$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: s4+pgmTMZTboHICoUsD/7ToXaolE6KQagYtY+Ku2V4U= Subject key identifier: 3C:D0:71:07:94:0A:8D:9B:72:B9:2E:B6:A6:7F:D8:7F:F4:9E:9B:94 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0345 Signing time: Sat 23 Aug 2025 01:16:51 +0000 Manifest this update: Sat 23 Aug 2025 01:16:50 +0000 Manifest next update: Sat 30 Aug 2025 01:16:50 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: n/OopoyWmyNN9yHFNvrV7fl1wwrdM6wHA6iPJs9zdLA=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Aug 23 01:16:50 2025 GMT Not After : Aug 30 01:16:50 2025 GMT Subject: CN=68a91682-4a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:b9:a4:23:09:78:a0:80:cb:17:ec:01:3a: f0:f9:e1:13:58:47:f5:ce:9d:e6:ab:72:5e:81:6f: 1e:4d:89:f6:df:ed:13:d4:d9:75:07:7c:2a:b1:3b: da:e6:c7:4d:98:6e:4b:c7:00:15:6e:b1:33:36:2e: bc:69:f7:9e:5c:28:f5:2f:b0:b6:e7:cb:aa:63:15: 0c:1b:72:4c:c8:31:a9:a3:fd:b1:d6:d5:05:4e:7f: e8:cf:68:1b:e2:53:ad:bb:5e:c6:85:25:2c:17:79: 4f:54:0b:e4:10:ca:86:0e:86:a5:48:c0:a9:03:47: 5d:64:1c:c7:3f:8d:1f:ef:b5:dc:0e:be:c1:13:ad: 30:52:d4:46:bc:51:c3:12:cb:c0:99:9a:ac:ec:24: 71:0e:27:81:ed:e7:74:23:93:ec:d1:86:78:63:93: 1a:07:c9:78:72:15:05:68:bf:13:0d:3c:a8:1a:db: 7b:ef:c2:86:8c:19:4a:1f:7c:f9:85:74:0e:34:4c: 64:5f:b8:bf:6f:ac:e6:54:8c:a5:05:93:c8:8d:62: 90:53:0c:69:1e:21:af:6e:dc:a7:63:6a:75:5f:53: 3c:f5:10:85:25:19:9b:d9:ab:00:52:7e:16:73:7b: d8:28:9a:78:a8:60:ec:af:e0:38:fd:bc:3f:e1:0a: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D0:71:07:94:0A:8D:9B:72:B9:2E:B6:A6:7F:D8:7F:F4:9E:9B:94 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:aa:38:11:9b:80:17:05:a7:db:89:28:82:42:9f:66:72:1b: a5:0a:b7:f5:b2:87:b9:0f:92:da:e6:e4:82:d7:60:6b:06:3c: 8a:74:b3:ac:22:c5:bc:7c:24:8b:00:fa:46:69:95:64:8f:31: 52:08:a5:f1:73:0f:97:ba:30:5b:46:d0:8b:9c:51:dc:20:25: 38:20:43:4d:d7:c1:5c:82:39:0a:4b:39:57:31:97:1d:28:05: 88:6e:98:d5:d1:c2:66:da:e6:1d:2a:6f:ec:41:1e:64:43:72: 2c:08:f4:d4:7e:b8:d2:9b:00:23:ea:46:f5:f0:c9:c2:3d:2d: 64:c6:23:c4:b0:a8:af:41:66:04:18:81:ad:77:4f:fa:cb:79: 43:a8:eb:f3:44:c4:9e:cf:31:66:62:47:7a:59:5a:ec:93:93: f0:7e:e5:34:7e:39:88:76:80:58:ea:97:be:a0:db:33:6a:41: c0:5b:da:0a:b9:a3:e1:c8:03:74:a2:38:bd:a3:b3:8b:8c:78: 08:ae:fe:da:95:8c:3b:5f:55:ff:9f:e3:a3:cd:ae:c6:62:6e: 3d:12:da:6b:83:b2:e3:22:8c:7a:47:70:d9:15:90:80:33:20: b9:28:f4:5b:d2:be:44:8c:ef:3c:e8:d7:39:a8:02:59:9b:51: 1a:58:ec:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwODIzMDExNjUwWhcNMjUwODMwMDExNjUwWjAYMRYwFAYD VQQDEw02OGE5MTY4Mi00YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArya5pCMJeKCAyxfsATrw+eETWEf1zp3mq3JegW8eTYn23+0T1Nl1B3wqsTva 5sdNmG5LxwAVbrEzNi68afeeXCj1L7C258uqYxUMG3JMyDGpo/2x1tUFTn/oz2gb 4lOtu17GhSUsF3lPVAvkEMqGDoalSMCpA0ddZBzHP40f77XcDr7BE60wUtRGvFHD EsvAmZqs7CRxDieB7ed0I5Ps0YZ4Y5MaB8l4chUFaL8TDTyoGtt778KGjBlKH3z5 hXQONExkX7i/b6zmVIylBZPIjWKQUwxpHiGvbtynY2p1X1M89RCFJRmb2asAUn4W c3vYKJp4qGDsr+A4/bw/4QqFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzQcQeU Co2bcrkutqZ/2H/0npuUMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMqjgRm4AXBafbiSiCQp9mchulCrf1soe5D5La5uSC12BrBjyKdLOs IsW8fCSLAPpGaZVkjzFSCKXxcw+XujBbRtCLnFHcICU4IENN18FcgjkKSzlXMZcd KAWIbpjV0cJm2uYdKm/sQR5kQ3IsCPTUfrjSmwAj6kb18MnCPS1kxiPEsKivQWYE GIGtd0/6y3lDqOvzRMSezzFmYkd6WVrsk5PwfuU0fjmIdoBY6pe+oNszakHAW9oK uaPhyAN0oji9o7OLjHgIrv7alYw7X1X/n+Ojza7GYm49Etprg7LjIox6R3DZFZCA MyC5KPRb0r5EjO886Nc5qAJZm1EaWOzG -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:02 2025 by rpki-client