$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: 9xEloFOST3ZvTR1o2/swjr9h9mPcR5CE1m4rrh5fnHM= Subject key identifier: 32:D0:D7:C4:F1:D7:99:56:4A:91:EC:45:35:AD:EE:53:C5:5E:AA:2B Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 1802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 1802 Signing time: Fri 22 Aug 2025 16:38:28 +0000 Manifest this update: Fri 22 Aug 2025 16:38:27 +0000 Manifest next update: Fri 29 Aug 2025 16:38:27 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: 9hdjRbPTmK6+dKiXndBRwxF3Vhbgu5gQ50czTRKZWLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6146 (0x1802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: Aug 22 16:38:27 2025 GMT Not After : Aug 29 16:38:27 2025 GMT Subject: CN=68a89d03-e7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:65:69:8b:97:7f:a1:ac:93:22:ad:31:a0: bf:97:85:a4:b6:3b:e6:39:96:c9:07:2a:1c:62:2a: d9:2f:fc:ff:6f:a8:98:7b:a5:5d:4a:61:62:18:3a: 3e:7f:6d:1a:e9:b5:fe:7b:04:34:da:fa:0b:cc:26: d0:93:58:4b:43:8f:1b:df:01:ae:1e:5c:b5:57:fb: 8f:d3:49:d5:26:20:2d:8e:4e:5a:f2:c0:f8:71:88: 8e:f3:73:c7:b5:c6:ae:2d:45:80:4a:4a:4d:ea:37: 53:4d:fe:d2:2f:f1:b2:90:69:e8:30:fa:f8:d6:93: e2:59:ba:71:df:e4:cf:40:c5:9e:e5:1c:d3:ab:78: e5:e7:6e:9b:00:0b:92:be:dd:6d:06:91:1a:eb:48: 28:22:9b:6f:c1:2a:3b:56:1d:99:f6:7b:d8:00:9c: aa:0c:d6:e2:13:30:f7:59:28:82:2e:c2:81:08:cd: 97:95:c4:8f:44:27:f0:b2:e3:dc:0f:3e:e1:2a:db: ff:34:f3:b9:b0:e2:74:83:11:e1:c6:f5:da:e3:4e: 4f:18:f4:6f:83:bd:57:61:91:fa:80:68:a2:c5:3a: ea:e8:3b:40:ac:cd:a8:ed:cc:be:73:45:19:c1:7e: 01:0c:29:85:70:cb:93:0d:6f:d1:68:d3:4c:16:43: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D0:D7:C4:F1:D7:99:56:4A:91:EC:45:35:AD:EE:53:C5:5E:AA:2B X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2c:c5:6d:66:c3:12:12:12:5b:11:4f:82:c1:6f:8c:5f:a3: 54:89:60:bd:63:35:ae:4d:b9:74:5e:35:53:a0:39:03:4c:18: e7:99:f0:aa:be:32:fd:8d:51:ac:2b:6b:14:3b:7c:ff:fe:13: 1b:b9:58:1a:8c:91:32:32:c7:df:b5:98:b5:7e:d5:eb:dc:29: 5f:fe:fb:93:6a:8a:44:c2:82:58:08:9b:d2:82:b3:72:43:85: 87:4c:2e:4f:38:41:3e:c0:eb:a3:b6:f2:9a:da:c4:9e:90:55: a6:db:a1:1d:c5:fe:d5:76:ca:01:77:fd:15:a9:8e:ee:20:e9: 97:57:e4:19:fd:a1:6c:a1:ad:9e:2e:ac:d7:6b:0c:a1:8e:7e: 37:4f:20:46:3f:9e:c7:eb:47:b1:45:3b:e3:96:76:a5:c7:85: 3a:97:ae:73:11:88:87:52:8d:f4:56:6c:c5:23:d8:6a:ae:15: 8d:0f:49:99:74:fc:a8:27:f6:69:27:b6:57:6a:03:8c:a7:e2: 03:b0:85:5d:b8:3f:bd:fc:cb:54:c9:de:7d:29:48:0c:88:18: 11:62:f6:3e:74:2f:c0:2e:8d:11:ac:4e:ad:5f:11:4f:dd:55: 2f:ca:b1:6a:d0:a9:5d:30:b3:71:45:91:7a:b7:27:0b:a5:a9: 58:a3:0b:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjUwODIyMTYzODI3WhcNMjUwODI5MTYzODI3WjAYMRYwFAYD VQQDEw02OGE4OWQwMy1lN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkxlaYuXf6GskyKtMaC/l4WktjvmOZbJByocYirZL/z/b6iYe6VdSmFiGDo+ f20a6bX+ewQ02voLzCbQk1hLQ48b3wGuHly1V/uP00nVJiAtjk5a8sD4cYiO83PH tcauLUWASkpN6jdTTf7SL/GykGnoMPr41pPiWbpx3+TPQMWe5RzTq3jl526bAAuS vt1tBpEa60goIptvwSo7Vh2Z9nvYAJyqDNbiEzD3WSiCLsKBCM2XlcSPRCfwsuPc Dz7hKtv/NPO5sOJ0gxHhxvXa405PGPRvg71XYZH6gGiixTrq6DtArM2o7cy+c0UZ wX4BDCmFcMuTDW/RaNNMFkPdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLQ18Tx 15lWSpHsRTWt7lPFXqorMB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpLMVtZsMSEhJbEU+CwW+MX6NUiWC9YzWuTbl0XjVToDkDTBjnmfCq vjL9jVGsK2sUO3z//hMbuVgajJEyMsfftZi1ftXr3Clf/vuTaopEwoJYCJvSgrNy Q4WHTC5POEE+wOujtvKa2sSekFWm26Edxf7VdsoBd/0VqY7uIOmXV+QZ/aFsoa2e LqzXawyhjn43TyBGP57H60exRTvjlnalx4U6l65zEYiHUo30VmzFI9hqrhWND0mZ dPyoJ/ZpJ7ZXagOMp+IDsIVduD+9/MtUyd59KUgMiBgRYvY+dC/ALo0RrE6tXxFP 3VUvyrFq0KldMLNxRZF6tycLpalYowss -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:30 2025 by rpki-client