$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: 5+FRBrNcemiyMvBGTe95CjsNJZrI1OUejoGS/VQ7I7I= Subject key identifier: 8F:07:AC:E1:7E:29:02:7B:ED:5F:78:FA:06:5C:E2:65:86:E5:C5:EE Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 068A Signing time: Fri 22 Aug 2025 22:35:03 +0000 Manifest this update: Fri 22 Aug 2025 22:35:03 +0000 Manifest next update: Fri 29 Aug 2025 22:35:03 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: tYskrrQL8k/v3DfBhEYyql0qqO0oDrfNJIyud8GcYDY=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (hash: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Aug 22 22:35:03 2025 GMT Not After : Aug 29 22:35:03 2025 GMT Subject: CN=68a8f097-8e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:eb:79:13:4a:81:08:48:ee:9c:5b:bf:d1:c2: 43:22:67:11:69:24:ec:2d:c4:4c:9d:14:5a:58:22: 2a:51:c7:23:d3:39:52:22:b0:2a:dc:87:d2:9c:c3: 02:5e:38:1e:33:c8:01:c6:62:cd:90:17:9e:c6:cd: c4:28:ec:b9:94:9a:98:3d:44:48:57:63:f3:e0:79: f5:ed:70:5f:c6:90:b6:74:42:91:ba:e1:bf:a3:60: 27:f9:8c:a3:35:a8:cd:65:af:d2:de:6e:17:7f:76: 60:7f:6c:8d:c7:ca:eb:2f:7e:4d:db:c5:c9:6f:9f: 23:b1:ae:b0:b5:c4:bd:a5:16:7e:bf:bc:dc:68:bd: 86:63:af:b8:4c:29:fa:76:43:75:06:34:5d:16:2c: c3:21:5a:44:37:89:e0:13:32:19:a0:e1:76:fe:ff: 14:34:cd:a8:b4:70:01:58:09:36:02:d7:06:99:8e: a4:5d:9e:38:01:02:cb:ef:ce:4b:05:be:e5:75:eb: 9a:97:de:62:f0:8f:ab:42:41:b1:a1:fc:23:66:50: f7:9a:ed:c4:35:49:98:06:2b:42:95:5a:86:98:5c: 63:16:7e:e6:e9:48:b5:15:be:31:b8:d0:37:a2:22: 48:94:df:cc:6a:26:87:00:77:cd:6a:26:d4:37:22: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:07:AC:E1:7E:29:02:7B:ED:5F:78:FA:06:5C:E2:65:86:E5:C5:EE X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a3:c0:62:05:56:2e:b1:5e:21:7c:c6:ee:3b:4e:94:73:8c: d7:4d:a8:ac:6c:bb:eb:c6:4c:41:b4:c2:5c:1d:29:58:d9:d9: 2a:b9:85:8e:73:82:3e:a7:06:7f:d2:33:1c:78:29:5f:de:5c: d3:5d:19:c3:de:83:f6:3c:99:94:2c:e1:d1:82:15:95:2f:21: 53:1b:c8:4c:19:22:4d:bc:c8:b0:80:05:fb:3b:65:ed:d9:d7: be:f8:e8:1b:89:ff:fa:ef:a8:b8:5d:b4:35:00:d2:ff:1a:9b: d4:fb:30:37:86:d2:3c:d5:4a:12:29:44:18:77:6b:c5:87:f3: f8:a9:29:6d:06:af:d6:bb:35:fa:d1:ea:e9:76:d8:e7:4f:0c: 60:87:60:8a:0c:68:20:80:85:64:0a:f1:85:dc:45:07:52:f5: 0b:c5:b6:6b:ec:d1:5f:c7:59:12:06:e6:65:4a:d8:b9:6b:c4: 98:a3:c8:63:cc:86:a1:a6:a0:20:52:5b:4b:1b:e7:98:f8:44: 5d:19:4a:dc:79:d7:9b:79:54:2d:80:af:5a:d3:fa:f9:d8:b7: c2:d4:8e:11:85:70:c0:de:32:fb:5d:9e:77:8d:d8:eb:e4:23: ec:97:22:18:3d:ca:e0:53:f4:7f:98:ca:bc:af:6e:59:88:26: db:a2:bd:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwODIyMjIzNTAzWhcNMjUwODI5MjIzNTAzWjAYMRYwFAYD VQQDEw02OGE4ZjA5Ny04ZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+t5E0qBCEjunFu/0cJDImcRaSTsLcRMnRRaWCIqUccj0zlSIrAq3IfSnMMC XjgeM8gBxmLNkBeexs3EKOy5lJqYPURIV2Pz4Hn17XBfxpC2dEKRuuG/o2An+Yyj NajNZa/S3m4Xf3Zgf2yNx8rrL35N28XJb58jsa6wtcS9pRZ+v7zcaL2GY6+4TCn6 dkN1BjRdFizDIVpEN4ngEzIZoOF2/v8UNM2otHABWAk2AtcGmY6kXZ44AQLL785L Bb7ldeual95i8I+rQkGxofwjZlD3mu3ENUmYBitClVqGmFxjFn7m6Ui1Fb4xuNA3 oiJIlN/MaiaHAHfNaibUNyIBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8HrOF+ KQJ77V94+gZc4mWG5cXuMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeo8BiBVYusV4hfMbuO06Uc4zXTaisbLvrxkxBtMJcHSlY2dkquYWO c4I+pwZ/0jMceClf3lzTXRnD3oP2PJmULOHRghWVLyFTG8hMGSJNvMiwgAX7O2Xt 2de++Ogbif/676i4XbQ1ANL/GpvU+zA3htI81UoSKUQYd2vFh/P4qSltBq/WuzX6 0erpdtjnTwxgh2CKDGgggIVkCvGF3EUHUvULxbZr7NFfx1kSBuZlSti5a8SYo8hj zIahpqAgUltLG+eY+ERdGUrcedebeVQtgK9a0/r52LfC1I4RhXDA3jL7XZ53jdjr 5CPslyIYPcrgU/R/mMq8r25ZiCbbor1F -----END CERTIFICATE-----Generated at Sun Aug 24 02:29:56 2025 by rpki-client