$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: m3zgQCEk2POCWmZPKGNjTjFXVkEwuGheJEvK0/vji7g= Subject key identifier: 55:54:30:85:BC:F2:D8:5B:28:21:86:94:87:21:CF:48:7D:8E:1F:40 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0AA3 Signing time: Fri 22 Aug 2025 19:40:32 +0000 Manifest this update: Fri 22 Aug 2025 19:40:31 +0000 Manifest next update: Fri 29 Aug 2025 19:40:31 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: 3ovuhsGfdTvWr+xt5wKokfTazOt1nA8a7JuKp+HEeBY=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Aug 22 19:40:31 2025 GMT Not After : Aug 29 19:40:31 2025 GMT Subject: CN=68a8c7af-35a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:57:2b:fd:28:6f:81:83:1f:6a:1e:b8:de: fd:c1:d9:08:65:64:7e:61:f0:c0:b6:81:71:05:dd: 59:2d:c7:c3:11:69:f6:92:dd:70:8f:a2:39:d2:41: 7d:8b:17:c7:88:58:37:f7:5f:92:dc:ab:ce:61:ee: 3c:dd:dc:f1:7e:0e:f2:db:48:07:ae:45:85:0c:a6: cf:ac:21:67:ca:b8:53:2b:55:ff:18:4a:20:23:e8: 6a:ea:a2:c4:94:ab:80:71:cd:41:9a:da:83:6e:90: ea:fc:eb:6b:63:05:a8:65:50:18:15:10:c6:23:64: 8c:e9:b6:08:3e:67:c3:82:e9:9c:46:2c:18:4d:08: 61:62:d2:dc:5d:3a:da:5a:45:03:a4:6e:8f:8d:39: 82:b9:fc:5b:15:41:6b:f9:6a:e5:ca:1f:4f:b0:fb: a8:53:df:aa:a1:0b:11:78:34:fe:21:48:d6:a2:32: 91:01:c3:a2:0e:cd:59:7f:92:73:36:e4:6c:0f:aa: 2b:a9:d9:71:7b:a7:b3:6a:68:35:e1:36:60:22:ae: 08:ad:8b:75:63:f8:f8:57:f1:c0:2d:39:9e:e9:e5: e1:9e:0b:73:73:87:98:96:f9:7a:e3:a3:ac:3c:8b: 61:d2:a4:23:eb:47:44:07:10:db:a1:fa:b8:91:d9: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:54:30:85:BC:F2:D8:5B:28:21:86:94:87:21:CF:48:7D:8E:1F:40 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:06:93:3c:a2:a0:48:76:3a:f2:de:14:99:00:02:38:82:08: bc:64:f5:cc:09:d5:ee:fd:f5:c9:c6:d1:a7:bf:a7:c0:74:cc: 72:9f:c9:00:a1:92:d0:e1:1f:2e:54:51:0e:b2:67:e0:81:6c: a4:72:df:44:65:77:c4:9c:a4:0a:42:00:00:0e:ad:cb:f2:46: 9a:7a:4d:ad:1d:21:8d:88:b0:a2:69:56:7e:76:65:b1:45:a4: fc:3e:92:df:1b:b6:7a:ec:eb:98:c7:b3:db:5b:87:6f:b1:df: 10:3c:c4:e2:68:cb:8e:aa:19:44:b5:6a:0b:b7:8a:a6:ef:d3: 4a:f2:09:89:28:c2:85:25:3e:d1:f2:49:52:90:cd:04:0b:43: de:73:49:c7:73:92:32:47:81:d7:8d:b0:e7:62:87:8c:22:a4: 2e:0a:03:64:65:f6:6b:67:03:03:6e:3d:98:b8:37:29:88:70: 30:d2:5c:a2:f0:fd:40:fc:c9:30:7a:f3:cc:20:e2:4f:53:79: ca:50:a6:7b:d8:98:7b:00:65:93:da:09:ab:4f:96:e4:7b:18: 88:a5:6b:69:9d:42:aa:f3:a2:32:f9:f5:1a:e5:cd:70:50:90: 1d:69:a3:5b:d2:1e:32:14:a1:ee:cd:5d:ed:b4:67:5f:8f:1e: a4:03:2e:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwODIyMTk0MDMxWhcNMjUwODI5MTk0MDMxWjAYMRYwFAYD VQQDEw02OGE4YzdhZi0zNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nhXK/0ob4GDH2oeuN79wdkIZWR+YfDAtoFxBd1ZLcfDEWn2kt1wj6I50kF9 ixfHiFg391+S3KvOYe483dzxfg7y20gHrkWFDKbPrCFnyrhTK1X/GEogI+hq6qLE lKuAcc1BmtqDbpDq/OtrYwWoZVAYFRDGI2SM6bYIPmfDgumcRiwYTQhhYtLcXTra WkUDpG6PjTmCufxbFUFr+Wrlyh9PsPuoU9+qoQsReDT+IUjWojKRAcOiDs1Zf5Jz NuRsD6orqdlxe6ezamg14TZgIq4IrYt1Y/j4V/HALTme6eXhngtzc4eYlvl646Os PIth0qQj60dEBxDbofq4kdm16QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVUMIW8 8thbKCGGlIchz0h9jh9AMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgBpM8oqBIdjry3hSZAAI4ggi8ZPXMCdXu/fXJxtGnv6fAdMxyn8kA oZLQ4R8uVFEOsmfggWykct9EZXfEnKQKQgAADq3L8kaaek2tHSGNiLCiaVZ+dmWx RaT8PpLfG7Z67OuYx7PbW4dvsd8QPMTiaMuOqhlEtWoLt4qm79NK8gmJKMKFJT7R 8klSkM0EC0Pec0nHc5IyR4HXjbDnYoeMIqQuCgNkZfZrZwMDbj2YuDcpiHAw0lyi 8P1A/MkwevPMIOJPU3nKUKZ72Jh7AGWT2gmrT5bkexiIpWtpnUKq86Iy+fUa5c1w UJAdaaNb0h4yFKHuzV3ttGdfjx6kAy6p -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:39 2025 by rpki-client