$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: qOC+DtQYf1hkenEW6s5ynaA4SIg8wip6TkKO3nB2+CM= Subject key identifier: A9:92:FC:01:D7:79:9D:D5:75:0F:01:5D:FB:E9:A6:43:EC:11:9A:E6 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A47 Signing time: Fri 22 Aug 2025 16:26:19 +0000 Manifest this update: Fri 22 Aug 2025 16:26:18 +0000 Manifest next update: Fri 29 Aug 2025 16:26:18 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: v4HJ+2mx6ojNGmUod9f8JwG/Mkt1uUnJG/ubhVN+bcg=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6736 (0x1a50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Aug 22 16:26:18 2025 GMT Not After : Aug 29 16:26:18 2025 GMT Subject: CN=68a89a2a-c087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:43:ad:99:18:d6:98:8f:87:75:15:c7:e7: 93:cb:65:7e:7a:03:59:b3:8e:3f:bb:06:7f:4d:24: c7:37:3d:4e:d9:fb:9b:be:d0:cb:ee:02:78:40:85: e6:df:82:67:fa:1f:04:8e:1e:88:80:f7:c2:5d:94: 23:4d:43:9d:a8:d3:c9:f4:7d:a3:17:fa:4b:f9:3a: 23:73:09:6e:9d:62:cc:65:13:d6:c7:7a:66:a1:9b: 2b:55:08:f3:ba:cc:0e:9d:ef:5a:e1:c3:5a:9a:be: df:77:d0:8b:33:04:5c:25:50:9d:8d:35:d8:28:a3: f6:84:bd:02:48:43:2f:87:ec:96:4b:66:92:4c:ba: 6e:73:2a:dc:da:61:82:90:d6:2c:6e:4b:1e:1f:1a: 01:01:fc:5b:ce:69:42:65:9a:11:5d:41:1b:3f:a0: c6:5a:7c:68:5d:13:d4:4d:3d:cc:ff:2b:30:17:1c: 3d:d9:d5:d2:7f:2d:04:c9:19:67:61:4b:a5:75:a4: 9e:10:58:95:db:e0:15:28:b4:c5:05:3f:da:51:86: 40:28:0a:ef:50:5d:1e:4f:25:f1:3f:b1:c6:38:dd: f7:51:25:6a:bb:38:a6:62:77:31:2f:9e:6e:e1:66: 44:c8:46:c2:04:d5:88:62:f8:ce:43:f0:42:f7:d0: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:92:FC:01:D7:79:9D:D5:75:0F:01:5D:FB:E9:A6:43:EC:11:9A:E6 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e4:e7:39:e8:ea:07:44:0b:da:80:65:5b:b6:99:d8:ad:cd: f7:81:12:9e:a2:64:85:5b:50:51:6e:cf:f8:d6:f5:4c:8f:f3: 58:37:72:05:80:77:28:e6:83:84:6b:9b:87:c0:f0:ea:48:3c: 2b:4f:4d:1e:13:4c:ee:7e:54:8b:17:24:f3:a7:34:7f:1e:f8: 55:27:8c:c2:08:5d:de:9b:c0:89:25:45:18:a4:86:b9:35:65: 15:94:b4:5f:96:64:29:59:ba:f8:44:ff:68:74:bf:e0:60:b7: bd:c0:68:8a:8d:e1:02:50:04:a0:c3:6c:7b:d6:5d:b8:72:39: 5a:64:1e:a6:95:3c:7f:0f:43:52:bc:e9:37:17:24:04:e6:60: 1c:9a:e9:45:36:6a:aa:87:cf:6d:74:f8:9b:1d:3f:1d:41:ae: 32:06:85:9f:25:b4:f9:bc:1d:70:a5:62:6f:9d:52:7d:a3:b6: 8e:a5:0a:1a:b1:57:8d:7f:5f:ca:45:80:46:68:c5:1e:c4:c6: 2b:a0:ab:30:ff:0f:18:99:f2:25:43:f4:04:a3:7a:8a:61:23: 0d:1a:ac:93:43:f5:17:64:90:31:5e:5d:3e:ba:54:d4:fd:97: 0f:6e:a9:b5:40:16:b0:30:90:44:78:c2:26:00:a4:3f:1f:f0: fc:f8:74:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwODIyMTYyNjE4WhcNMjUwODI5MTYyNjE4WjAYMRYwFAYD VQQDEw02OGE4OWEyYS1jMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGlDrZkY1piPh3UVx+eTy2V+egNZs44/uwZ/TSTHNz1O2fubvtDL7gJ4QIXm 34Jn+h8Ejh6IgPfCXZQjTUOdqNPJ9H2jF/pL+TojcwlunWLMZRPWx3pmoZsrVQjz uswOne9a4cNamr7fd9CLMwRcJVCdjTXYKKP2hL0CSEMvh+yWS2aSTLpucyrc2mGC kNYsbkseHxoBAfxbzmlCZZoRXUEbP6DGWnxoXRPUTT3M/yswFxw92dXSfy0EyRln YUuldaSeEFiV2+AVKLTFBT/aUYZAKArvUF0eTyXxP7HGON33USVquzimYncxL55u 4WZEyEbCBNWIYvjOQ/BC99C2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmS/AHX eZ3VdQ8BXfvppkPsEZrmMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5Oc56OoHRAvagGVbtpnYrc33gRKeomSFW1BRbs/41vVMj/NYN3IF gHco5oOEa5uHwPDqSDwrT00eE0zuflSLFyTzpzR/HvhVJ4zCCF3em8CJJUUYpIa5 NWUVlLRflmQpWbr4RP9odL/gYLe9wGiKjeECUASgw2x71l24cjlaZB6mlTx/D0NS vOk3FyQE5mAcmulFNmqqh89tdPibHT8dQa4yBoWfJbT5vB1wpWJvnVJ9o7aOpQoa sVeNf1/KRYBGaMUexMYroKsw/w8YmfIlQ/QEo3qKYSMNGqyTQ/UXZJAxXl0+ulTU /ZcPbqm1QBawMJBEeMImAKQ/H/D8+HQz -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:57 2025 by rpki-client