$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: 0gsFrydyCyZ7Phsno6rV2dqc7ePVfgBhxGFFPagZx4E= Subject key identifier: EE:35:94:D3:BA:78:C3:F9:22:B1:97:4E:3E:B0:D0:70:6C:4C:28:0A Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 04DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 04D7 Signing time: Sat 23 Aug 2025 00:00:05 +0000 Manifest this update: Sat 23 Aug 2025 00:00:04 +0000 Manifest next update: Sat 30 Aug 2025 00:00:04 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: 7X8/sespWCAutNWs2od9GiyIHAzxsMVRJUgXnJtkOmI=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: mphoj0oAxZzkXNiDjzgy+jQGtIB0RRer8k5eq/mlzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1244 (0x4dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Aug 23 00:00:04 2025 GMT Not After : Aug 30 00:00:04 2025 GMT Subject: CN=68a90485-d6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:56:6e:92:48:ba:66:75:f9:a7:50:d5:fe: ed:12:c6:ec:f1:1e:12:0a:14:5b:0f:e8:38:22:cc: 61:3d:63:bb:1b:46:21:f2:e5:3d:21:83:f0:36:43: 05:bf:9f:aa:fe:fc:98:c5:05:ae:a3:63:1d:cf:fc: 10:17:c7:0d:2d:81:c3:bd:7d:05:64:66:df:eb:7b: c1:e9:a5:77:22:50:97:53:fe:fd:fd:78:28:29:fc: 96:aa:1e:f0:af:3e:21:d6:97:83:ae:e0:ff:7b:df: 00:95:3b:1c:6d:e3:4a:01:f4:c4:2b:a2:5d:b4:fe: 63:eb:f2:4d:73:54:8e:9f:06:e9:91:4b:f3:3f:0c: 9e:06:73:1c:d2:7e:69:fb:97:7a:52:f2:33:cc:2d: cf:d0:c3:c2:a6:0f:a4:f2:47:84:ed:fb:a5:7c:b1: f2:a0:3b:d4:61:b5:95:d9:72:75:ae:8e:ba:ae:97: cd:6b:13:6e:af:48:e8:0f:22:bb:fc:88:43:a0:73: 68:f6:c7:b0:b3:ab:e4:84:5f:04:d8:64:ce:87:e1: 72:25:d1:76:14:3e:78:21:59:47:5d:97:6d:c1:7e: b2:18:c0:e5:10:d5:47:a0:c8:83:bf:2b:b1:4f:a1: 00:3a:2f:94:ce:f6:32:73:c4:89:8e:3c:54:03:ac: 02:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:94:D3:BA:78:C3:F9:22:B1:97:4E:3E:B0:D0:70:6C:4C:28:0A X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:39:83:7d:c0:b3:35:a6:f1:a1:a9:7a:9a:b1:68:84:4d:90: 96:f3:0c:00:47:fa:d2:9d:b7:fc:7d:11:37:73:74:11:09:e1: c9:08:de:f7:c5:f8:21:99:ee:d2:fb:43:fa:18:0d:61:ed:be: dc:68:e6:4b:02:88:34:5d:48:04:f3:70:0b:e4:a7:78:df:35: cc:30:3e:a6:b4:0e:fb:c0:73:05:b9:f3:91:16:34:46:8f:50: 97:46:7a:59:86:5d:bb:41:c1:20:1c:31:29:11:1e:ae:f2:18: 7c:d7:56:c3:d6:af:95:26:1a:f7:ac:14:10:c1:a8:4f:b6:05: 1d:db:76:dc:d7:c6:e6:19:a7:ce:cf:d8:45:31:6a:e9:49:31: d5:7d:a0:de:62:05:71:00:c7:bc:2d:80:7b:15:58:f0:09:2b: 37:a3:1b:65:c9:df:df:fd:d3:5e:83:13:94:35:61:b1:ab:90: 6b:e6:f3:de:32:43:62:e9:31:a3:fe:3f:34:bc:07:fc:fd:8b: ba:17:8a:83:f8:00:7a:75:21:40:97:37:c6:3f:ad:8e:6e:d2: 20:0a:d0:a6:64:58:0e:c4:de:8c:32:33:98:27:d6:74:a8:3f: 27:23:fb:ce:6c:92:5d:52:46:ea:5e:56:89:aa:76:c4:d2:0c: d9:29:9a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjUwODIzMDAwMDA0WhcNMjUwODMwMDAwMDA0WjAYMRYwFAYD VQQDEw02OGE5MDQ4NS1kNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg5WbpJIumZ1+adQ1f7tEsbs8R4SChRbD+g4IsxhPWO7G0Yh8uU9IYPwNkMF v5+q/vyYxQWuo2Mdz/wQF8cNLYHDvX0FZGbf63vB6aV3IlCXU/79/XgoKfyWqh7w rz4h1peDruD/e98AlTscbeNKAfTEK6JdtP5j6/JNc1SOnwbpkUvzPwyeBnMc0n5p +5d6UvIzzC3P0MPCpg+k8keE7fulfLHyoDvUYbWV2XJ1ro66rpfNaxNur0joDyK7 /IhDoHNo9sews6vkhF8E2GTOh+FyJdF2FD54IVlHXZdtwX6yGMDlENVHoMiDvyux T6EAOi+UzvYyc8SJjjxUA6wCKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO41lNO6 eMP5IrGXTj6w0HBsTCgKMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlOYN9wLM1pvGhqXqasWiETZCW8wwAR/rSnbf8fRE3c3QRCeHJCN73 xfghme7S+0P6GA1h7b7caOZLAog0XUgE83AL5Kd43zXMMD6mtA77wHMFufORFjRG j1CXRnpZhl27QcEgHDEpER6u8hh811bD1q+VJhr3rBQQwahPtgUd23bc18bmGafO z9hFMWrpSTHVfaDeYgVxAMe8LYB7FVjwCSs3oxtlyd/f/dNegxOUNWGxq5Br5vPe MkNi6TGj/j80vAf8/Yu6F4qD+AB6dSFAlzfGP62ObtIgCtCmZFgOxN6MMjOYJ9Z0 qD8nI/vObJJdUkbqXlaJqnbE0gzZKZrV -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:08 2025 by rpki-client