$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: sfUO6X3rRdxdUoF3eYWfEX+kOAO1pWvgGfvy1GbM2Zo= Subject key identifier: 24:C7:B3:4A:A0:66:C0:52:FB:85:23:9B:30:D8:7D:51:0B:2D:7D:18 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 01BF Signing time: Sat 23 Aug 2025 03:06:42 +0000 Manifest this update: Sat 23 Aug 2025 03:06:42 +0000 Manifest next update: Sat 30 Aug 2025 03:06:42 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: Td4l5NqdoXRdowC9LnYSOyvg0sg2gwhrhbno6YhonRQ=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Aug 23 03:06:42 2025 GMT Not After : Aug 30 03:06:42 2025 GMT Subject: CN=68a93042-18c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:ed:0d:4d:ed:03:46:59:0e:9d:79:99:d7: 90:c8:a9:29:ae:df:60:73:83:cb:d1:35:86:c7:34: 90:f1:f5:63:f5:47:cb:8b:b2:92:f2:df:26:e8:68: 9f:89:87:8a:d6:0c:e4:79:f7:64:8f:7e:e2:94:ef: 26:36:7e:5a:44:71:0a:fc:eb:72:0f:73:2c:1e:bc: e1:df:f6:25:69:26:ba:02:4c:b3:ba:1e:51:dd:d5: 76:34:0c:d9:2d:01:b6:77:b0:9c:72:8e:86:37:84: dd:c0:a7:16:98:d9:34:98:f9:4b:2e:a0:73:a3:82: 4a:0e:07:16:03:66:57:d2:a7:f8:9d:fb:a6:73:25: 2f:24:2d:65:41:23:46:a4:ff:8f:cd:61:56:2d:7d: 3c:76:ab:78:ce:18:87:fb:0e:44:94:14:52:1b:29: 9c:9f:5e:60:c3:37:de:12:70:59:70:b5:0f:98:4e: 53:05:28:50:45:54:62:df:16:d4:7e:79:37:30:f3: ea:9b:32:23:d6:ff:3a:7f:3b:48:9c:46:c5:ed:1f: 3f:af:87:06:9e:dd:27:87:41:ce:c2:a7:50:ed:54: 2f:11:d4:c8:fc:0d:84:60:ca:a2:c5:ad:5f:eb:06: e9:9e:cf:66:00:d4:5f:a1:ae:f5:7b:fe:e7:aa:3d: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C7:B3:4A:A0:66:C0:52:FB:85:23:9B:30:D8:7D:51:0B:2D:7D:18 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:d4:b9:7c:cd:aa:8c:a7:fd:42:e8:6b:13:e7:12:bc:63:39: e4:79:bf:77:f1:49:1d:1f:6d:2e:81:94:7a:d1:4b:94:f9:12: e2:20:00:da:11:d0:43:35:d1:d9:3b:3e:48:11:73:79:64:df: 57:3f:f1:19:ae:90:29:b9:d4:b8:c7:64:c5:19:1f:0c:87:ef: 66:10:c2:be:92:83:53:5e:ea:cd:7e:af:4a:8d:8d:3b:7f:9d: 02:5f:73:2c:eb:0d:8c:c6:c3:b4:3a:82:68:12:fe:b9:5a:ce: a4:a8:17:ae:1d:ef:d8:b6:53:39:e0:b1:a8:5d:8e:fc:81:cf: f5:04:c6:f1:f3:c7:a1:66:36:48:0d:b5:ef:54:2c:6e:72:d4: 1b:48:4d:16:8e:93:ca:c0:89:5f:2c:ee:ef:1d:68:05:30:fa: db:a4:a7:d3:53:90:a8:92:30:7d:fa:f1:25:11:df:98:46:4f: dc:23:cd:ad:1c:24:7a:48:aa:7b:b2:ae:2a:ae:09:39:4c:c5: 0f:33:11:a9:2b:37:f2:ce:3a:4a:53:52:19:59:34:4e:fd:a2: 71:23:7c:ea:04:2f:89:0e:af:f7:e6:a7:20:41:6e:34:19:8d: 8e:70:3a:9f:02:4c:3f:df:2a:6a:c7:43:34:cb:80:30:25:e7: 11:b0:4e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwODIzMDMwNjQyWhcNMjUwODMwMDMwNjQyWjAYMRYwFAYD VQQDEw02OGE5MzA0Mi0xOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWDtDU3tA0ZZDp15mdeQyKkprt9gc4PL0TWGxzSQ8fVj9UfLi7KS8t8m6Gif iYeK1gzkefdkj37ilO8mNn5aRHEK/OtyD3MsHrzh3/YlaSa6Akyzuh5R3dV2NAzZ LQG2d7Ccco6GN4TdwKcWmNk0mPlLLqBzo4JKDgcWA2ZX0qf4nfumcyUvJC1lQSNG pP+PzWFWLX08dqt4zhiH+w5ElBRSGymcn15gwzfeEnBZcLUPmE5TBShQRVRi3xbU fnk3MPPqmzIj1v86fztInEbF7R8/r4cGnt0nh0HOwqdQ7VQvEdTI/A2EYMqixa1f 6wbpns9mANRfoa71e/7nqj26twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTHs0qg ZsBS+4UjmzDYfVELLX0YMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDh1Ll8zaqMp/1C6GsT5xK8Yznkeb938UkdH20ugZR60UuU+RLiIADa EdBDNdHZOz5IEXN5ZN9XP/EZrpApudS4x2TFGR8Mh+9mEMK+koNTXurNfq9KjY07 f50CX3Ms6w2MxsO0OoJoEv65Ws6kqBeuHe/YtlM54LGoXY78gc/1BMbx88ehZjZI DbXvVCxuctQbSE0WjpPKwIlfLO7vHWgFMPrbpKfTU5CokjB9+vElEd+YRk/cI82t HCR6SKp7sq4qrgk5TMUPMxGpKzfyzjpKU1IZWTRO/aJxI3zqBC+JDq/35qcgQW40 GY2OcDqfAkw/3ypqx0M0y4AwJecRsE5h -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:46 2025 by rpki-client