$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: kIxO+e9jiKR23OeuHeZmz2gtWwke2RPwopEuHx+c+88= Subject key identifier: D8:76:85:90:C6:94:43:EA:D9:B9:C8:A8:BB:F2:37:3B:5C:C7:37:74 Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 021B Signing time: Sat 23 Aug 2025 02:14:56 +0000 Manifest this update: Sat 23 Aug 2025 02:14:55 +0000 Manifest next update: Sat 30 Aug 2025 02:14:55 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: OIDn4bh4UCnAZlaNy0tIqbtnM6ik4pmKK4Ntyv7yC2A=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: d2fZwjk/kReWJf7o+GQOO5RAjKTwIQ1B0ld4lPrAcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: Aug 23 02:14:55 2025 GMT Not After : Aug 30 02:14:55 2025 GMT Subject: CN=68a9241f-188c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:e7:c1:2a:60:79:c2:3d:c3:6e:85:8b:00: 08:b6:26:89:d1:ae:95:b7:b3:91:ce:11:3b:09:43: 1d:f1:0d:1e:42:28:a0:02:cd:3b:cd:6c:19:3e:03: cf:59:a4:e7:3c:58:6a:53:ba:23:34:76:40:4c:ea: fa:03:b5:17:cf:a2:47:dc:b4:c3:6f:65:0f:77:b3: dc:61:47:f1:f4:91:5e:95:62:50:87:50:65:56:3a: c6:d0:9b:46:fc:5a:09:35:41:e1:43:1e:90:16:e2: 2a:22:f1:e7:17:f8:f3:ef:f7:c2:96:37:93:6a:4e: 7d:3c:99:16:19:d3:0c:ea:ba:a2:68:e1:db:2b:b9: ed:5f:71:c0:15:67:d1:6a:fa:89:64:76:39:83:ef: da:87:6f:86:fa:d6:70:51:66:06:34:92:fd:ba:fe: a7:14:39:be:75:f9:51:b8:45:3a:d9:6a:44:ed:cc: 2a:97:c4:9c:88:d4:bd:f2:94:37:42:0e:f2:22:74: 8c:4c:dc:8f:ee:0e:c0:78:d3:34:81:82:94:69:b2: e3:11:69:fb:a4:33:5b:14:01:4f:4c:6a:f4:4e:9a: b6:dc:d0:13:da:61:f0:76:79:ee:fb:74:50:13:ff: 28:a6:e0:77:2a:fe:45:b7:de:0b:90:c3:16:05:97: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:76:85:90:C6:94:43:EA:D9:B9:C8:A8:BB:F2:37:3B:5C:C7:37:74 X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6b:80:d4:2a:32:8b:69:4d:be:e9:2b:32:9e:3a:1b:75:3d: 5c:f8:11:13:55:cf:e2:9d:ae:21:0b:be:cf:64:09:26:02:51: 04:35:df:da:d5:48:86:7a:2e:5c:ae:37:c8:86:df:d9:ba:3c: fc:62:e6:9a:79:f4:20:a1:08:ce:53:bc:17:9b:5f:e4:5e:7b: 8a:e9:7f:8f:40:87:b9:50:22:ee:a4:0a:87:76:77:23:22:9f: 43:b5:32:db:5b:32:52:ef:93:ae:18:87:d7:cc:bb:01:74:df: 88:03:45:34:58:db:3b:ec:01:46:e0:aa:82:2c:d3:39:23:03: 77:0c:3a:7c:22:51:1c:19:27:3a:23:70:c2:09:7a:d1:b6:2a: 49:62:12:9a:93:7d:10:34:17:98:d5:09:76:d4:cd:83:bf:7d: ba:4d:ea:79:4e:2f:bf:95:2c:5b:ee:c2:03:77:42:bb:c5:ec: 05:2c:f4:27:b2:ae:af:04:f0:45:47:8d:1b:2b:5a:b8:cb:b1: e1:4f:e3:2f:69:e5:f0:99:09:02:ff:24:c0:40:a0:20:06:24: 21:80:71:19:cb:5d:c9:21:06:67:e6:ed:e4:6d:29:70:de:7e: c8:e7:9a:e1:81:64:78:87:12:80:08:16:06:66:9d:62:58:54: ad:d6:07:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjUwODIzMDIxNDU1WhcNMjUwODMwMDIxNDU1WjAYMRYwFAYD VQQDEw02OGE5MjQxZi0xODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kvnwSpgecI9w26FiwAItiaJ0a6Vt7ORzhE7CUMd8Q0eQiigAs07zWwZPgPP WaTnPFhqU7ojNHZATOr6A7UXz6JH3LTDb2UPd7PcYUfx9JFelWJQh1BlVjrG0JtG /FoJNUHhQx6QFuIqIvHnF/jz7/fCljeTak59PJkWGdMM6rqiaOHbK7ntX3HAFWfR avqJZHY5g+/ah2+G+tZwUWYGNJL9uv6nFDm+dflRuEU62WpE7cwql8SciNS98pQ3 Qg7yInSMTNyP7g7AeNM0gYKUabLjEWn7pDNbFAFPTGr0Tpq23NAT2mHwdnnu+3RQ E/8opuB3Kv5Ft94LkMMWBZep1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh2hZDG lEPq2bnIqLvyNztcxzd0MB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBma4DUKjKLaU2+6SsynjobdT1c+BETVc/ina4hC77PZAkmAlEENd/a 1UiGei5crjfIht/Zujz8YuaaefQgoQjOU7wXm1/kXnuK6X+PQIe5UCLupAqHdncj Ip9DtTLbWzJS75OuGIfXzLsBdN+IA0U0WNs77AFG4KqCLNM5IwN3DDp8IlEcGSc6 I3DCCXrRtipJYhKak30QNBeY1Ql21M2Dv326Tep5Ti+/lSxb7sIDd0K7xewFLPQn sq6vBPBFR40bK1q4y7HhT+MvaeXwmQkC/yTAQKAgBiQhgHEZy13JIQZn5u3kbSlw 3n7I55rhgWR4hxKACBYGZp1iWFSt1gcV -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:56 2025 by rpki-client