$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft File: -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json) Hash identifier: lLzmOEObUPxOebVeNcNx4JxaBkFaqUlx57aav8gvfBc= Subject key identifier: DE:9A:B3:D3:CD:73:9C:0E:FC:57:46:25:C4:2D:F4:87:28:D5:27:08 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft Manifest number: 0AFA Signing time: Wed 02 Jul 2025 19:58:20 +0000 Manifest this update: Wed 02 Jul 2025 19:58:19 +0000 Manifest next update: Wed 09 Jul 2025 19:58:19 +0000 Files and hashes: 1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: M5E9hJs/BbDTaWWqSYPbUzoVaUsaBMiHcBCUhI69A4s=) 2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: s5FxAXvHyHM95JkI0bpkB+0cESUkZdTctd6oGAI/wW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: Jul 2 19:58:19 2025 GMT Not After : Jul 9 19:58:19 2025 GMT Subject: CN=68658f5b-4ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:cf:46:dd:3a:65:78:99:3b:5e:34:92:37: 37:e4:30:e7:96:62:45:71:ae:28:0c:97:83:1b:d6: 7c:63:37:b9:37:89:fd:73:51:75:86:99:5c:ed:7a: b9:7e:f3:ec:28:c6:09:a8:01:ec:52:db:e4:fc:dd: 60:d8:2f:1e:a4:30:5b:65:51:51:10:c3:b4:b9:62: 82:6e:35:f7:03:f0:52:e0:6c:98:6a:3a:00:55:6f: 1c:b4:5b:4c:0d:6a:51:0b:6f:13:21:4d:27:0f:db: 44:9b:a3:90:cd:1f:0a:f6:8a:95:9e:aa:9b:7b:97: cb:28:f2:fe:5e:16:e6:3f:e2:21:19:ee:e2:be:e0: 87:1d:56:66:00:26:26:c3:0b:45:70:9d:f7:1a:f2: 96:67:3b:e7:75:9b:2f:cf:2b:d2:cc:17:07:81:7d: c3:08:b7:e0:85:a3:24:a0:12:13:8e:ad:e8:2a:e9: 80:a7:52:f2:b1:72:8b:52:5b:a4:59:d2:03:c6:8f: 7c:41:b4:d5:43:cc:57:15:2b:66:4d:ef:89:c7:f9: 61:f5:68:3f:4e:ab:c1:a6:6c:6a:5a:8a:9b:a0:44: d0:17:d3:a6:93:1f:c8:d1:de:44:85:07:8f:67:c1: 6b:ec:1a:bc:c3:b2:28:2b:8b:d9:d9:6a:75:32:f0: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:B3:D3:CD:73:9C:0E:FC:57:46:25:C4:2D:F4:87:28:D5:27:08 X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:91:c9:cb:68:21:17:1f:d6:fd:a4:fc:80:dc:27:34:3b: 6c:d5:5f:15:9e:0b:a3:ee:88:f9:5f:98:6a:0f:2a:f3:94:18: 5f:69:45:0a:76:01:01:2d:8b:dc:e2:d7:81:ef:b2:c2:1c:e6: fa:6a:c5:ff:b1:e5:8a:1f:14:dd:49:21:b7:98:89:97:28:10: ed:8d:cf:ba:e5:59:6a:57:43:af:b9:27:f5:ca:3d:94:66:30: 37:58:ef:51:4a:84:6f:90:a3:d4:a9:16:95:1e:f1:ba:9c:0b: 0f:3b:5c:cd:2a:58:df:ad:4b:57:f2:b2:12:32:97:f7:17:48: 78:ff:c2:74:a4:3f:1e:0a:a9:90:df:4a:3b:f5:55:b7:3f:34: 89:9f:82:a3:e9:11:44:1e:6c:d4:56:ce:d9:8e:cc:c7:9f:88: 76:74:db:46:05:08:a2:92:6c:26:e8:07:3b:7b:ee:69:06:e1: ca:82:bf:b8:ff:2f:ab:d5:c8:01:cc:5f:8d:15:44:ba:b9:af: 7b:d1:8c:ea:c7:96:f0:7c:80:ca:80:ef:0c:37:98:d9:23:41: 18:98:84:c1:96:72:3c:05:21:87:e8:74:a2:6b:2b:75:5d:97: 6d:f4:a1:7b:e6:bc:51:75:56:bf:a9:04:33:87:f2:4b:26:0c: 6e:a2:1d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjUwNzAyMTk1ODE5WhcNMjUwNzA5MTk1ODE5WjAYMRYwFAYD VQQDEw02ODY1OGY1Yi00ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BLPRt06ZXiZO140kjc35DDnlmJFca4oDJeDG9Z8Yze5N4n9c1F1hplc7Xq5 fvPsKMYJqAHsUtvk/N1g2C8epDBbZVFREMO0uWKCbjX3A/BS4GyYajoAVW8ctFtM DWpRC28TIU0nD9tEm6OQzR8K9oqVnqqbe5fLKPL+XhbmP+IhGe7ivuCHHVZmACYm wwtFcJ33GvKWZzvndZsvzyvSzBcHgX3DCLfghaMkoBITjq3oKumAp1LysXKLUluk WdIDxo98QbTVQ8xXFStmTe+Jx/lh9Wg/TqvBpmxqWoqboETQF9Omkx/I0d5EhQeP Z8Fr7Bq8w7IoK4vZ2Wp1MvBF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6as9PN c5wO/FdGJcQt9Ico1ScIMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDIzQS84RTNDMTIxRTQ4RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFi cnVMcGxJaEN6ckMwQko1NFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATw5HJy2ghFx/W/aT8gNwnNDts1V8Vnguj7oj5X5hqDyrzlBhfaUUK dgEBLYvc4teB77LCHOb6asX/seWKHxTdSSG3mImXKBDtjc+65VlqV0OvuSf1yj2U ZjA3WO9RSoRvkKPUqRaVHvG6nAsPO1zNKljfrUtX8rISMpf3F0h4/8J0pD8eCqmQ 30o79VW3PzSJn4Kj6RFEHmzUVs7ZjszHn4h2dNtGBQiikmwm6Ac7e+5pBuHKgr+4 /y+r1cgBzF+NFUS6ua970Yzqx5bwfIDKgO8MN5jZI0EYmITBlnI8BSGH6HSiayt1 XZdt9KF75rxRdVa/qQQzh/JLJgxuoh1s -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:17 2025 by rpki-client