$ rpki-client -vvf rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft File: e-hwMVM9L_QxwRpYeani2dyFJ_I.mft (raw, json) Hash identifier: AP/9eKdT9fUYe1BqwxddtrWHDRFzXiKWwZyeeejKmTQ= Subject key identifier: 52:DA:D8:42:71:E2:AE:62:99:CC:D1:26:85:03:F5:0E:9F:7F:4C:05 Authority key identifier: 7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 Certificate issuer: /CN=A91C35C9/serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft Manifest number: 0198 Signing time: Sat 23 Aug 2025 03:30:08 +0000 Manifest this update: Sat 23 Aug 2025 03:30:08 +0000 Manifest next update: Sat 30 Aug 2025 03:30:08 +0000 Files and hashes: 1: e-hwMVM9L_QxwRpYeani2dyFJ_I.crl (hash: sq/SAUrN5D3mhZhDcvct8RAZcsMyXSZa2E1cXjSaNDk=) 2: D1315D7C0FDD11EEB007DA41C4F9AE02.roa (hash: pxAUka+hZXgqAkqZYwNbBxq2lYkaK/71SsZW6ax0kQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C35C9, serialNumber=7BE87031533D2FF431C11A5879A9E2D9DC8527F2 Validity Not Before: Aug 23 03:30:08 2025 GMT Not After : Aug 30 03:30:08 2025 GMT Subject: CN=68a935c0-189c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:aa:a9:68:8a:38:74:89:ad:ce:70:d2:92: 56:ae:fc:1f:68:0e:5a:b3:0e:02:11:f6:9f:ee:24: cf:99:69:aa:80:a7:c0:62:29:e7:26:d8:ba:0f:91: 23:9c:6f:60:4c:03:9d:b6:33:ab:82:8a:16:61:58: 28:40:e5:c5:6b:35:12:aa:1f:9d:78:f1:14:ff:2c: ec:ef:89:a4:92:37:38:07:93:f1:67:29:1f:f6:2f: b0:4b:f8:dd:9e:c6:10:c6:08:a7:27:97:aa:0c:30: af:df:92:75:e8:0f:de:55:64:a1:7c:d8:5b:5a:25: ef:47:4f:3c:96:f8:c5:e3:b4:47:51:a3:44:f8:e5: da:db:6c:fb:93:08:87:c8:96:29:ab:e7:66:95:23: db:e0:8d:fe:bb:a0:48:9f:3b:45:c1:71:ce:a3:18: 44:ba:af:13:a5:a2:dc:8b:ac:52:05:4e:5d:25:79: e1:c1:7e:b7:5d:26:ca:8a:44:ba:75:dd:b0:b7:24: 0b:c7:bc:88:fd:ed:1a:5b:36:9c:78:2b:26:18:56: fc:13:a0:19:29:e9:8d:53:57:48:2b:93:08:6d:33: 1b:54:c0:50:b1:22:a9:f8:0b:8c:a0:bd:8b:23:42: eb:8d:50:5a:1f:e1:f7:65:2d:93:62:9d:c9:ad:11: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:D8:42:71:E2:AE:62:99:CC:D1:26:85:03:F5:0E:9F:7F:4C:05 X509v3 Authority Key Identifier: keyid:7B:E8:70:31:53:3D:2F:F4:31:C1:1A:58:79:A9:E2:D9:DC:85:27:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-hwMVM9L_QxwRpYeani2dyFJ_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C35C9/70F84C620F2511EE8D29E26CC4F9AE02/e-hwMVM9L_QxwRpYeani2dyFJ_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3f:92:f5:a0:35:fc:1c:f4:01:0c:c6:fa:9e:f0:04:cd:7e: