$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft File: h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json) Hash identifier: wDkNIkQQmmG/GH8qZoMpBkq3maGv3NQanfnoLAYoYxI= Subject key identifier: 41:40:9C:07:34:1B:24:A4:68:0F:0A:06:1F:7B:E4:DB:FC:8F:03:A0 Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA Certificate issuer: /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Certificate serial: 180C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft Manifest number: 17F4 Signing time: Fri 22 Aug 2025 16:39:51 +0000 Manifest this update: Fri 22 Aug 2025 16:39:51 +0000 Manifest next update: Fri 29 Aug 2025 16:39:51 +0000 Files and hashes: 1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: 3jQ6eKMji4T2pG/5T0mPHLTTLNWlgvec/RGJBaY9qcE=) 2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: EjdNTbAyftBJxtIBKhAk8tku0Xw6VBdJSMgPHoN2SG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6156 (0x180c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA Validity Not Before: Aug 22 16:39:51 2025 GMT Not After : Aug 29 16:39:51 2025 GMT Subject: CN=68a89d57-97da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:65:75:1a:5c:03:7d:e9:11:bf:f4:35:5e: fa:48:1e:9d:f6:a0:e7:8f:d2:7e:b0:2c:3c:7f:fa: 2d:3b:05:24:6e:98:54:9f:f2:0a:d4:2c:b5:ce:b4: 4d:c3:46:7b:43:79:49:49:dd:f4:87:39:94:51:42: fa:a1:99:f2:b7:03:58:dd:dd:30:dd:54:2f:b2:e9: 05:4c:be:4a:c7:9c:90:39:f4:34:a7:19:28:14:ff: f8:42:89:e1:32:b7:c6:7a:a0:9d:db:30:ab:5b:23: 60:99:91:15:0a:e5:7a:00:69:6a:70:4b:d7:59:3c: 98:0e:f6:dc:4d:81:78:36:79:3a:35:75:a9:7e:63: e6:d1:16:16:05:e1:c0:ee:e2:a5:00:e4:9b:ec:66: c2:d9:d1:49:98:36:89:25:d8:d9:f5:eb:b8:ba:89: 67:54:03:5e:62:19:c2:6d:d9:7d:81:39:e9:64:dd: 4a:e5:7f:f0:4c:79:a0:5c:67:36:c4:7f:9c:c3:39: 55:59:fd:0d:46:b6:e3:d1:14:84:be:3b:30:02:a0: ed:59:52:3c:c8:ff:c7:8a:cb:d6:ed:b6:cc:65:26: 55:42:85:86:1a:80:fe:c2:d3:65:f6:92:f0:2d:1c: d2:04:ed:87:b6:99:8d:aa:1b:c6:a9:c5:df:20:a5: 80:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:9C:07:34:1B:24:A4:68:0F:0A:06:1F:7B:E4:DB:FC:8F:03:A0 X509v3 Authority Key Identifier: keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f5:58:48:d8:5e:7a:63:c6:a7:e3:98:62:a2:49:75:b9:ec: 19:c1:ff:4e:5e:24:fb:df:59:ee:dd:7c:8d:5d:28:29:21:cb: 43:d9:89:e2:74:cc:ff:62:61:ec:75:65:cb:e7:23:2b:38:f6: 8b:65:79:87:3e:46:2d:d4:b8:a1:30:bf:1a:3d:35:0b:45:81: 09:ea:8f:c7:55:3f:9f:2f:22:29:03:dd:5d:5a:3c:f3:6d:b6: ca:bd:eb:b8:ee:3c:ec:7f:bc:11:bd:0d:c2:22:19:8a:46:3d: 8d:d3:b9:50:32:95:e4:5b:5e:29:fb:20:2a:63:52:f3:71:2d: 73:b7:dc:1e:e8:8a:01:ec:2c:ee:d2:cb:ed:3d:a6:69:a0:59: 8d:04:04:dd:60:a2:d7:7f:de:87:f8:e6:bd:6b:2d:e4:dc:6f: aa:5d:55:81:5f:1f:61:43:68:1a:8e:03:56:fc:f5:04:f6:04: 7c:9d:9a:cf:49:48:29:1d:1f:d4:cc:d4:95:cd:71:e4:67:11: 10:c9:f5:9e:ab:81:2c:1d:a4:80:e4:6d:b8:f1:8d:ff:7c:94: 05:47:07:82:34:70:04:5f:e0:f1:ab:c4:4c:b0:0b:04:00:4d: be:a6:8e:dd:d7:9f:33:62:94:83:1f:3a:b1:fd:13:16:0b:16: 68:5b:5f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxQzkxMTAvBgNVBAUTKDg3NUY0MDAyMUM2RDQzQjA0RUZFODk0QTdGQzE1Q0M0 RjZFRDg5QkEwHhcNMjUwODIyMTYzOTUxWhcNMjUwODI5MTYzOTUxWjAYMRYwFAYD VQQDEw02OGE4OWQ1Ny05N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVJldRpcA33pEb/0NV76SB6d9qDnj9J+sCw8f/otOwUkbphUn/IK1Cy1zrRN w0Z7Q3lJSd30hzmUUUL6oZnytwNY3d0w3VQvsukFTL5Kx5yQOfQ0pxkoFP/4Qonh MrfGeqCd2zCrWyNgmZEVCuV6AGlqcEvXWTyYDvbcTYF4Nnk6NXWpfmPm0RYWBeHA 7uKlAOSb7GbC2dFJmDaJJdjZ9eu4uolnVANeYhnCbdl9gTnpZN1K5X/wTHmgXGc2 xH+cwzlVWf0NRrbj0RSEvjswAqDtWVI8yP/HisvW7bbMZSZVQoWGGoD+wtNl9pLw LRzSBO2HtpmNqhvGqcXfIKWAHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFAnAc0 GySkaA8KBh975Nv8jwOgMB8GA1UdIwQYMBaAFIdfQAIcbUOwTv6JSn/BXMT27Ym6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTFDOS9DMzAwQzJDRUM2 RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3Qk9fb2xLZjhGY3hQYnRp Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxOUFBaHh0UTdCT19vbEtmOEZjeFBidGliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTFDOS9DMzAwQzJDRUM2RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3 Qk9fb2xLZjhGY3hQYnRpYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd9VhI2F56Y8an45hiokl1uewZwf9OXiT731nu3XyNXSgpIctD2Yni dMz/YmHsdWXL5yMrOPaLZXmHPkYt1LihML8aPTULRYEJ6o/HVT+fLyIpA91dWjzz bbbKveu47jzsf7wRvQ3CIhmKRj2N07lQMpXkW14p+yAqY1LzcS1zt9we6IoB7Czu 0svtPaZpoFmNBATdYKLXf96H+Oa9ay3k3G+qXVWBXx9hQ2gajgNW/PUE9gR8nZrP SUgpHR/UzNSVzXHkZxEQyfWeq4EsHaSA5G248Y3/fJQFRweCNHAEX+Dxq8RMsAsE AE2+po7d158zYpSDHzqx/RMWCxZoW18K -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:40 2025 by rpki-client