$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: fa8Sd3/OsXbCJVQ6BfxipITvDu0IoEpWk34U150YR54= Subject key identifier: F3:41:31:EF:13:BD:71:5C:25:E3:9A:6D:D7:D9:4A:EB:24:3E:71:46 Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08B7 Signing time: Fri 04 Jul 2025 20:51:26 +0000 Manifest this update: Fri 04 Jul 2025 20:51:26 +0000 Manifest next update: Fri 11 Jul 2025 20:51:26 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: ubXJaoEdvtiSfKAnhAF02UXaTurSZIAfuHRIhcP/z68=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jul 4 20:51:26 2025 GMT Not After : Jul 11 20:51:26 2025 GMT Subject: CN=68683ece-5052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:5a:5f:b7:0e:91:0e:e0:ba:bd:f7:c7:ec: 2c:dc:a4:42:3a:8f:b7:08:40:1e:08:b8:7e:35:b8: da:b3:f4:9f:ae:d9:74:28:8c:df:76:91:b2:65:1a: 60:c3:f8:f2:16:e3:cf:fe:cf:c7:8f:a6:38:9d:45: f5:55:ee:f5:fd:18:0a:b1:f3:25:ae:a6:24:0c:fa: a4:4f:2e:84:84:4d:39:af:08:2c:11:8f:6a:43:fa: 62:a6:24:80:7b:dd:37:1f:e0:8c:7d:76:87:7b:9b: 43:d9:b4:a9:13:04:8b:5b:5f:64:60:9e:0b:84:fa: a6:e0:c8:f7:9d:04:6b:a0:f8:04:0d:61:c9:17:ec: 57:c2:11:cf:61:36:80:fe:e5:be:01:a3:02:01:a3: 4e:2a:ef:76:d9:90:1f:f3:56:44:01:aa:c6:b6:8b: 2d:f1:50:ef:22:ad:4c:e1:6c:fe:e2:41:df:aa:2c: 11:d0:16:cf:9c:66:7c:f7:3a:8d:40:56:01:ac:0b: 38:c1:1a:88:2d:d1:00:32:01:29:14:76:72:22:98: f0:f8:21:dc:ca:f4:1c:a8:92:58:1b:c0:cf:5b:1b: d3:ae:ca:16:fa:e8:bd:25:d1:8e:04:1f:e6:7e:e8: 40:f3:e4:9f:40:84:16:f8:e3:48:4b:b9:7c:59:36: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:41:31:EF:13:BD:71:5C:25:E3:9A:6D:D7:D9:4A:EB:24:3E:71:46 X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d9:b1:a3:8f:76:7e:39:20:e9:60:10:5b:ee:2e:1d:65:7e: 46:12:f1:f8:22:6a:ff:f5:c2:22:a0:b0:0b:9e:99:1c:7a:dc: b4:88:93:bc:48:08:28:00:71:83:36:8a:e8:c3:0d:be:27:6b: 8e:e0:70:77:0f:23:5c:02:b2:55:9b:13:30:5e:37:69:8c:f2: 75:d8:9b:43:cf:8e:3f:68:71:e4:ed:c9:bb:71:b5:88:01:6c: 3b:86:41:74:a9:1c:0a:38:64:70:df:1f:32:bb:1e:4b:bd:b8: 4b:bf:55:97:94:e4:7d:06:8d:32:c2:44:43:61:eb:75:13:28: 9f:bf:53:ec:d7:6c:9f:59:77:cf:c4:f0:a3:19:94:aa:43:c3: db:a8:29:ae:76:7c:02:90:9e:7e:b1:9b:36:74:80:6d:08:1f: e9:d9:8f:70:09:b7:2f:f5:f7:10:af:0f:4a:19:1f:64:20:0d: cd:65:5c:8d:aa:c0:7d:00:af:38:56:b3:61:98:ee:9f:93:34: d0:78:05:2d:f8:c9:62:8e:29:d7:39:92:1f:51:ac:83:8e:cb: 4b:ad:c2:e5:bb:11:57:6f:68:b9:08:39:5f:96:1a:06:62:15: 79:e8:7b:ea:f0:61:4b:56:09:5c:30:c0:49:8f:6b:52:a2:57: 46:7e:fd:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwNzA0MjA1MTI2WhcNMjUwNzExMjA1MTI2WjAYMRYwFAYD VQQDEw02ODY4M2VjZS01MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyt5aX7cOkQ7gur33x+ws3KRCOo+3CEAeCLh+Nbjas/Sfrtl0KIzfdpGyZRpg w/jyFuPP/s/Hj6Y4nUX1Ve71/RgKsfMlrqYkDPqkTy6EhE05rwgsEY9qQ/pipiSA e903H+CMfXaHe5tD2bSpEwSLW19kYJ4LhPqm4Mj3nQRroPgEDWHJF+xXwhHPYTaA /uW+AaMCAaNOKu922ZAf81ZEAarGtost8VDvIq1M4Wz+4kHfqiwR0BbPnGZ89zqN QFYBrAs4wRqILdEAMgEpFHZyIpjw+CHcyvQcqJJYG8DPWxvTrsoW+ui9JdGOBB/m fuhA8+SfQIQW+ONIS7l8WTY7VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNBMe8T vXFcJeOabdfZSuskPnFGMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd2bGjj3Z+OSDpYBBb7i4dZX5GEvH4Imr/9cIioLALnpkcety0iJO8 SAgoAHGDNoroww2+J2uO4HB3DyNcArJVmxMwXjdpjPJ12JtDz44/aHHk7cm7cbWI AWw7hkF0qRwKOGRw3x8yux5LvbhLv1WXlOR9Bo0ywkRDYet1Eyifv1Ps12yfWXfP xPCjGZSqQ8PbqCmudnwCkJ5+sZs2dIBtCB/p2Y9wCbcv9fcQrw9KGR9kIA3NZVyN qsB9AK84VrNhmO6fkzTQeAUt+MlijinXOZIfUayDjstLrcLluxFXb2i5CDlflhoG YhV56Hvq8GFLVglcMMBJj2tSoldGfv2G -----END CERTIFICATE-----Generated at Fri Jul 4 22:07:09 2025 by rpki-client