$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: vIx2nwPORLq6JUlUhqdgT6SloFm5dlVVCzXBxwcD1IQ= Subject key identifier: 85:83:03:9D:6B:F5:16:B7:52:8B:52:05:48:0A:5D:F3:36:BE:3F:F6 Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0C50 Signing time: Fri 22 Aug 2025 18:40:55 +0000 Manifest this update: Fri 22 Aug 2025 18:40:55 +0000 Manifest next update: Fri 29 Aug 2025 18:40:55 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: Vzxl4IHMsvdbWY6FO8yRAvynWv5ZQHO6bwe7AThRCrU=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Aug 22 18:40:55 2025 GMT Not After : Aug 29 18:40:55 2025 GMT Subject: CN=68a8b9b7-3b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:d7:09:aa:23:83:37:79:f9:a8:52:69:d8: 11:ed:4c:de:3b:a2:1f:d4:1f:67:dd:1c:10:3b:65: 6a:71:08:1b:1d:85:11:b9:eb:c7:9d:74:df:ac:63: 04:0d:5d:82:7d:ec:58:94:6f:ce:88:04:08:fc:1a: 3e:83:6e:b7:4c:09:6d:fe:d2:9b:6f:9f:6a:e3:e0: 77:8f:44:1a:b5:fc:9c:5f:18:53:7f:b5:e6:f1:95: f6:a5:0e:98:c0:86:93:a1:e9:ca:55:4c:0d:e6:32: 44:ed:20:4b:85:a6:6a:3e:6e:8b:2d:79:a7:4e:8d: a3:2d:85:5a:c0:f6:3a:e6:06:6b:9f:77:1c:04:b1: c1:42:1e:7c:b5:27:d0:ec:b3:95:3e:65:59:5e:04: fe:7d:ac:e9:1d:83:9a:6d:d5:b4:63:7b:e3:ec:68: 15:f5:8c:4e:12:f2:b3:66:e2:0e:f1:51:2f:72:c2: 3f:f4:8a:bd:9e:70:9f:33:60:bb:2c:b8:31:fe:f0: d7:36:d1:d5:13:7d:6f:4f:ae:cc:97:e5:7f:89:9b: 88:c5:c3:d6:77:f3:cc:5d:72:54:61:11:9d:f9:24: d5:53:9e:c2:1b:33:83:75:32:a9:41:b4:74:b2:27: 9b:88:db:d5:35:e0:a4:d1:a8:c8:89:a0:13:31:76: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:03:9D:6B:F5:16:B7:52:8B:52:05:48:0A:5D:F3:36:BE:3F:F6 X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ad:ef:36:62:e3:0b:84:d2:9c:61:77:e3:3c:e3:46:5c:7c: fc:1e:b1:32:05:ec:01:f6:bb:0e:5e:59:0d:c3:30:40:77:a2: 5a:a1:5d:51:26:c6:ef:f0:a5:76:39:26:a4:4f:86:a8:69:66: b7:22:b5:a3:78:ce:94:14:f6:3b:65:8a:9f:3d:ae:23:62:e7: 58:03:c9:2c:8b:45:cc:19:37:e6:c6:9b:8b:c6:e4:c7:0b:da: b4:1f:85:0d:9a:cb:a9:6a:1c:2b:1c:b7:b7:c4:23:ee:1f:ea: d5:f5:2e:44:11:8e:ea:97:06:1b:c3:0c:e4:c4:f0:50:9a:c6: 0c:3a:09:4f:ba:21:b2:74:9d:ad:36:d2:4a:dc:f5:82:e0:e6: a9:9a:e2:7d:04:d7:22:32:ef:15:a4:51:48:35:76:67:46:23: 66:20:e9:25:aa:c2:9d:ba:28:57:27:a2:73:27:7d:e3:88:ee: 9a:ba:88:05:d4:b6:d3:ed:68:48:fa:76:9a:22:c0:73:86:7a: 48:54:cb:88:d6:08:11:bd:ef:d2:aa:23:23:3d:b6:7f:05:29: a7:d2:9e:58:f5:84:bd:e4:5c:47:f3:56:15:4a:34:8b:42:3a: 90:ac:6c:99:10:19:a7:83:d7:db:46:22:18:73:0c:8e:1c:03: dd:81:d5:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjUwODIyMTg0MDU1WhcNMjUwODI5MTg0MDU1WjAYMRYwFAYD VQQDEw02OGE4YjliNy0zYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRvXCaojgzd5+ahSadgR7UzeO6If1B9n3RwQO2VqcQgbHYURuevHnXTfrGME DV2CfexYlG/OiAQI/Bo+g263TAlt/tKbb59q4+B3j0QatfycXxhTf7Xm8ZX2pQ6Y wIaToenKVUwN5jJE7SBLhaZqPm6LLXmnTo2jLYVawPY65gZrn3ccBLHBQh58tSfQ 7LOVPmVZXgT+fazpHYOabdW0Y3vj7GgV9YxOEvKzZuIO8VEvcsI/9Iq9nnCfM2C7 LLgx/vDXNtHVE31vT67Ml+V/iZuIxcPWd/PMXXJUYRGd+STVU57CGzODdTKpQbR0 siebiNvVNeCk0ajIiaATMXYFoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWDA51r 9Ra3UotSBUgKXfM2vj/2MB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATre82YuMLhNKcYXfjPONGXHz8HrEyBewB9rsOXlkNwzBAd6JaoV1R Jsbv8KV2OSakT4aoaWa3IrWjeM6UFPY7ZYqfPa4jYudYA8ksi0XMGTfmxpuLxuTH C9q0H4UNmsupahwrHLe3xCPuH+rV9S5EEY7qlwYbwwzkxPBQmsYMOglPuiGydJ2t NtJK3PWC4OapmuJ9BNciMu8VpFFINXZnRiNmIOklqsKduihXJ6JzJ33jiO6auogF 1LbT7WhI+naaIsBzhnpIVMuI1ggRve/SqiMjPbZ/BSmn0p5Y9YS95FxH81YVSjSL QjqQrGyZEBmng9fbRiIYcwyOHAPdgdX5 -----END CERTIFICATE-----Generated at Sat Aug 23 20:42:45 2025 by rpki-client