$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: 9Mmc4NybWmUXLTo4If1uPNG1qdczSn9sGPPI1lh8n44= Subject key identifier: 35:A4:78:D5:12:E4:A2:B8:57:58:D0:63:E3:8B:8A:7D:62:5F:D7:EE Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 0135 Signing time: Sat 23 Aug 2025 04:42:24 +0000 Manifest this update: Sat 23 Aug 2025 04:42:23 +0000 Manifest next update: Sat 30 Aug 2025 04:42:23 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: CXBPALZFjeP0QZlUkpYoKKfQy3bah9k3vXm+tL+7tpk=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: y81/Bm4goLn9P37Big7/CzEV9a1Uz1uENuSDaA4pS5U=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: MOWmFDpIkvE9ZXw3XjwL/Gz8uOZnXK7NosAmPb+jAAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Aug 23 04:42:23 2025 GMT Not After : Aug 30 04:42:23 2025 GMT Subject: CN=68a946af-69b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:05:22:90:64:00:2c:cc:82:60:06:a8:93: d7:e4:f0:95:bb:13:6d:dc:40:41:6d:72:48:59:9a: cf:ae:d6:48:59:04:6d:42:b7:f0:5c:41:df:83:dc: 19:58:5a:59:5f:dd:35:3a:4c:42:84:02:37:40:61: 25:23:74:0f:e9:0e:8a:63:87:24:b5:92:9a:be:08: c5:55:cf:f0:1d:61:a7:e4:6b:a3:db:05:0c:3c:62: 9c:79:89:4b:83:d1:51:db:2c:4c:5e:fd:bd:75:02: 02:05:c3:0e:1a:5f:5b:04:f1:b9:63:d6:dc:95:3b: 1c:c7:42:9a:25:2e:5d:e4:da:0f:45:18:fb:7d:30: 2e:c5:77:28:ea:cc:02:cf:da:ea:ae:8b:08:09:eb: 77:68:ff:1e:81:81:9c:c3:3b:05:d0:28:bf:cd:64: 49:df:69:28:aa:f4:c6:f2:7c:76:29:81:cd:d0:48: 93:86:c6:ef:49:d0:fe:c0:07:95:3d:28:7b:85:a5: 6f:5a:80:b7:6f:1d:1b:05:92:7a:e7:05:9e:b8:73: d7:9b:30:e2:da:22:53:e6:b4:b4:a3:40:71:8c:c1: c2:75:0c:53:47:4f:aa:31:f2:0d:18:33:75:59:77: 39:82:86:26:8e:78:76:e4:a3:cb:cb:03:1f:a4:1d: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:78:D5:12:E4:A2:B8:57:58:D0:63:E3:8B:8A:7D:62:5F:D7:EE X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:a9:9b:48:8d:b8:7e:96:51:8b:22:2d:11:a5:de:bf:a2: 9a:93:55:5a:47:02:5f:34:62:69:17:a9:78:02:64:9d:ae:1c: 5f:e0:f4:33:4f:8e:7c:a4:3b:dd:7d:c8:36:17:82:06:9d:7f: 14:b5:44:11:74:32:e1:61:22:a4:c8:9e:1b:19:0a:90:05:46: 89:d0:43:f4:13:93:8e:55:ec:03:1b:28:7a:a1:e6:64:dc:d7: 1a:a2:66:9a:4c:d5:a7:8d:21:05:3f:56:db:33:24:2e:e5:12: 32:5b:86:33:4f:e1:af:f1:6d:66:68:b0:79:1b:c2:8b:f7:63: 58:cc:ce:4f:51:a8:22:6d:b2:7c:ac:be:11:eb:2a:b9:62:cd: a2:14:7b:c5:df:92:71:5a:18:d0:fa:5f:8c:f0:0f:7f:5b:24: aa:6d:90:41:9c:a0:60:63:b6:1d:5e:58:9e:6d:75:af:da:6a: 98:10:c7:50:cd:67:17:5e:e4:94:9e:aa:fc:d7:c9:03:54:f3: 1f:1d:b6:86:4a:d3:01:07:32:e8:5c:7b:69:9e:3f:e6:46:28: 73:9c:4e:c0:5f:22:69:7a:93:c8:3c:da:fc:0b:1b:5c:9f:bc: 8d:ed:06:6e:d0:bb:16:8d:03:16:23:76:24:6d:08:52:b3:90: 59:35:e2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwODIzMDQ0MjIzWhcNMjUwODMwMDQ0MjIzWjAYMRYwFAYD VQQDEw02OGE5NDZhZi02OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNYFIpBkACzMgmAGqJPX5PCVuxNt3EBBbXJIWZrPrtZIWQRtQrfwXEHfg9wZ WFpZX901OkxChAI3QGElI3QP6Q6KY4cktZKavgjFVc/wHWGn5Guj2wUMPGKceYlL g9FR2yxMXv29dQICBcMOGl9bBPG5Y9bclTscx0KaJS5d5NoPRRj7fTAuxXco6swC z9rqrosICet3aP8egYGcwzsF0Ci/zWRJ32koqvTG8nx2KYHN0EiThsbvSdD+wAeV PSh7haVvWoC3bx0bBZJ65wWeuHPXmzDi2iJT5rS0o0BxjMHCdQxTR0+qMfINGDN1 WXc5goYmjnh25KPLywMfpB22twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWkeNUS 5KK4V1jQY+OLin1iX9fuMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh26mbSI24fpZRiyItEaXev6Kak1VaRwJfNGJpF6l4AmSdrhxf4PQz T458pDvdfcg2F4IGnX8UtUQRdDLhYSKkyJ4bGQqQBUaJ0EP0E5OOVewDGyh6oeZk 3NcaomaaTNWnjSEFP1bbMyQu5RIyW4YzT+Gv8W1maLB5G8KL92NYzM5PUagibbJ8 rL4R6yq5Ys2iFHvF35JxWhjQ+l+M8A9/WySqbZBBnKBgY7YdXliebXWv2mqYEMdQ zWcXXuSUnqr818kDVPMfHbaGStMBBzLoXHtpnj/mRihznE7AXyJpepPIPNr8Cxtc n7yN7QZu0LsWjQMWI3YkbQhSs5BZNeLR -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:08 2025 by rpki-client