$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: mkhW8yVkrqf1KdALXrKCJcAw37CB84/b9CRI+iSvNgo= Subject key identifier: 26:82:D1:9E:A3:09:2F:C5:AE:B1:EA:C7:88:BA:A5:7D:67:2A:1E:82 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 01:47:32 +0000 Manifest this update: Sat 23 Aug 2025 01:47:31 +0000 Manifest next update: Sat 30 Aug 2025 01:47:31 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: a0qqp/6DHBGT0GvM4rwfJIM49L9/erQGxBMiy8cTME8=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Aug 23 01:47:31 2025 GMT Not After : Aug 30 01:47:31 2025 GMT Subject: CN=68a91db3-2e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:35:b1:93:1a:6b:44:37:68:7e:57:ec:06:1b: ac:50:f4:73:7f:3b:4d:9d:8c:20:a7:af:60:ff:7e: b7:84:d5:d5:84:a2:6d:6b:1c:10:d3:58:38:37:6b: 8d:83:95:3b:54:92:df:b7:4a:06:6c:77:3e:65:c7: f4:69:85:02:8e:11:be:51:ce:83:b1:b8:08:16:fa: 37:61:3e:65:a7:bb:f1:7d:a6:45:c7:47:f4:8c:33: 80:8a:61:36:bd:20:39:57:d5:3d:d7:0e:25:aa:a2: 5f:dd:ea:48:b3:88:f0:8a:fe:06:2b:f1:7e:af:15: 36:ec:8f:3e:c7:87:a0:e7:c9:f2:c3:15:1e:72:1c: 52:ac:13:6d:5f:a7:85:37:45:e3:ba:09:10:5c:d3: b6:99:f5:55:81:7e:89:31:d6:5a:bc:d5:17:70:6b: e4:8f:91:18:8a:28:17:34:2e:9e:82:91:8a:34:05: 1e:aa:60:5b:fc:2f:83:29:c5:3a:fa:ed:9a:ad:dd: 1b:4c:43:3b:1f:94:0d:b4:3a:ec:21:c0:38:1b:c8: 85:3c:f8:1e:d9:1d:0c:9a:7d:e6:69:92:4b:60:16: 32:00:70:ff:e3:db:23:1a:37:65:2b:9e:35:e9:4a: 55:79:2e:bd:1e:72:53:f3:ae:97:23:1a:77:2e:90: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:D1:9E:A3:09:2F:C5:AE:B1:EA:C7:88:BA:A5:7D:67:2A:1E:82 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:8f:34:40:e2:75:40:a6:10:b4:04:97:15:d3:62:fc:74:01: 31:be:83:8a:fa:12:cf:9d:d7:77:11:ef:cb:c8:08:ab:6b:02: 43:dd:35:6b:be:a2:2b:d6:bc:8d:1d:55:90:ed:af:b7:61:9b: 7e:5d:63:95:fe:cf:93:ad:17:ee:5b:55:23:d9:15:62:a6:ce: 5b:2b:94:1c:b2:38:b9:cf:0d:b1:2f:44:a0:45:e0:00:d7:5f: bb:a8:c8:38:7e:86:10:f6:e7:0c:e6:d0:03:a0:8b:7f:8d:5e: 6d:30:58:67:6a:a9:92:b0:a6:fe:f5:0d:cf:a2:6b:6a:01:8e: a9:e9:ba:f0:23:a5:dc:5c:a5:8f:75:33:66:01:1f:70:54:8b: a1:14:0e:60:46:88:e3:cf:ec:55:9d:4d:d3:c5:8d:d0:0a:8f: 25:cf:20:44:fb:b6:7d:5c:34:d7:08:d8:3b:78:9f:74:17:29: cf:0f:2e:c7:2c:fd:6c:0b:5c:05:f6:e0:68:f9:7f:f2:00:03: 53:11:fa:de:c7:49:21:5a:cc:3f:97:c4:f8:2f:d4:1f:09:ea: 63:c7:8f:dc:31:be:49:ad:8d:8e:b2:4b:2a:c8:f4:32:0d:f0: 29:98:e4:06:5b:d5:c7:8f:f1:b9:74:86:ec:6a:22:1d:f5:0c: b0:b2:4c:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwODIzMDE0NzMxWhcNMjUwODMwMDE0NzMxWjAYMRYwFAYD VQQDEw02OGE5MWRiMy0yZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zWxkxprRDdoflfsBhusUPRzfztNnYwgp69g/363hNXVhKJtaxwQ01g4N2uN g5U7VJLft0oGbHc+Zcf0aYUCjhG+Uc6DsbgIFvo3YT5lp7vxfaZFx0f0jDOAimE2 vSA5V9U91w4lqqJf3epIs4jwiv4GK/F+rxU27I8+x4eg58nywxUechxSrBNtX6eF N0XjugkQXNO2mfVVgX6JMdZavNUXcGvkj5EYiigXNC6egpGKNAUeqmBb/C+DKcU6 +u2ard0bTEM7H5QNtDrsIcA4G8iFPPge2R0Mmn3maZJLYBYyAHD/49sjGjdlK541 6UpVeS69HnJT866XIxp3LpC31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaC0Z6j CS/FrrHqx4i6pX1nKh6CMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFjzRA4nVAphC0BJcV02L8dAExvoOK+hLPndd3Ee/LyAirawJD3TVr vqIr1ryNHVWQ7a+3YZt+XWOV/s+TrRfuW1Uj2RVips5bK5Qcsji5zw2xL0SgReAA 11+7qMg4foYQ9ucM5tADoIt/jV5tMFhnaqmSsKb+9Q3PomtqAY6p6brwI6XcXKWP dTNmAR9wVIuhFA5gRojjz+xVnU3TxY3QCo8lzyBE+7Z9XDTXCNg7eJ90FynPDy7H LP1sC1wF9uBo+X/yAANTEfrex0khWsw/l8T4L9QfCepjx4/cMb5JrY2OsksqyPQy DfApmOQGW9XHj/G5dIbsaiId9Qywskyh -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:58 2025 by rpki-client