$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: CSxsrhR++alj5WyioWT9AQSX6SedhUXaz861s5K03NI= Subject key identifier: 4E:B7:DA:19:D4:AC:C5:25:39:CA:CC:3C:5D:B7:4E:99:E1:99:E3:78 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 06CD Signing time: Fri 22 Aug 2025 22:12:57 +0000 Manifest this update: Fri 22 Aug 2025 22:12:56 +0000 Manifest next update: Fri 29 Aug 2025 22:12:56 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: VJyQr4JQd4i6NJ3zJVuna73ky9LJ3L5cvS093sGY8i8=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: oHlo3Sofjys47IZ2Ei8IuoMAeL8C2VUTJUZO9aDUVcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Aug 22 22:12:56 2025 GMT Not After : Aug 29 22:12:56 2025 GMT Subject: CN=68a8eb69-1b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:4c:5b:40:0a:2f:06:d4:31:00:e6:7b:79: fc:4e:ca:fc:a9:07:d7:63:df:06:92:1b:1d:97:35: 26:20:4a:4a:70:b9:c7:03:29:41:2c:12:c7:f2:f9: da:d8:4f:9e:9a:4b:d4:98:b7:3c:96:4d:da:c5:9e: 97:2f:20:a0:fb:e9:5b:d0:a8:e0:fc:1d:d3:6a:fc: 73:f2:ca:ce:33:1c:0e:d6:24:7d:78:cb:33:20:45: 91:51:65:98:52:87:c7:85:41:76:3e:e6:8c:87:46: d0:87:21:16:b2:9d:82:88:eb:56:64:56:82:84:05: a1:78:a8:de:bb:fe:a8:f5:cc:02:ec:92:78:cb:5f: 88:a8:8b:64:c4:d5:c2:e3:ac:4d:3c:38:11:5a:63: 93:fa:96:d8:ae:1a:54:85:66:ca:ce:2b:ca:62:24: fe:a6:bc:eb:83:18:08:71:07:4c:39:25:2e:0e:b1: 75:42:33:5c:3a:dd:63:98:96:a1:27:f0:06:21:19: 0d:59:b7:45:b4:85:01:bc:a1:8b:d9:e1:3d:d9:77: f1:75:a6:c3:2e:9d:1d:2c:14:3a:99:0e:5a:c3:7c: 73:6b:7b:2e:25:4b:82:46:bb:de:5e:ca:ed:d3:21: 27:87:c6:ac:15:a3:84:76:36:8f:9b:95:f9:d1:58: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:DA:19:D4:AC:C5:25:39:CA:CC:3C:5D:B7:4E:99:E1:99:E3:78 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:1b:04:2a:69:93:de:b1:46:0a:fc:ed:d0:49:0c:2b:1a: e1:b1:56:21:dc:10:5e:ca:a7:f5:99:a1:74:fe:a8:0e:03:13: 17:93:16:d2:b2:66:35:cc:9e:83:3c:f2:7a:80:bf:28:66:88: 1b:40:60:57:c8:27:45:4d:ce:8d:00:18:dc:d8:65:b4:36:67: 66:21:ad:85:be:4d:50:02:6d:a2:62:59:c2:9d:20:65:83:e8: 21:a7:b1:50:f4:5d:73:65:90:84:b9:1b:63:6e:37:72:fd:ff: 1d:7d:40:c9:15:a5:b7:20:5e:9c:28:96:60:36:a3:14:74:90: 6f:fd:57:a0:6d:53:a8:9e:dc:44:fd:09:b5:2c:a2:6b:81:e9: d9:86:47:40:66:a0:5f:a2:8d:ff:9b:fd:be:8d:b1:59:d3:fd: a1:5a:02:bf:99:1f:cf:54:fd:37:97:19:b0:2a:0b:be:b5:12: 5a:ca:cd:5e:8f:64:d4:8e:f4:42:41:55:06:e4:31:a5:86:39: 62:1d:5b:bc:7f:05:7b:07:17:dd:e9:c2:53:8e:2a:3a:3d:da: 0a:36:8d:e2:e9:eb:31:77:a1:25:f8:5b:99:b4:24:47:62:94: c7:b6:08:1b:52:d1:2d:17:91:6b:60:d5:b5:a1:68:59:40:64: ee:af:75:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUwODIyMjIxMjU2WhcNMjUwODI5MjIxMjU2WjAYMRYwFAYD VQQDEw02OGE4ZWI2OS0xYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySFMW0AKLwbUMQDme3n8Tsr8qQfXY98GkhsdlzUmIEpKcLnHAylBLBLH8vna 2E+emkvUmLc8lk3axZ6XLyCg++lb0Kjg/B3Tavxz8srOMxwO1iR9eMszIEWRUWWY UofHhUF2PuaMh0bQhyEWsp2CiOtWZFaChAWheKjeu/6o9cwC7JJ4y1+IqItkxNXC 46xNPDgRWmOT+pbYrhpUhWbKzivKYiT+przrgxgIcQdMOSUuDrF1QjNcOt1jmJah J/AGIRkNWbdFtIUBvKGL2eE92XfxdabDLp0dLBQ6mQ5aw3xza3suJUuCRrveXsrt 0yEnh8asFaOEdjaPm5X50ViDzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE632hnU rMUlOcrMPF23TpnhmeN4MB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZthsEKmmT3rFGCvzt0EkMKxrhsVYh3BBeyqf1maF0/qgOAxMXkxbS smY1zJ6DPPJ6gL8oZogbQGBXyCdFTc6NABjc2GW0NmdmIa2Fvk1QAm2iYlnCnSBl g+ghp7FQ9F1zZZCEuRtjbjdy/f8dfUDJFaW3IF6cKJZgNqMUdJBv/VegbVOontxE /Qm1LKJrgenZhkdAZqBfoo3/m/2+jbFZ0/2hWgK/mR/PVP03lxmwKgu+tRJays1e j2TUjvRCQVUG5DGlhjliHVu8fwV7Bxfd6cJTjio6PdoKNo3i6esxd6El+FuZtCRH YpTHtggbUtEtF5FrYNW1oWhZQGTur3WU -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:09 2025 by rpki-client