$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: 71Ug+a3Ik8CiB/3xGNlFJWyRziOfGHLNH/T0g+EclIA= Subject key identifier: 7F:D4:E1:CF:3E:9B:EA:9C:8A:54:03:57:A5:79:D6:29:2E:C6:34:BA Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0639 Signing time: Fri 22 Aug 2025 22:52:47 +0000 Manifest this update: Fri 22 Aug 2025 22:52:47 +0000 Manifest next update: Fri 29 Aug 2025 22:52:47 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: g5s61qDz+7mQogirwaZG+BG2/WuOaxaSEKxP1hEWRZk=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Aug 22 22:52:47 2025 GMT Not After : Aug 29 22:52:47 2025 GMT Subject: CN=68a8f4bf-8a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:4d:65:90:06:da:03:ef:af:00:cc:81:8d: 7e:d0:e9:e4:4e:60:d4:a1:bd:31:24:de:c3:12:67: 21:57:43:5f:c5:8a:fc:4f:dc:bb:ed:5a:81:b2:9f: 84:5d:d0:5a:3f:cb:c5:39:dd:ae:b9:b1:71:65:c2: 5b:2e:57:0e:f0:c4:95:51:88:58:7b:05:92:9c:f9: 9f:06:5f:52:75:b8:8c:f1:eb:ce:80:3f:44:d2:2e: 66:6e:6e:3e:c6:f7:3a:1c:7f:2b:1d:ec:97:aa:e0: 89:d2:fe:f0:4b:8a:fd:bf:4d:7a:fe:88:2c:dc:bc: eb:3a:ff:ac:1e:d2:03:b3:2b:2b:a8:a8:9f:f1:bd: 01:10:34:33:44:45:db:24:d0:db:be:02:58:95:2a: 5b:8a:0f:f9:2a:72:10:63:ac:97:6c:fa:de:cf:c2: c8:ac:15:14:70:f3:65:47:d1:0d:0b:68:5a:92:01: 1d:ca:31:86:1d:ac:cb:1d:5a:3d:77:59:0d:cc:0f: ed:c7:c4:10:3b:3c:ef:e1:d5:65:80:ef:74:85:0b: e1:33:5b:4a:4a:db:29:d5:f5:23:18:e0:73:43:ad: ef:38:8b:d1:bd:e8:11:cb:7d:87:e1:77:8a:8e:c3: e8:61:20:60:76:ae:30:71:54:7a:23:08:50:33:8a: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D4:E1:CF:3E:9B:EA:9C:8A:54:03:57:A5:79:D6:29:2E:C6:34:BA X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b5:a3:02:60:61:b8:24:e4:24:a3:f9:6c:f2:69:56:70:7d: 08:14:73:01:b1:55:ec:82:51:9a:32:8d:a2:56:aa:67:5a:38: 98:12:7a:d5:ff:7c:e0:ec:1d:9e:90:31:07:31:76:8e:f7:1a: 0f:d4:73:18:0c:d2:9e:d7:4a:9d:ec:5e:29:8d:e5:c9:54:2d: 56:61:e1:d8:92:84:b1:20:2b:62:fe:64:10:28:a7:da:ab:0b: e8:63:6a:5b:b9:60:ae:35:3d:11:52:a9:93:83:a5:46:ac:1c: 78:49:47:e8:93:3c:6d:28:f3:ff:9d:17:ad:32:e6:ff:80:b7: fc:0b:56:06:e6:76:a3:84:3c:22:2f:9c:f7:88:d1:34:40:fe: 9d:d0:e5:94:85:88:5f:85:7c:97:73:bb:78:3d:d4:0e:75:09: f5:9f:61:fb:fb:d1:05:03:b7:59:8f:8c:ae:93:83:c2:3a:7d: aa:5b:3b:ed:da:99:13:9a:d9:06:ce:53:64:3a:34:91:0a:41: dc:31:b5:44:33:2d:b3:41:f3:a9:fb:5d:c1:0e:de:c4:41:c5: e5:04:6b:3c:fc:2d:2f:8a:1e:df:84:bc:cd:5e:43:3c:8c:09: 16:7d:0f:df:18:fb:5b:50:d4:82:35:b7:cb:cf:89:30:0d:dc: 2c:1e:56:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwODIyMjI1MjQ3WhcNMjUwODI5MjI1MjQ3WjAYMRYwFAYD VQQDEw02OGE4ZjRiZi04YTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVFNZZAG2gPvrwDMgY1+0OnkTmDUob0xJN7DEmchV0NfxYr8T9y77VqBsp+E XdBaP8vFOd2uubFxZcJbLlcO8MSVUYhYewWSnPmfBl9SdbiM8evOgD9E0i5mbm4+ xvc6HH8rHeyXquCJ0v7wS4r9v016/ogs3LzrOv+sHtIDsysrqKif8b0BEDQzREXb JNDbvgJYlSpbig/5KnIQY6yXbPrez8LIrBUUcPNlR9ENC2hakgEdyjGGHazLHVo9 d1kNzA/tx8QQOzzv4dVlgO90hQvhM1tKStsp1fUjGOBzQ63vOIvRvegRy32H4XeK jsPoYSBgdq4wcVR6IwhQM4pXbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/U4c8+ m+qcilQDV6V51ikuxjS6MB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrtaMCYGG4JOQko/ls8mlWcH0IFHMBsVXsglGaMo2iVqpnWjiYEnrV /3zg7B2ekDEHMXaO9xoP1HMYDNKe10qd7F4pjeXJVC1WYeHYkoSxICti/mQQKKfa qwvoY2pbuWCuNT0RUqmTg6VGrBx4SUfokzxtKPP/nRetMub/gLf8C1YG5najhDwi L5z3iNE0QP6d0OWUhYhfhXyXc7t4PdQOdQn1n2H7+9EFA7dZj4yuk4PCOn2qWzvt 2pkTmtkGzlNkOjSRCkHcMbVEMy2zQfOp+13BDt7EQcXlBGs8/C0vih7fhLzNXkM8 jAkWfQ/fGPtbUNSCNbfLz4kwDdwsHlaC -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:16 2025 by rpki-client