$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: d9MATkvVFx5twIjhbzMzFidOTrcd9n9tCIBvnraLYMI= Subject key identifier: AA:E2:58:BF:BF:88:40:1E:83:EB:DB:62:6C:A5:69:A5:32:E3:B7:10 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C71 Signing time: Fri 22 Aug 2025 18:33:02 +0000 Manifest this update: Fri 22 Aug 2025 18:33:01 +0000 Manifest next update: Fri 29 Aug 2025 18:33:01 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: FP9PVVDGyBgsH1xro0JZu4iRkbv7LzNjupKFJj9XRJs=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Aug 22 18:33:01 2025 GMT Not After : Aug 29 18:33:01 2025 GMT Subject: CN=68a8b7dd-9400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:c4:4c:32:a0:5e:e1:a5:f5:26:9d:68:7c: db:17:c1:20:c1:b1:14:60:f9:05:8c:04:7f:00:d1: c2:62:24:70:b8:d7:60:2f:40:81:d5:75:c2:ce:ef: d2:05:f7:98:49:ae:71:f7:2d:d9:68:b4:00:66:38: 3f:72:37:95:1d:91:28:8b:cc:f3:80:60:5f:96:1c: da:a2:d0:d0:39:a4:a2:b7:61:40:ca:a1:13:8f:2c: 9d:83:e3:ac:07:53:72:3a:b7:a5:cf:f5:cf:74:d8: 67:5f:ba:64:73:49:f8:21:5e:15:61:6d:89:09:be: ba:a8:27:d5:3a:10:9b:79:56:4b:6f:6b:04:8c:6b: 58:9a:c1:f2:36:5d:15:08:7f:d7:14:67:37:1b:34: f7:8a:ec:40:10:4c:62:42:ed:11:91:99:a9:d5:6f: 33:7a:e3:b0:99:81:fe:c3:43:15:7e:fd:a4:d0:be: a4:26:a1:09:1d:3e:55:a8:c8:56:74:76:1b:5a:35: 2b:7b:b1:f8:58:d3:b5:6f:0f:68:0f:82:4a:7a:f8: bf:c7:af:c1:23:0d:ac:b8:b4:80:eb:f2:20:b9:22: 0b:28:70:17:df:d5:7d:a7:ec:24:0b:b3:46:4c:48: 71:3e:f9:7e:2f:c7:ca:1d:e7:74:8a:9e:fe:7c:cd: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:58:BF:BF:88:40:1E:83:EB:DB:62:6C:A5:69:A5:32:E3:B7:10 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:95:23:b8:1b:ca:3a:d8:4f:78:e7:0e:9d:da:8a:86:d4:35: 06:5c:ed:fb:cf:dd:8e:11:18:c5:b2:be:c2:b8:10:8e:12:f9: 62:9c:5a:43:3c:b8:dc:6f:e2:4a:30:45:82:75:7d:c8:5d:b3: c5:ef:f5:1c:41:6e:05:87:41:74:3a:45:1a:59:1d:f2:24:18: 54:a7:74:f2:3c:8b:d6:b1:48:69:2f:8e:16:d8:09:cf:83:98: 11:bd:86:d9:ad:e8:02:9f:5f:bd:d0:ed:42:0c:ab:3c:2f:81: 45:dd:79:cb:c3:d6:a9:17:07:ac:b4:8e:2d:db:d1:8a:68:21: e0:26:37:c7:65:3a:00:bc:97:33:cc:ad:a4:86:f1:c7:b5:b5: dc:6b:f3:65:ac:00:4b:9a:be:60:54:6e:f3:e1:fd:33:42:49: a4:47:0d:23:29:3e:c6:0c:cc:43:55:5a:f2:d6:88:f0:e4:1f: 15:84:58:b1:c6:f7:c1:a3:85:e6:02:85:b5:3f:ea:ee:87:b6: 40:d0:5b:43:c2:ad:27:18:64:20:f1:1a:bf:6b:b1:8b:69:f5: fb:b4:54:ee:d1:23:52:b7:4f:33:64:b0:fb:3d:b7:e9:12:42: 10:09:d0:6d:47:5f:eb:93:a7:d9:d7:3d:1b:6b:eb:e4:17:0c: 29:36:e2:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwODIyMTgzMzAxWhcNMjUwODI5MTgzMzAxWjAYMRYwFAYD VQQDEw02OGE4YjdkZC05NDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbvETDKgXuGl9SadaHzbF8EgwbEUYPkFjAR/ANHCYiRwuNdgL0CB1XXCzu/S BfeYSa5x9y3ZaLQAZjg/cjeVHZEoi8zzgGBflhzaotDQOaSit2FAyqETjyydg+Os B1NyOrelz/XPdNhnX7pkc0n4IV4VYW2JCb66qCfVOhCbeVZLb2sEjGtYmsHyNl0V CH/XFGc3GzT3iuxAEExiQu0RkZmp1W8zeuOwmYH+w0MVfv2k0L6kJqEJHT5VqMhW dHYbWjUre7H4WNO1bw9oD4JKevi/x6/BIw2suLSA6/IguSILKHAX39V9p+wkC7NG TEhxPvl+L8fKHed0ip7+fM37vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKriWL+/ iEAeg+vbYmylaaUy47cQMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDlSO4G8o62E945w6d2oqG1DUGXO37z92OERjFsr7CuBCOEvlinFpD PLjcb+JKMEWCdX3IXbPF7/UcQW4Fh0F0OkUaWR3yJBhUp3TyPIvWsUhpL44W2AnP g5gRvYbZregCn1+90O1CDKs8L4FF3XnLw9apFwestI4t29GKaCHgJjfHZToAvJcz zK2khvHHtbXca/NlrABLmr5gVG7z4f0zQkmkRw0jKT7GDMxDVVry1ojw5B8VhFix xvfBo4XmAoW1P+ruh7ZA0FtDwq0nGGQg8Rq/a7GLafX7tFTu0SNSt08zZLD7Pbfp EkIQCdBtR1/rk6fZ1z0ba+vkFwwpNuJY -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:56 2025 by rpki-client