$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: FZFVLTYXxIzpniO9UDS/Jd3RFfE8y7u/+KksLmDgQ3M= Subject key identifier: 26:AE:DA:52:D0:3A:30:32:7A:5A:AA:17:08:31:91:14:52:09:13:65 Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 10C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 109A Signing time: Fri 22 Aug 2025 17:30:47 +0000 Manifest this update: Fri 22 Aug 2025 17:30:47 +0000 Manifest next update: Fri 29 Aug 2025 17:30:47 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: JzTm58UFjLiOjR0dtufPqDROHY8WtED8Bmv51ud7nAI=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4290 (0x10c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Aug 22 17:30:47 2025 GMT Not After : Aug 29 17:30:47 2025 GMT Subject: CN=68a8a947-46aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:5e:f0:a3:fa:af:d5:88:40:6d:f1:0e:63: d2:ce:f5:63:b5:53:7a:73:b3:bf:f4:0a:3c:fe:f3: 99:9e:70:b8:58:78:09:dc:48:98:eb:3a:53:dc:aa: 30:6b:70:d5:52:cb:a7:74:44:a6:14:12:72:29:b4: 7a:88:95:a2:81:d2:f4:14:30:e0:e0:0d:98:ad:ab: 80:e8:39:8b:ee:3d:07:c6:f5:53:99:be:3a:bf:97: b9:df:a1:88:59:7a:d9:fa:df:47:1d:54:cf:3c:94: 35:23:9a:1e:ee:ff:4e:dd:3f:74:e8:3a:0a:d1:01: 42:f3:77:40:92:89:0a:e5:20:83:8a:c5:24:e2:ad: 75:4c:d5:f9:0c:e4:11:c6:6f:14:0d:79:38:5b:04: 71:72:c2:8d:a9:0a:fd:32:2f:2a:22:41:4c:92:a7: cf:d0:79:a7:26:80:81:1b:19:f8:71:2a:c8:d1:e6: b1:8f:2c:15:b2:ce:e9:78:71:ad:82:c8:b6:2f:1a: 01:7c:54:13:70:49:fd:a4:1a:5e:18:8a:9d:46:d5: ee:69:33:9a:17:d4:c8:99:c5:9a:5b:29:5a:33:37: a8:41:34:e2:62:a8:ff:17:99:97:65:fe:97:92:c2: 03:0a:cc:5b:c5:8b:34:fe:c4:03:c1:f6:b0:25:76: 19:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AE:DA:52:D0:3A:30:32:7A:5A:AA:17:08:31:91:14:52:09:13:65 X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c2:3e:c8:cd:a0:38:c2:87:90:13:85:82:b7:a4:a7:8d:bf: 6f:e4:7e:2c:3a:22:af:30:64:5d:dd:55:13:33:a6:4e:18:2c: 7d:23:47:4c:f8:c2:97:65:6b:41:4c:17:a4:95:76:72:bc:21: 6a:ed:89:4e:47:69:31:b2:c7:3d:d3:c1:65:bd:7a:13:e3:71: ff:77:0f:d3:9b:c9:b6:b9:e2:a1:f4:01:7b:40:73:56:74:1a: 9b:a5:5f:ed:0a:e1:18:e7:01:72:8f:c5:92:27:5b:eb:60:8e: 91:f5:1a:88:a7:44:e2:ef:da:73:15:7b:d5:25:47:c1:08:93: 3d:1e:f2:18:47:b1:09:2c:fc:61:63:1d:7f:bb:bf:6d:f3:0d: 94:a4:33:98:d1:23:72:52:46:3e:6b:63:7e:06:14:e8:3d:23: 6a:9b:44:6b:c5:48:d6:30:1d:90:1c:2f:57:d3:b5:35:7b:e8: 5e:86:2e:f7:74:6b:ac:2f:55:00:fe:5a:bc:bd:0e:c3:1f:b8: b8:34:c5:10:30:3e:a0:6b:92:6f:c4:df:31:40:c3:05:ee:a2: d4:44:7b:83:4b:29:1d:a5:da:6a:ba:3e:d6:06:4f:f7:24:08: 0e:4b:39:3d:45:dd:a0:c1:76:13:c5:2d:57:fe:8d:cf:56:da: 6a:d5:4c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUwODIyMTczMDQ3WhcNMjUwODI5MTczMDQ3WjAYMRYwFAYD VQQDEw02OGE4YTk0Ny00NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA405e8KP6r9WIQG3xDmPSzvVjtVN6c7O/9Ao8/vOZnnC4WHgJ3EiY6zpT3Kow a3DVUsundESmFBJyKbR6iJWigdL0FDDg4A2YrauA6DmL7j0HxvVTmb46v5e536GI WXrZ+t9HHVTPPJQ1I5oe7v9O3T906DoK0QFC83dAkokK5SCDisUk4q11TNX5DOQR xm8UDXk4WwRxcsKNqQr9Mi8qIkFMkqfP0HmnJoCBGxn4cSrI0eaxjywVss7peHGt gsi2LxoBfFQTcEn9pBpeGIqdRtXuaTOaF9TImcWaWylaMzeoQTTiYqj/F5mXZf6X ksIDCsxbxYs0/sQDwfawJXYZPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCau2lLQ OjAyelqqFwgxkRRSCRNlMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcwj7IzaA4woeQE4WCt6Snjb9v5H4sOiKvMGRd3VUTM6ZOGCx9I0dM +MKXZWtBTBeklXZyvCFq7YlOR2kxssc908FlvXoT43H/dw/Tm8m2ueKh9AF7QHNW dBqbpV/tCuEY5wFyj8WSJ1vrYI6R9RqIp0Ti79pzFXvVJUfBCJM9HvIYR7EJLPxh Yx1/u79t8w2UpDOY0SNyUkY+a2N+BhToPSNqm0RrxUjWMB2QHC9X07U1e+hehi73 dGusL1UA/lq8vQ7DH7i4NMUQMD6ga5JvxN8xQMMF7qLURHuDSykdpdpquj7WBk/3 JAgOSzk9Rd2gwXYTxS1X/o3PVtpq1Uyu -----END CERTIFICATE-----Generated at Sat Aug 23 19:58:33 2025 by rpki-client