$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json) Hash identifier: jMi31IgnebJFVJB/tYMPvOkpxsEJnBb8aVkZSbeJR3o= Subject key identifier: 7C:EF:B3:AC:80:F4:91:85:4A:08:37:9F:16:19:77:92:70:07:44:46 Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft Manifest number: 05E5 Signing time: Fri 22 Aug 2025 23:09:58 +0000 Manifest this update: Fri 22 Aug 2025 23:09:58 +0000 Manifest next update: Fri 29 Aug 2025 23:09:58 +0000 Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: QVmkklxzaqBmf2YoVUffi53GZVMn49nqjCdKMdFZOzg=) 2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: Vhi1JgNRZObirmNIX1fnf2q21PbGnP/JOntHIC3xnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Aug 22 23:09:58 2025 GMT Not After : Aug 29 23:09:58 2025 GMT Subject: CN=68a8f8c6-31e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:b9:7c:13:4c:fa:a3:4f:57:85:1e:2e:b8: 16:14:1e:3f:7b:fb:05:bb:fa:fd:8a:65:80:b4:04: f7:39:c5:bb:9f:71:0c:40:7a:b1:2d:80:ce:98:ba: 89:85:ff:e4:cd:f5:73:3f:d1:8f:74:ac:65:c9:95: db:a5:97:fe:ef:01:4a:a7:77:49:cd:86:91:0b:bf: 7c:2b:3a:cd:65:b4:e0:bd:f8:3b:e2:ed:56:14:b5: 24:9a:64:fc:d4:b9:62:9f:dd:bb:01:41:ca:bd:af: 3a:57:d7:7d:78:5c:11:a5:9d:1e:e1:9c:1f:47:ee: b5:52:bb:26:5f:93:21:37:b2:56:fd:d2:b2:40:a1: 6b:28:df:ac:c1:3f:0b:15:d4:db:32:58:7c:16:97: b3:a1:d4:46:0c:d8:49:74:c5:85:c4:6a:1c:7c:91: 4a:c4:bc:3a:44:07:fe:d8:2d:df:96:35:4d:d2:ea: c5:f0:c8:60:23:8e:86:03:07:6f:b0:64:58:04:f5: 40:96:35:70:d4:59:b7:13:a2:c1:6a:c2:73:bb:2f: 30:6a:82:6c:58:67:d3:87:02:6d:fe:5b:2d:ab:9a: 7c:84:fd:c6:ed:6d:03:60:2e:71:7b:d2:4d:36:18: 58:c6:22:1a:62:b6:35:8e:5d:4f:ea:43:f3:47:96: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EF:B3:AC:80:F4:91:85:4A:08:37:9F:16:19:77:92:70:07:44:46 X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:5e:1f:83:68:02:c7:35:14:b4:81:17:cb:ee:90:3e:f8: 29:6a:3a:9a:74:cb:ab:97:9c:4f:b5:d7:95:b4:46:52:8b:ac: f3:1b:ee:15:1a:f1:fb:40:14:f5:e2:ef:ed:fa:ba:0b:6a:07: 98:0f:bb:c1:ac:c1:bc:e2:94:08:09:ac:2f:f1:a7:42:fa:b7: 20:79:18:71:ae:cf:8f:93:a9:8d:ba:c1:be:92:37:90:5a:e4: 0d:e4:87:5a:52:63:70:e4:1d:f5:53:8f:c9:25:5b:b7:10:f0: d7:11:62:5a:8d:0f:ad:55:d7:61:c5:d9:2e:6d:56:bf:82:1c: 5d:06:93:42:52:96:b7:fa:86:42:b8:45:92:6d:88:a3:49:40: 53:5d:41:8f:88:52:58:5a:a1:77:df:f3:64:6c:8f:89:8e:09: c0:92:26:34:98:0c:8e:5f:bf:d6:7e:73:2e:00:80:42:2c:57: 03:88:b4:02:e2:0f:74:9d:c1:60:1a:0b:5e:62:7b:8f:e3:51: 2f:4e:5c:07:73:c3:b3:5f:f6:15:8a:7c:a7:5c:8c:21:63:db: 40:63:5c:97:b6:1c:8a:cf:4a:79:02:5e:f6:ca:86:51:e2:0e: 15:c9:34:51:e1:f6:a7:5e:49:f9:2b:71:e0:ef:d8:a0:5d:67: 4c:4c:77:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUwODIyMjMwOTU4WhcNMjUwODI5MjMwOTU4WjAYMRYwFAYD VQQDEw02OGE4ZjhjNi0zMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/K5fBNM+qNPV4UeLrgWFB4/e/sFu/r9imWAtAT3OcW7n3EMQHqxLYDOmLqJ hf/kzfVzP9GPdKxlyZXbpZf+7wFKp3dJzYaRC798KzrNZbTgvfg74u1WFLUkmmT8 1Llin927AUHKva86V9d9eFwRpZ0e4ZwfR+61UrsmX5MhN7JW/dKyQKFrKN+swT8L FdTbMlh8FpezodRGDNhJdMWFxGocfJFKxLw6RAf+2C3fljVN0urF8MhgI46GAwdv sGRYBPVAljVw1Fm3E6LBasJzuy8waoJsWGfThwJt/lstq5p8hP3G7W0DYC5xe9JN NhhYxiIaYrY1jl1P6kPzR5apWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzvs6yA 9JGFSgg3nxYZd5JwB0RGMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXV4fg2gCxzUUtIEXy+6QPvgpajqadMurl5xPtdeVtEZSi6zzG+4V GvH7QBT14u/t+roLageYD7vBrMG84pQICawv8adC+rcgeRhxrs+Pk6mNusG+kjeQ WuQN5IdaUmNw5B31U4/JJVu3EPDXEWJajQ+tVddhxdkubVa/ghxdBpNCUpa3+oZC uEWSbYijSUBTXUGPiFJYWqF33/NkbI+JjgnAkiY0mAyOX7/WfnMuAIBCLFcDiLQC 4g90ncFgGgteYnuP41EvTlwHc8OzX/YVinynXIwhY9tAY1yXthyKz0p5Al72yoZR 4g4VyTRR4fanXkn5K3Hg79igXWdMTHd+ -----END CERTIFICATE-----Generated at Sat Aug 23 21:18:13 2025 by rpki-client