$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: gAcxjJogUaxTrNmfoBk5xeXALGAaTmhwXDrPMFvM9+k= Subject key identifier: 55:FF:BA:50:4F:10:7A:7B:E6:89:46:CA:BE:89:DD:D9:5F:3C:C5:E1 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 032F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 032B Signing time: Sat 23 Aug 2025 01:21:58 +0000 Manifest this update: Sat 23 Aug 2025 01:21:57 +0000 Manifest next update: Sat 30 Aug 2025 01:21:57 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: qANwseF+2cw09TBTwd/4TSSaK7zdOmGU67FcbxN+3+s=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 815 (0x32f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Aug 23 01:21:57 2025 GMT Not After : Aug 30 01:21:57 2025 GMT Subject: CN=68a917b6-703b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:41:01:8b:a8:e0:34:e5:9d:aa:e9:c2:e2: fd:cf:c9:6a:95:fd:d7:16:04:e7:3a:0e:f5:0c:89: d6:19:b8:79:f8:38:f7:ce:45:52:8c:d3:5c:85:3b: 57:68:96:27:c7:4b:bd:90:d4:65:18:f0:54:b5:fc: b7:ed:50:29:fa:1e:f0:1f:22:da:39:0a:07:1e:e2: 1f:e1:02:1a:67:16:de:d8:71:e0:3e:8f:18:15:3c: be:a6:fa:e6:ab:6e:01:24:87:b3:2e:65:ff:d0:a7: 89:8b:f0:64:46:1a:c6:15:8b:ac:fd:82:f5:6c:d6: 20:98:9c:db:34:02:f2:7e:9c:39:5c:69:aa:9c:88: c1:24:1f:24:bb:8b:2b:a0:13:8b:7c:74:55:fe:d0: d0:fe:3e:d4:9b:81:95:59:c3:fd:aa:3c:9b:25:dc: 88:b3:b7:de:81:2a:d7:e4:b1:33:cc:c4:ec:c2:fe: f6:67:f1:c2:34:5b:6f:37:4a:c4:5f:1b:6d:e9:57: e5:5c:12:55:49:b8:f3:fc:08:d8:21:d5:4a:ce:3c: 6d:53:99:43:0d:b7:b4:e5:94:37:da:2d:b4:3c:eb: 5f:d8:d7:49:22:c4:54:49:e2:9a:45:54:96:b2:86: 4c:e7:d3:33:88:3f:d2:11:40:cc:9e:53:ed:82:2f: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FF:BA:50:4F:10:7A:7B:E6:89:46:CA:BE:89:DD:D9:5F:3C:C5:E1 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:ae:e5:30:05:0b:ec:40:f5:51:5b:d3:6d:14:3b:c6:df:01: f1:81:70:03:da:d2:9b:04:4e:66:49:92:e4:3c:a6:55:cd:da: 8f:f4:da:90:a5:20:2f:7b:3a:63:94:a0:30:00:a3:26:b1:5b: d0:f5:d9:d9:d2:01:aa:82:aa:29:58:66:fd:d7:07:f3:ff:3b: 8e:7d:a8:6b:b8:97:4b:55:e7:cc:cb:61:b4:24:1d:47:57:e8: 01:84:1a:66:e3:67:06:ec:05:9f:4f:fd:c4:3f:a1:67:d8:a2: be:3c:01:29:e6:b0:61:d9:e5:52:5b:ea:de:3f:50:ac:c9:9b: b4:c5:cc:ef:a8:55:a4:fd:94:b1:d8:ff:e0:14:ac:5f:42:3c: 31:2d:4e:77:c9:ac:b3:d5:1c:0f:bc:b1:d7:e7:b3:20:fc:b3: 91:36:01:b7:71:c6:06:69:3a:a3:a6:51:5a:a2:38:b6:69:63: 2a:5e:ad:b2:43:27:bb:3e:be:0f:eb:f5:07:f6:b6:47:e9:13: 59:70:55:83:91:0b:a7:17:07:1e:f6:66:27:ee:80:ec:d6:aa: c2:d4:b7:63:3a:2b:8b:ab:24:4e:54:28:01:9d:65:60:52:1f: c7:a3:21:39:5b:ca:67:ef:cc:16:67:7b:75:e2:cc:67:f2:62: db:97:3e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUwODIzMDEyMTU3WhcNMjUwODMwMDEyMTU3WjAYMRYwFAYD VQQDEw02OGE5MTdiNi03MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PRBAYuo4DTlnarpwuL9z8lqlf3XFgTnOg71DInWGbh5+Dj3zkVSjNNchTtX aJYnx0u9kNRlGPBUtfy37VAp+h7wHyLaOQoHHuIf4QIaZxbe2HHgPo8YFTy+pvrm q24BJIezLmX/0KeJi/BkRhrGFYus/YL1bNYgmJzbNALyfpw5XGmqnIjBJB8ku4sr oBOLfHRV/tDQ/j7Um4GVWcP9qjybJdyIs7fegSrX5LEzzMTswv72Z/HCNFtvN0rE Xxtt6VflXBJVSbjz/AjYIdVKzjxtU5lDDbe05ZQ32i20POtf2NdJIsRUSeKaRVSW soZM59MziD/SEUDMnlPtgi+SKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFX/ulBP EHp75olGyr6J3dlfPMXhMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSruUwBQvsQPVRW9NtFDvG3wHxgXAD2tKbBE5mSZLkPKZVzdqP9NqQ pSAvezpjlKAwAKMmsVvQ9dnZ0gGqgqopWGb91wfz/zuOfahruJdLVefMy2G0JB1H V+gBhBpm42cG7AWfT/3EP6Fn2KK+PAEp5rBh2eVSW+reP1CsyZu0xczvqFWk/ZSx 2P/gFKxfQjwxLU53yayz1RwPvLHX57Mg/LORNgG3ccYGaTqjplFaoji2aWMqXq2y Qye7Pr4P6/UH9rZH6RNZcFWDkQunFwce9mYn7oDs1qrC1LdjOiuLqyROVCgBnWVg Uh/HoyE5W8pn78wWZ3t14sxn8mLblz4h -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:47 2025 by rpki-client