92:d2: 2f:9b:94:99:46:20:1c:02:05:de:60:aa:91:79:fd: 9f:c7:5e:77:cc:e1:a8:6d:4c:5b:1b:fb:66:a1:73: 9a:0d:43:3f:77:77:3d:2a:67:48:1d:f0:4d:86:12: 0a:6b:a9:dc:28:ee:ef:9a:33:c3:9f:19:a4:00:c5: 8d:b9:ea:3a:e2:d5:af:0b:20:c4:c7:67:1a:ff:e4: 3d:5a:34:b3:10:2b:f9:23:57:ee:91:be:94:49:50: cf:19:de:a5:b4:76:3f:02:05:a8:08:a5:fb:dd:c9: f9:94:4b:c4:d5:9c:69:b2:64:30:1c:b1:f1:da:b6: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1A:F4:A9:58:DF:8E:D0:15:1F:F5:9A:A6:26:71:BD:A8:FB:5B:68 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ac:7c:ec:01:a0:be:70:b2:48:f2:96:af:53:87:4d:0e:30: 61:5b:30:ec:a9:7b:8c:6b:bc:5d:34:f4:de:7e:84:22:b2:06: 47:6b:e1:2c:c2:03:28:84:db:19:0c:0c:0a:86:3c:de:ac:af: c6:94:b5:54:cc:70:93:43:6b:be:c5:75:11:83:43:dd:2d:ab: 89:85:53:4e:fc:ef:7a:a2:dd:e3:38:10:5a:31:53:4e:47:48: e9:a1:85:c3:ac:1d:87:ac:7d:77:b0:a8:c9:50:ac:58:d3:5b: 6f:35:51:7e:38:58:5d:ed:32:d7:0b:b1:fe:ec:14:51:72:6e: ec:45:0a:a5:01:13:5b:bf:29:52:9f:1f:48:41:a9:85:f5:0c: 0b:12:7e:54:38:f6:9e:89:dd:a7:9c:41:08:21:bc:94:36:94: 72:cf:85:54:cd:33:06:5c:02:41:14:7f:83:0b:15:6d:71:b9: 07:ab:b0:77:cc:b5:ea:19:7c:87:36:b1:e2:1a:40:73:96:a6: 98:bc:9e:c2:93:f5:87:40:d3:68:de:be:c8:21:15:65:43:15: a4:b1:04:28:b2:75:7f:95:8d:04:28:a6:33:07:97:7e:90:f3: 91:cc:35:cd:88:90:b4:90:d2:57:3e:64:b6:45:f2:7c:dc:9e: 32:8c:0a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwNjE0MjEyMjQyWhcNMjUwNjIxMjEyMjQyWjAYMRYwFAYD VQQDEw02ODRkZTgyMy04MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+dJjdcPj1bIaJGLhTEhSsGr9UWXQj23sm8jcGzo3GiAXuIx54d8yzIff2MG reUYKGFUbAswIbMagXGFG63OimIBOyiGb9MrBNkIiDOlGfmbDORIZeWj/l8swpvA pciunw+Bn44adYpmJmqTnfrLlXk+5J0hiGLWGuD2yJ9xkwMBO6fJktIvm5SZRiAc AgXeYKqRef2fx153zOGobUxbG/tmoXOaDUM/d3c9KmdIHfBNhhIKa6ncKO7vmjPD nxmkAMWNueo64tWvCyDEx2ca/+Q9WjSzECv5I1fukb6USVDPGd6ltHY/AgWoCKX7 3cn5lEvE1ZxpsmQwHLHx2rbfqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIa9KlY 347QFR/1mqYmcb2o+1toMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFrHzsAaC+cLJI8pavU4dNDjBhWzDsqXuMa7xdNPTefoQisgZHa+Es wgMohNsZDAwKhjzerK/GlLVUzHCTQ2u+xXURg0PdLauJhVNO/O96ot3jOBBaMVNO R0jpoYXDrB2HrH13sKjJUKxY01tvNVF+OFhd7TLXC7H+7BRRcm7sRQqlARNbvylS nx9IQamF9QwLEn5UOPaeid2nnEEIIbyUNpRyz4VUzTMGXAJBFH+DCxVtcbkHq7B3 zLXqGXyHNrHiGkBzlqaYvJ7Ck/WHQNNo3r7IIRVlQxWksQQosnV/lY0EKKYzB5d+ kPORzDXNiJC0kNJXPmS2RfJ83J4yjAqy -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:21 2025 by rpki-client