$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: Nlys/6pNP1GZRBtDAqXXB/sg39aIdCB6zA8pggqd960= Subject key identifier: 87:F4:11:14:BE:C8:83:48:4F:58:5B:DA:C0:99:C7:16:25:BE:50:3A Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 06:59:52 +0000 Manifest this update: Sat 23 Aug 2025 06:59:52 +0000 Manifest next update: Sat 30 Aug 2025 06:59:52 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: OlIE4XF5doRYed767QS7Sx+tItf+f8ZRiyAt/YEXN8Q=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: Aug 23 06:59:52 2025 GMT Not After : Aug 30 06:59:52 2025 GMT Subject: CN=68a966e8-de6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:f0:ff:5f:f9:71:ac:91:74:1d:f3:7d:46: 03:f4:cd:8c:52:f5:d0:3a:9a:09:1a:e8:9b:66:c9: 8f:c6:72:ae:43:13:97:0b:f1:fc:9e:ae:51:57:5d: 7a:89:42:37:ff:96:36:dd:0f:f8:33:d0:6e:9c:f6: f8:10:bc:21:76:22:a2:49:b8:55:6b:18:76:df:90: 3a:25:22:87:66:a9:f6:f2:24:43:30:1a:78:d8:ea: 0e:92:e5:0e:2b:4c:8d:ee:ac:e1:b6:c5:1d:6e:48: fc:ce:f8:a1:f5:29:f9:f3:8e:15:b9:ae:5a:c1:9d: d9:42:98:8d:45:a6:de:c8:04:93:8b:e9:15:4b:0d: 09:4d:da:44:14:8e:bf:ad:a7:74:61:78:51:e8:e1: fd:37:6f:0a:f5:46:9e:d3:8b:85:33:4f:81:88:69: b2:33:88:36:93:87:32:75:52:77:df:1d:d2:93:94: 3f:c8:60:23:33:29:7a:bf:1e:20:f5:ce:b9:8d:c7: 71:70:37:fd:c2:71:99:77:c4:1f:89:aa:73:9c:c8: f1:27:a8:37:6a:08:5c:94:0f:0a:50:6f:b6:df:2c: cb:eb:84:ce:3b:49:55:27:ee:d0:b9:0d:66:83:07: 5b:3f:ac:5c:e4:6d:60:33:3d:77:ba:d7:bd:3a:af: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:11:14:BE:C8:83:48:4F:58:5B:DA:C0:99:C7:16:25:BE:50:3A X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:33:36:ad:fb:5b:2e:79:a4:fb:3d:39:c5:29:fa:93:c6:2a: c9:d3:0c:15:2b:81:6f:3c:66:42:f4:2d:bf:f5:e9:05:78:96: b3:09:9b:fc:e4:93:18:04:6e:d7:90:e4:b0:fc:b8:2b:13:17: 05:46:45:50:5e:8d:fc:d5:87:3e:91:db:cb:79:e1:26:0f:ce: 34:f1:4d:42:1d:81:23:a7:f0:9e:67:55:f4:37:0e:e9:0a:8d: 04:53:9e:5d:70:46:26:77:5d:c4:a1:70:58:e8:a7:82:fa:10: 38:7d:dc:32:f7:27:4b:e5:6c:b8:08:2d:10:93:6d:61:cc:2d: cf:4a:e8:eb:df:de:01:31:c4:1f:9d:f7:6b:b2:1f:87:00:9c: 35:5e:94:62:ae:46:ef:14:ef:5f:41:c3:d7:05:2e:10:36:0b: 9c:02:0c:fc:38:e2:76:71:d8:c2:cc:c2:e0:5e:5d:27:81:12: 55:56:52:bb:aa:c9:b9:e3:fa:0d:43:b1:ee:a5:09:8f:0a:21: 48:ad:20:fa:b5:c3:75:32:b2:e4:4d:fb:c3:88:3c:9d:6a:24: 77:4c:6b:d7:40:fb:34:64:85:06:29:fc:82:a4:43:d3:13:d7: c7:95:51:7a:b4:da:b7:89:b9:d5:1e:5e:b1:8c:54:81:17:b7: 49:c8:c9:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEzMjczM0Q2NTQw OTFFM0QyQjAeFw0yNTA4MjMwNjU5NTJaFw0yNTA4MzAwNjU5NTJaMBgxFjAUBgNV BAMTDTY4YTk2NmU4LWRlNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuuvD/X/lxrJF0HfN9RgP0zYxS9dA6mgka6JtmyY/Gcq5DE5cL8fyerlFXXXqJ Qjf/ljbdD/gz0G6c9vgQvCF2IqJJuFVrGHbfkDolIodmqfbyJEMwGnjY6g6S5Q4r TI3urOG2xR1uSPzO+KH1KfnzjhW5rlrBndlCmI1Fpt7IBJOL6RVLDQlN2kQUjr+t p3RheFHo4f03bwr1Rp7Ti4UzT4GIabIziDaThzJ1UnffHdKTlD/IYCMzKXq/HiD1 zrmNx3FwN/3CcZl3xB+JqnOcyPEnqDdqCFyUDwpQb7bfLMvrhM47SVUn7tC5DWaD B1s/rFzkbWAzPXe61706r1lFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh/QRFL7I g0hPWFvawJnHFiW+UDowHwYDVR0jBBgwFoAUvotHM7Guikc2t+kTJzPWVAkePSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzdCOEJENkNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdm90SE03R3Vpa2MydC1rVEp6UFdWQWtlUFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtj MnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEszNq37Wy55pPs9OcUp+pPGKsnTDBUrgW88ZkL0Lb/16QV4lrMJm/zk kxgEbteQ5LD8uCsTFwVGRVBejfzVhz6R28t54SYPzjTxTUIdgSOn8J5nVfQ3DukK jQRTnl1wRiZ3XcShcFjop4L6EDh93DL3J0vlbLgILRCTbWHMLc9K6Ovf3gExxB+d 92uyH4cAnDVelGKuRu8U719Bw9cFLhA2C5wCDPw44nZx2MLMwuBeXSeBElVWUruq ybnj+g1Dse6lCY8KIUitIPq1w3UysuRN+8OIPJ1qJHdMa9dA+zRkhQYp/IKkQ9MT 18eVUXq02reJudUeXrGMVIEXt0nIyZQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:20 2025 by rpki-client