$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft File: h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json) Hash identifier: cgPZBTxwesOmpEgcjYOYKQ5Gplhk0E0RzpGI3T4Mc4A= Subject key identifier: 07:5D:FE:C7:EC:AF:C1:3A:5C:BC:8F:D9:76:D7:7A:17:16:A7:FF:02 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft Manifest number: 03B3 Signing time: Sat 23 Aug 2025 00:59:29 +0000 Manifest this update: Sat 23 Aug 2025 00:59:28 +0000 Manifest next update: Sat 30 Aug 2025 00:59:28 +0000 Files and hashes: 1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: W1A0GQu4WNLt+k4v/C0ux0EXzFpx63NOA9QiGc1jYrA=) 2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=) 3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=) 4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Validity Not Before: Aug 23 00:59:28 2025 GMT Not After : Aug 30 00:59:28 2025 GMT Subject: CN=68a91270-4902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:ed:7f:f2:1d:3a:3e:4d:fe:29:2c:fa:e3: fa:ed:7d:b3:da:95:48:57:95:92:e0:bc:da:44:65: 28:38:5d:ee:9d:e5:59:c1:c2:5d:a3:6d:dd:ac:56: ee:70:ef:d3:1f:9f:40:09:eb:b7:31:c8:19:10:39: 09:21:c7:7e:6e:3a:bb:05:c2:e5:f0:dd:53:db:f0: 62:d3:6f:4d:a2:c6:11:21:3f:ce:18:f7:d1:86:3e: 91:ee:e3:f4:50:0b:dc:23:05:3d:a9:77:f5:ad:73: b7:95:77:b3:8d:e0:6d:08:f8:19:5a:03:13:6b:c4: 18:2a:3f:49:6c:fb:c3:e9:4d:e3:08:34:45:18:35: 32:c3:f3:e7:7e:38:04:fb:bd:ed:57:1f:34:11:56: d6:f4:79:84:8c:a5:71:5a:70:3f:eb:9b:d0:7a:d3: 82:6e:ed:00:e0:77:a6:cc:57:f1:e3:56:62:25:b2: a8:c5:5e:7d:44:83:99:27:f9:a0:a9:07:ee:0d:bf: 9c:46:15:38:0f:a5:80:54:cf:69:d8:ca:b8:5a:16: dc:6c:52:6c:af:83:f4:8a:e6:be:43:92:01:d0:db: a1:98:9a:f4:b0:04:cf:86:b9:ff:ab:92:69:86:83: 17:86:13:d7:92:d6:c8:ee:66:11:60:4a:4c:aa:0d: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5D:FE:C7:EC:AF:C1:3A:5C:BC:8F:D9:76:D7:7A:17:16:A7:FF:02 X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ab:90:87:3a:93:a2:e4:e6:18:08:7b:53:41:e6:b1:8a:82: dd:a1:dc:88:f6:d6:c5:e1:0a:86:1a:69:0f:91:84:dc:0a:19: 76:f1:d1:1d:a4:21:1d:3c:c2:e1:e7:17:13:9a:84:b8:7e:fc: 27:94:11:79:92:eb:22:ed:8c:04:f4:f0:37:06:80:43:82:89: 01:18:ee:6b:f6:f7:89:10:82:ec:1a:5c:d6:57:8e:1e:59:59: 5c:e0:b7:0c:a2:84:b3:00:09:7d:b3:22:3e:42:41:fc:2d:b5: c1:89:fd:61:fe:58:ad:a9:8b:55:f4:dd:6e:b3:f8:1e:0a:97: f2:0c:5b:21:94:73:75:90:ba:51:09:d6:b5:61:a5:51:4e:dd: aa:0f:47:f0:86:4c:c8:88:92:e4:e6:9b:b5:d3:47:8f:c7:0c: 3e:a9:d5:bb:f9:31:c5:a6:2a:1a:0f:48:e2:74:b9:7e:7b:87: d4:1a:e1:98:2c:86:7c:ec:ee:fe:f8:a4:17:18:1c:44:20:64: f9:40:72:f0:ae:ea:b1:96:27:07:23:20:c1:73:7c:6b:73:7b: b8:17:81:c1:89:5f:bb:6e:e4:32:c9:34:92:c2:4d:22:2f:2c: a3:7c:e6:fc:cb:c4:3b:fb:5c:8d:a2:b6:8f:bf:7b:52:b2:f0: 08:a5:aa:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwODIzMDA1OTI4WhcNMjUwODMwMDA1OTI4WjAYMRYwFAYD VQQDEw02OGE5MTI3MC00OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8Ttf/IdOj5N/iks+uP67X2z2pVIV5WS4LzaRGUoOF3uneVZwcJdo23drFbu cO/TH59ACeu3McgZEDkJIcd+bjq7BcLl8N1T2/Bi029NosYRIT/OGPfRhj6R7uP0 UAvcIwU9qXf1rXO3lXezjeBtCPgZWgMTa8QYKj9JbPvD6U3jCDRFGDUyw/PnfjgE +73tVx80EVbW9HmEjKVxWnA/65vQetOCbu0A4HemzFfx41ZiJbKoxV59RIOZJ/mg qQfuDb+cRhU4D6WAVM9p2Mq4WhbcbFJsr4P0iua+Q5IB0NuhmJr0sATPhrn/q5Jp hoMXhhPXktbI7mYRYEpMqg3xJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdd/sfs r8E6XLyP2XbXehcWp/8CMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQq5CHOpOi5OYYCHtTQeaxioLdodyI9tbF4QqGGmkPkYTcChl28dEd pCEdPMLh5xcTmoS4fvwnlBF5kusi7YwE9PA3BoBDgokBGO5r9veJEILsGlzWV44e WVlc4LcMooSzAAl9syI+QkH8LbXBif1h/litqYtV9N1us/geCpfyDFshlHN1kLpR Cda1YaVRTt2qD0fwhkzIiJLk5pu100ePxww+qdW7+THFpioaD0jidLl+e4fUGuGY LIZ87O7++KQXGBxEIGT5QHLwruqxlicHIyDBc3xrc3u4F4HBiV+7buQyyTSSwk0i LyyjfOb8y8Q7+1yNoraPv3tSsvAIpap4 -----END CERTIFICATE-----Generated at Sat Aug 23 21:20:49 2025 by rpki-client