$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: X5ONbeOG3ALzhslkXS/r4fwCxNy5J1nzt2dyrj5pQZQ= Subject key identifier: 57:16:F9:C5:FA:0C:BA:F2:50:0B:E3:9D:D2:4C:98:B4:61:F0:C0:B4 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01FB Signing time: Sat 23 Aug 2025 02:32:37 +0000 Manifest this update: Sat 23 Aug 2025 02:32:36 +0000 Manifest next update: Sat 30 Aug 2025 02:32:36 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: HMplvRxL2hmay6njUr/0Ubz9xpgF0Vu9wZwJP7TPCOo=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Aug 23 02:32:36 2025 GMT Not After : Aug 30 02:32:36 2025 GMT Subject: CN=68a92844-7b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:98:e9:4a:37:e0:10:0b:78:9a:b6:31:50:c6: c8:0b:e4:b8:6f:af:9e:24:2d:15:9b:25:11:70:11: 51:0e:9f:30:b9:be:00:65:f7:d4:d0:c8:fc:c9:0d: cc:ed:a3:60:8b:49:19:29:b1:15:9e:d6:e0:8a:fd: b5:1c:21:8b:80:65:43:a2:01:3f:9c:fa:b7:92:3b: 09:1b:84:85:88:56:e4:d2:ce:35:6a:2a:46:98:77: 37:2d:ae:e8:a2:a0:e4:b9:e5:ef:20:5c:e5:59:d3: 29:ae:3e:fb:b1:e5:30:7c:ce:ce:53:04:3c:36:84: 12:ca:e4:4c:43:4c:fa:4c:52:1a:85:e4:6a:bd:ce: 20:63:f2:52:49:6f:f7:37:84:46:87:3a:b2:a4:a7: b3:fd:03:0c:2e:e0:e0:5a:0f:77:ac:e9:92:58:fe: 6c:36:93:9e:69:11:9b:e2:db:6e:3d:68:5c:22:f6: b4:f3:47:ec:69:99:b8:6c:83:da:2c:c0:4a:c8:5d: a6:d5:00:87:b5:51:0f:94:65:76:28:91:96:5f:70: 43:67:57:ea:77:bf:07:6d:2a:79:6d:ad:8c:68:0f: 2d:46:cf:25:5d:27:54:66:92:cc:dd:2f:13:d2:5d: 9f:79:d4:7f:22:1c:29:db:11:3a:c5:ec:aa:8d:73: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:16:F9:C5:FA:0C:BA:F2:50:0B:E3:9D:D2:4C:98:B4:61:F0:C0:B4 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:25:87:7d:94:3f:de:36:20:c9:ef:73:82:b9:04:aa:ad:3b: 2b:bb:24:65:74:f4:5e:ee:95:4b:aa:eb:d9:e8:05:fc:ef:33: f5:99:73:ce:3e:d9:33:6c:26:b6:b8:67:34:02:c7:4e:64:13: 1a:39:05:26:6b:aa:7e:da:be:7b:a9:14:01:66:f4:a1:86:c3: f5:fe:93:47:e2:05:0d:ba:81:e8:e0:82:89:f7:1e:6e:e9:0a: 30:a5:9d:e8:97:77:b3:87:7a:45:b8:f4:e2:52:dd:ef:eb:f2: 8b:34:dd:8a:6e:2f:73:6f:d1:b5:18:ba:01:6a:ba:95:d3:83: 6a:1d:83:51:c6:0e:eb:0a:4a:4b:9d:86:6d:40:04:c4:0f:26: 9d:d6:cc:2d:ea:80:c0:3d:a9:22:f7:1b:42:95:21:ae:98:e6: 8f:c1:5f:a0:23:28:04:ec:05:b6:69:9e:14:fe:e2:c8:9c:03: a3:d6:2b:62:3f:29:00:32:49:f6:ea:66:d0:36:ea:a7:52:8a: 1a:e3:bc:33:42:6a:e5:75:1f:15:7a:88:9c:64:1d:b3:09:6c: 4a:ac:5a:58:c2:a8:0f:39:87:d2:dd:ac:5d:53:3c:e7:96:4a: 6f:35:a7:f6:94:4a:6c:78:eb:3d:10:6a:07:77:c6:e2:02:e3: 2a:96:c1:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwODIzMDIzMjM2WhcNMjUwODMwMDIzMjM2WjAYMRYwFAYD VQQDEw02OGE5Mjg0NC03YjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JjpSjfgEAt4mrYxUMbIC+S4b6+eJC0VmyURcBFRDp8wub4AZffU0Mj8yQ3M 7aNgi0kZKbEVntbgiv21HCGLgGVDogE/nPq3kjsJG4SFiFbk0s41aipGmHc3La7o oqDkueXvIFzlWdMprj77seUwfM7OUwQ8NoQSyuRMQ0z6TFIaheRqvc4gY/JSSW/3 N4RGhzqypKez/QMMLuDgWg93rOmSWP5sNpOeaRGb4ttuPWhcIva080fsaZm4bIPa LMBKyF2m1QCHtVEPlGV2KJGWX3BDZ1fqd78HbSp5ba2MaA8tRs8lXSdUZpLM3S8T 0l2fedR/Ihwp2xE6xeyqjXOXwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcW+cX6 DLryUAvjndJMmLRh8MC0MB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACJYd9lD/eNiDJ73OCuQSqrTsruyRldPRe7pVLquvZ6AX87zP1mXPO PtkzbCa2uGc0AsdOZBMaOQUma6p+2r57qRQBZvShhsP1/pNH4gUNuoHo4IKJ9x5u 6QowpZ3ol3ezh3pFuPTiUt3v6/KLNN2Kbi9zb9G1GLoBarqV04NqHYNRxg7rCkpL nYZtQATEDyad1swt6oDAPaki9xtClSGumOaPwV+gIygE7AW2aZ4U/uLInAOj1iti PykAMkn26mbQNuqnUooa47wzQmrldR8VeoicZB2zCWxKrFpYwqgPOYfS3axdUzzn lkpvNaf2lEpseOs9EGoHd8biAuMqlsH1 -----END CERTIFICATE-----Generated at Sun Aug 24 06:36:50 2025 by rpki-client