c0:ab:53:c1:04:59:e1:a5:cb:ab:df:54:28:a7:fb:84:b4:7d: da:c7:f2:f8:b6:36:58:84:d3:7c:2f:f9:11:17:d4:eb:86:85: 09:dd:eb:d0:80:15:65:71:c7:3d:5b:21:0b:5f:6b:a5:e8:5e: 7d:20:a0:a7:a4:71:88:54:39:30:80:a7:08:e2:b8:ce:45:1a: d2:2e:79:1f:d2:be:8b:98:2c:93:15:5b:71:52:fa:40:92:6a: ca:11:c2:7d:7f:da:77:bb:1b:2d:42:28:67:89:dd:bc:7c:2d: e3:43:a5:c8:eb:0c:4d:dc:73:3f:62:9e:a1:c1:11:e9:c3:c1: 48:a0:3a:56:67:d5:9a:de:27:c2:48:d2:88:2a:c1:9c:ed:3f: 5c:67:7b:67:19:69:24:b0:b3:c0:2f:db:11:c3:c5:ad:97:0b: 4b:8b:39:5a:28:7f:36:40:7d:6d:cc:54:c6:b5:4b:38:41:67: e0:7c:bf:2f:88:60:b4:5a:a3:6d:09:be:04:be:3b:95:c1:d1: 69:f9:31:0b:16:fb:18:cf:3d:2b:56:93:65:81:05:df:68:f2: 2c:d9:d3:31:4d:e6:e2:dd:a6:fe:a9:18:79:82:ec:53:27:8e: 4c:d1:cd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM1QzkxMTAvBgNVBAUTKDdCRTg3MDMxNTMzRDJGRjQzMUMxMUE1ODc5QTlFMkQ5 REM4NTI3RjIwHhcNMjUwODIzMDMzMDA4WhcNMjUwODMwMDMzMDA4WjAYMRYwFAYD VQQDEw02OGE5MzVjMC0xODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs82qqWiKOHSJrc5w0pJWrvwfaA5asw4CEfaf7iTPmWmqgKfAYinnJti6D5Ej nG9gTAOdtjOrgooWYVgoQOXFazUSqh+dePEU/yzs74mkkjc4B5PxZykf9i+wS/jd nsYQxginJ5eqDDCv35J16A/eVWShfNhbWiXvR088lvjF47RHUaNE+OXa22z7kwiH yJYpq+dmlSPb4I3+u6BInztFwXHOoxhEuq8TpaLci6xSBU5dJXnhwX63XSbKikS6 dd2wtyQLx7yI/e0aWzaceCsmGFb8E6AZKemNU1dIK5MIbTMbVMBQsSKp+AuMoL2L I0LrjVBaH+H3ZS2TYp3JrRFHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLa2EJx 4q5imczRJoUD9Q6ff0wFMB8GA1UdIwQYMBaAFHvocDFTPS/0McEaWHmp4tnchSfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzVDOS83MEY4NEM2MjBG MjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxfUXh3UnBZZWFuaTJkeUZK X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UtaHdNVk05TF9ReHdScFllYW5pMmR5RkpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzVDOS83MEY4NEM2MjBGMjUxMUVFOEQyOUUyNkNDNEY5QUUwMi9lLWh3TVZNOUxf UXh3UnBZZWFuaTJkeUZKX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwP5L1oDX8HPQBDMb6nvAEzX7Aq1PBBFnhpcur31Qop/uEtH3ax/L4 tjZYhNN8L/kRF9TrhoUJ3evQgBVlccc9WyELX2ul6F59IKCnpHGIVDkwgKcI4rjO RRrSLnkf0r6LmCyTFVtxUvpAkmrKEcJ9f9p3uxstQihnid28fC3jQ6XI6wxN3HM/ Yp6hwRHpw8FIoDpWZ9Wa3ifCSNKIKsGc7T9cZ3tnGWkksLPAL9sRw8WtlwtLizla KH82QH1tzFTGtUs4QWfgfL8viGC0WqNtCb4EvjuVwdFp+TELFvsYzz0rVpNlgQXf aPIs2dMxTebi3ab+qRh5guxTJ45M0c1L -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:00 2025 by rpki-client