$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft File: hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json) Hash identifier: hR0WmOxGlvaR1xUcT5kxWhIzs+4gpC1+Rs1hYp/QLgI= Subject key identifier: C4:55:B2:26:05:2E:EF:F2:9E:38:BD:42:6A:0F:52:03:4B:8B:05:81 Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft Manifest number: FE Signing time: Sat 23 Aug 2025 05:20:08 +0000 Manifest this update: Sat 23 Aug 2025 05:20:07 +0000 Manifest next update: Sat 30 Aug 2025 05:20:07 +0000 Files and hashes: 1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: 6K7MarzzeC8JKS4Es+WaltykclyebmYAdHHt9QaygpQ=) 2: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (hash: ZVnbf0eZss/W/BW/uaATqG881vi7quF65kC8w3J0+jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: Aug 23 05:20:07 2025 GMT Not After : Aug 30 05:20:07 2025 GMT Subject: CN=68a94f88-952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:6d:cd:c1:9e:7b:2b:e7:51:a8:69:7a:e6: 0d:6d:48:ed:71:0d:3a:2f:33:c6:68:0e:60:e2:64: bf:cb:9b:e5:ac:4b:81:b5:ef:16:93:c5:86:ff:d3: de:81:35:7d:ad:36:8e:35:f1:7a:d7:e4:01:65:12: 11:3d:0c:dd:30:0f:3f:f5:39:12:5d:ab:98:d2:0a: 28:c1:f0:39:54:a7:ca:f5:29:64:3a:c3:4b:2d:31: 92:4c:8d:42:29:53:23:86:44:b0:76:57:13:e0:b1: d0:e2:38:4a:3f:c1:be:38:67:2d:c5:eb:3d:66:9c: 13:33:8f:4d:fd:e5:d5:04:8c:2c:21:43:af:f6:52: e0:8e:b3:28:8a:a5:6c:74:22:87:e8:e9:23:8b:be: b3:42:0e:b1:ad:21:1c:c4:30:57:2d:27:48:21:a1: 3d:6d:0b:71:5c:ad:d9:65:e5:46:4b:11:60:3a:4a: b0:ba:a8:bb:eb:81:7d:69:d8:e2:95:dd:d9:83:6b: f4:ab:77:11:c1:26:ff:de:06:40:ce:1c:a8:56:a3: 8f:fa:c6:da:e0:36:2b:dc:d9:9b:66:ad:1f:45:45: 49:c3:7a:7f:9f:96:b2:33:45:a6:92:cf:12:b2:a0: 83:a9:26:1b:78:60:77:98:0c:d8:f7:10:7c:40:0d: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:55:B2:26:05:2E:EF:F2:9E:38:BD:42:6A:0F:52:03:4B:8B:05:81 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:94:7d:77:1c:80:34:34:b8:b0:78:ee:ee:cb:51:a1:50:62: 94:02:5f:ca:ab:df:e2:a7:d3:d1:7d:af:fc:01:e4:1c:41:7a: 06:ab:80:b0:65:33:62:4f:1e:e2:d5:77:e2:29:e1:f8:24:13: c0:78:c3:9e:b8:b1:ad:a8:50:79:39:39:51:0e:9a:69:19:49: 51:92:e9:83:76:9a:7a:9c:a4:50:78:f0:57:db:8b:90:4a:a1: b2:b2:11:65:17:df:b9:90:6e:a3:fb:bc:91:2c:8a:1a:a8:c7: 50:1a:1f:ae:82:3f:7e:d7:22:a8:ea:4b:57:96:20:f3:88:93: 5b:5e:e4:83:ce:14:68:40:99:d2:39:18:16:1e:e2:e8:ea:56: 15:ad:a8:49:d9:9d:06:e2:32:2b:1c:2f:40:6c:82:c1:39:bc: a1:ff:09:f5:c5:9e:27:23:f1:40:b1:22:d4:55:d2:a6:a6:8b: de:f6:a3:a6:f7:6c:c9:8a:f8:a9:ae:51:87:3f:2d:bc:f6:cc: 42:71:3d:73:ff:aa:2a:5e:ef:00:a3:c0:11:72:f9:05:7f:6d: 41:17:27:5d:a2:d8:cc:df:7e:b0:8e:d0:19:af:8a:79:23:35: d7:45:03:63:85:a5:b3:bc:83:85:7d:97:7a:bc:c6:61:c4:f0: 54:ac:b0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwODIzMDUyMDA3WhcNMjUwODMwMDUyMDA3WjAYMRYwFAYD VQQDEw02OGE5NGY4OC05NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVVtzcGeeyvnUahpeuYNbUjtcQ06LzPGaA5g4mS/y5vlrEuBte8Wk8WG/9Pe gTV9rTaONfF61+QBZRIRPQzdMA8/9TkSXauY0goowfA5VKfK9SlkOsNLLTGSTI1C KVMjhkSwdlcT4LHQ4jhKP8G+OGctxes9ZpwTM49N/eXVBIwsIUOv9lLgjrMoiqVs dCKH6Okji76zQg6xrSEcxDBXLSdIIaE9bQtxXK3ZZeVGSxFgOkqwuqi764F9adji ld3Zg2v0q3cRwSb/3gZAzhyoVqOP+sba4DYr3NmbZq0fRUVJw3p/n5ayM0Wmks8S sqCDqSYbeGB3mAzY9xB8QA0TnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRVsiYF Lu/ynji9QmoPUgNLiwWBMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0ZDRS9FMEJFMzZBQzAyM0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5 RW1nSXJfZk9wUHdJNTlrcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhlH13HIA0NLiweO7uy1GhUGKUAl/Kq9/ip9PRfa/8AeQcQXoGq4Cw ZTNiTx7i1XfiKeH4JBPAeMOeuLGtqFB5OTlRDpppGUlRkumDdpp6nKRQePBX24uQ SqGyshFlF9+5kG6j+7yRLIoaqMdQGh+ugj9+1yKo6ktXliDziJNbXuSDzhRoQJnS ORgWHuLo6lYVrahJ2Z0G4jIrHC9AbILBObyh/wn1xZ4nI/FAsSLUVdKmpove9qOm 92zJiviprlGHPy289sxCcT1z/6oqXu8Ao8ARcvkFf21BFyddotjM336wjtAZr4p5 IzXXRQNjhaWzvIOFfZd6vMZhxPBUrLAf -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:22 2025 by rpki-client