$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft File: hf--WNwc9_kcLTgTTiC27wssOl8.mft (raw, json) Hash identifier: Rowxm9h4L3O4xxTZgTE1vZjkffOCG4jJnc5YaDaipc0= Subject key identifier: 59:65:00:F8:B5:39:41:00:2C:F8:48:7C:AE:50:1D:F7:9A:BE:FB:7A Authority key identifier: 85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F Certificate issuer: /CN=A911954F/serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft Manifest number: 022C Signing time: Sat 23 Aug 2025 04:28:48 +0000 Manifest this update: Sat 23 Aug 2025 04:28:47 +0000 Manifest next update: Sat 30 Aug 2025 04:28:47 +0000 Files and hashes: 1: hf--WNwc9_kcLTgTTiC27wssOl8.crl (hash: bRcgakulHUL17E0BzWnIogxTpKkj2wv+9LQZGVrHObk=) 2: 6BCEC330344311EFB7DD0D34C4F9AE02.roa (hash: V5GXfj7MVmj/bsrh8ZK5BOMK+sTslcHA1M5O9HLWM8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=85FFBE58DC1CF7F91C2D38134E20B6EF0B2C3A5F Validity Not Before: Aug 23 04:28:47 2025 GMT Not After : Aug 30 04:28:47 2025 GMT Subject: CN=68a94380-7ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:20:17:f7:3c:b0:d0:de:63:d9:bd:9f:10: f2:1c:d7:1d:d1:aa:4a:04:59:b9:29:6c:8c:6a:6e: f2:d6:59:cd:0d:ce:18:57:9e:40:a0:9c:d3:e0:c4: 08:27:b8:b2:57:69:9e:4f:68:63:9d:10:ec:40:dc: 84:bd:60:7c:ea:d6:c3:b7:b2:25:c5:c9:d9:d0:ef: 3b:8e:2c:49:2d:d9:b9:98:a9:32:f7:58:2a:5b:0b: 35:d1:3e:c0:5a:bb:5b:1e:26:15:5a:3f:f0:85:1f: 5b:70:36:ec:77:17:56:17:e8:18:f8:f0:c8:21:9d: 9d:1a:47:0d:04:8c:63:d1:7d:7b:9b:84:60:47:58: 15:e7:8d:2d:d7:cd:4a:d0:2b:b0:cf:31:de:08:59: 2c:ac:1b:5e:a6:eb:31:de:cf:d4:1a:07:4c:ce:ec: 16:4b:94:e5:d9:60:03:a4:2d:a4:9c:13:f5:95:25: 35:31:75:83:66:58:42:69:a1:93:7c:b6:08:44:c5: b4:b9:20:82:bb:6f:c6:99:2c:e0:d8:38:b7:b9:cd: d1:49:89:2d:1c:28:35:6d:84:f0:38:dc:24:95:7d: f8:8d:fd:df:47:cc:c5:a3:8e:0a:56:3b:4f:f9:93: 1d:34:b3:25:30:94:b5:6e:d5:0f:72:2e:e7:f3:ee: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:00:F8:B5:39:41:00:2C:F8:48:7C:AE:50:1D:F7:9A:BE:FB:7A X509v3 Authority Key Identifier: keyid:85:FF:BE:58:DC:1C:F7:F9:1C:2D:38:13:4E:20:B6:EF:0B:2C:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hf--WNwc9_kcLTgTTiC27wssOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/hf--WNwc9_kcLTgTTiC27wssOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:bc:b8:fd:26:b3:e6:43:05:f0:de:4f:47:2c:20:41:d0: 18:66:ab:ab:94:88:97:e5:8a:bd:7b:6b:76:38:e5:91:c8:39: fc:0c:ac:ee:71:3a:6d:f2:65:0d:aa:13:55:45:f0:85:38:b9: cd:35:af:ab:17:6c:67:d2:9d:54:ea:c9:b0:38:9b:22:5f:ab: 16:56:98:fc:7f:7e:90:56:e4:34:78:c0:6e:fb:b0:1b:5a:31: ed:75:71:71:7b:19:49:d0:49:9a:86:a1:5d:51:98:a1:8d:35: 96:5f:7a:04:1f:fa:41:61:81:7d:c0:7a:84:6a:41:92:0d:e9: 88:e6:a1:50:40:6c:31:6f:cc:b2:2a:e1:62:40:b0:7f:7e:e4: 94:26:b0:c9:b5:28:68:3a:05:92:35:0c:fd:c1:ae:1d:a4:0c: 20:3a:07:64:ae:1c:2e:1b:be:af:25:82:d8:32:2a:33:ac:da: 99:c0:de:78:58:50:1e:52:0e:98:07:cd:d9:ce:c3:36:90:3e: 33:7c:2d:04:67:68:6b:8a:82:31:67:d7:0c:0b:d7:0f:c9:16: 9e:b0:bc:2b:1c:4b:d4:10:8a:c6:94:64:30:fb:93:e4:fc:5d: f5:4c:cd:58:c9:62:42:a9:3a:eb:03:69:00:ae:c4:94:28:de: b1:0e:f0:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKDg1RkZCRTU4REMxQ0Y3RjkxQzJEMzgxMzRFMjBCNkVG MEIyQzNBNUYwHhcNMjUwODIzMDQyODQ3WhcNMjUwODMwMDQyODQ3WjAYMRYwFAYD VQQDEw02OGE5NDM4MC03YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKwgF/c8sNDeY9m9nxDyHNcd0apKBFm5KWyMam7y1lnNDc4YV55AoJzT4MQI J7iyV2meT2hjnRDsQNyEvWB86tbDt7IlxcnZ0O87jixJLdm5mKky91gqWws10T7A WrtbHiYVWj/whR9bcDbsdxdWF+gY+PDIIZ2dGkcNBIxj0X17m4RgR1gV540t181K 0CuwzzHeCFksrBtepusx3s/UGgdMzuwWS5Tl2WADpC2knBP1lSU1MXWDZlhCaaGT fLYIRMW0uSCCu2/GmSzg2Di3uc3RSYktHCg1bYTwONwklX34jf3fR8zFo44KVjtP +ZMdNLMlMJS1btUPci7n8+5t4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFllAPi1 OUEALPhIfK5QHfeavvt6MB8GA1UdIwQYMBaAFIX/vljcHPf5HC04E04gtu8LLDpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlfa2NMVGdUVGlDMjd3c3NP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hmLS1XTndjOV9rY0xUZ1RUaUMyN3dzc09sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi9oZi0tV053Yzlf a2NMVGdUVGlDMjd3c3NPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdwry4/Saz5kMF8N5PRywgQdAYZqurlIiX5Yq9e2t2OOWRyDn8DKzu cTpt8mUNqhNVRfCFOLnNNa+rF2xn0p1U6smwOJsiX6sWVpj8f36QVuQ0eMBu+7Ab WjHtdXFxexlJ0EmahqFdUZihjTWWX3oEH/pBYYF9wHqEakGSDemI5qFQQGwxb8yy KuFiQLB/fuSUJrDJtShoOgWSNQz9wa4dpAwgOgdkrhwuG76vJYLYMiozrNqZwN54 WFAeUg6YB83ZzsM2kD4zfC0EZ2hrioIxZ9cMC9cPyRaesLwrHEvUEIrGlGQw+5Pk /F31TM1YyWJCqTrrA2kArsSUKN6xDvD5 -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:42 2025 by rpki-client