$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: iJ2dkdNcHRyOXAJ2FBDFQksm0pHItfeD+38Vq6Vand8= Subject key identifier: 34:C6:B2:82:0E:EF:E7:A6:1A:74:EF:C2:8A:D1:D6:7C:44:B4:FC:C4 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B2D Signing time: Fri 22 Aug 2025 19:22:43 +0000 Manifest this update: Fri 22 Aug 2025 19:22:43 +0000 Manifest next update: Fri 29 Aug 2025 19:22:43 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: f30yuFVhYxX3OCwpvYP+5nccouyX74t5xxruWd+ki4M=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Aug 22 19:22:43 2025 GMT Not After : Aug 29 19:22:43 2025 GMT Subject: CN=68a8c383-44ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:48:96:fa:be:71:57:12:25:35:ee:20:6c: a8:74:b3:21:2b:94:eb:f2:b3:3f:36:19:73:b1:ab: e6:ec:b9:92:16:76:cf:cc:85:b6:52:31:f5:ea:b0: 32:9d:60:d7:66:29:bc:ee:4f:19:66:21:15:d8:35: 4c:8e:5a:b9:da:4f:f2:69:0a:d6:cf:58:56:2f:4d: 31:80:15:8c:9a:c2:ad:03:13:02:b3:c6:99:c2:fa: b7:fb:41:66:df:04:17:93:07:6d:35:4f:61:77:c4: a2:c8:5e:19:d2:90:48:06:c9:60:f8:8e:70:0c:a6: 28:14:f8:a8:b4:a4:08:40:8d:aa:5a:bd:d5:d4:f8: 8e:21:b6:d3:23:de:a1:cc:2a:65:fa:ee:b1:e8:87: a6:b2:9c:cc:97:b8:d2:d8:bb:fc:0d:aa:bb:9a:a6: 0d:af:7b:f7:df:d7:f4:f3:98:76:02:37:34:f6:b4: 1f:38:ef:01:9c:1c:ba:a8:ba:8f:9a:9b:96:65:b0: b9:47:d4:29:b6:7c:21:0a:58:56:ab:c7:97:96:c6: 8c:c2:56:80:14:9a:ac:00:89:91:3a:ec:e1:75:b5: 76:15:d4:71:b3:13:30:c2:f4:55:46:5d:04:e1:47: 46:fb:6c:39:14:55:0f:d0:05:49:10:c6:00:77:8b: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C6:B2:82:0E:EF:E7:A6:1A:74:EF:C2:8A:D1:D6:7C:44:B4:FC:C4 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:f1:90:6b:73:07:51:7f:6c:ff:97:97:18:d1:f0:d8:76: d1:e7:0f:4e:88:60:f7:e9:a3:5a:6f:b2:9a:d6:ca:7d:8d:8c: 78:03:30:74:2c:5c:94:d5:31:e1:28:24:f4:92:e6:f6:d4:66: 3f:ad:49:ff:8b:d7:0d:75:1d:87:4d:23:4b:7c:2a:16:16:41: ee:30:23:40:a5:50:56:f4:28:84:00:ad:91:43:04:fc:a9:bd: b2:a5:e4:dc:13:c8:90:00:27:61:cc:19:4e:9b:ee:a5:8e:1f: e0:42:e6:d7:59:81:ed:c4:de:06:f1:fb:ef:ff:25:e4:af:78: 6f:3f:cd:05:a1:7b:fd:53:9d:a4:65:4f:8d:4a:f8:f5:bb:4e: 1f:86:a5:b1:54:de:90:4c:40:11:e5:b9:57:8e:19:9a:f6:38: fb:60:06:d0:d1:75:28:e9:58:6b:c7:45:22:01:25:f5:c5:ba: d8:f3:ab:8a:cd:14:4b:a1:0e:80:8e:d3:07:9a:10:0f:ff:27: 15:c2:56:72:49:6b:69:95:0f:e3:ce:53:2b:52:48:d1:26:4b: 34:09:6b:38:53:a7:61:a5:aa:35:f7:90:10:ed:11:d8:c0:3b: d8:cf:7b:02:ba:ab:e2:a7:24:2b:91:c4:14:ba:2f:07:8f:d2: 87:63:c2:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwODIyMTkyMjQzWhcNMjUwODI5MTkyMjQzWjAYMRYwFAYD VQQDEw02OGE4YzM4My00NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QhIlvq+cVcSJTXuIGyodLMhK5Tr8rM/Nhlzsavm7LmSFnbPzIW2UjH16rAy nWDXZim87k8ZZiEV2DVMjlq52k/yaQrWz1hWL00xgBWMmsKtAxMCs8aZwvq3+0Fm 3wQXkwdtNU9hd8SiyF4Z0pBIBslg+I5wDKYoFPiotKQIQI2qWr3V1PiOIbbTI96h zCpl+u6x6IemspzMl7jS2Lv8Daq7mqYNr3v339f085h2Ajc09rQfOO8BnBy6qLqP mpuWZbC5R9QptnwhClhWq8eXlsaMwlaAFJqsAImROuzhdbV2FdRxsxMwwvRVRl0E 4UdG+2w5FFUP0AVJEMYAd4sO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTGsoIO 7+emGnTvworR1nxEtPzEMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYvPGQa3MHUX9s/5eXGNHw2HbR5w9OiGD36aNab7Ka1sp9jYx4AzB0 LFyU1THhKCT0kub21GY/rUn/i9cNdR2HTSNLfCoWFkHuMCNApVBW9CiEAK2RQwT8 qb2ypeTcE8iQACdhzBlOm+6ljh/gQubXWYHtxN4G8fvv/yXkr3hvP80FoXv9U52k ZU+NSvj1u04fhqWxVN6QTEAR5blXjhma9jj7YAbQ0XUo6Vhrx0UiASX1xbrY86uK zRRLoQ6AjtMHmhAP/ycVwlZySWtplQ/jzlMrUkjRJks0CWs4U6dhpao195AQ7RHY wDvYz3sCuqvipyQrkcQUui8Hj9KHY8KQ -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:46 2025 by rpki-client