$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: 2CBB2YBvX96J1mrdnedJk2+tM8GSXqGvnEKvtVuNIoY= Subject key identifier: 36:CB:8C:45:18:4C:52:41:C2:B2:59:DB:F5:B4:94:45:F6:05:D4:D0 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:19 +0000 Manifest this update: Sat 23 Aug 2025 05:58:18 +0000 Manifest next update: Sat 30 Aug 2025 05:58:18 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: vIK+qOpxullvzCd4GRPDd5oX9+tC+Qm7/qoc2guV7/U=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Aug 23 05:58:18 2025 GMT Not After : Aug 30 05:58:18 2025 GMT Subject: CN=68a9587b-7d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:f0:1a:74:05:34:63:76:02:12:b6:f6:47: 75:29:b2:c9:eb:50:ef:5e:2a:c7:f9:44:4c:d8:ff: 74:a9:c5:b3:af:c5:af:e2:45:bd:66:9a:7b:d3:3b: 98:f2:c3:ec:32:a8:af:91:a4:ea:b1:8b:f8:9b:53: 70:d1:27:bf:e0:28:26:4c:1a:4e:9c:12:fe:92:08: f2:2a:a3:04:78:83:c8:2c:aa:45:9b:7d:25:5c:a2: 21:a0:70:1f:a7:6d:4b:7e:f3:da:86:8d:25:e9:64: 1a:ba:55:bd:4e:3c:23:b6:49:76:aa:7a:0c:7b:5c: 8c:d7:26:d8:d8:10:4a:02:55:50:c2:45:67:4d:51: 7f:5a:e8:20:e0:7d:25:48:8d:ed:3a:5c:e0:a6:e1: 20:d2:e6:ac:fe:56:2a:49:b3:93:43:c1:da:35:bd: 21:34:b4:ae:fe:76:9a:f4:79:4f:1c:23:bc:3a:e5: 76:ec:b0:03:dd:1b:23:b2:0d:90:4e:50:9f:be:b0: 4d:6c:36:53:0d:43:a8:7a:f2:55:c8:84:86:f9:86: 0a:ac:2e:2b:1b:a0:44:f8:c0:a9:e4:c6:40:83:b0: 3c:34:bd:ac:cc:61:85:54:02:a4:c0:8b:e6:63:1a: 17:c6:9c:0e:19:5e:c2:69:7d:73:fb:33:29:f9:05: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CB:8C:45:18:4C:52:41:C2:B2:59:DB:F5:B4:94:45:F6:05:D4:D0 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:83:44:b6:cf:26:51:83:c6:fe:c9:10:3e:bf:b5:da:cc:db: b2:8c:01:7e:85:bf:7d:ed:4a:0c:95:a2:44:45:c1:10:c1:04: a0:b7:8c:31:f4:53:e3:42:33:f6:d5:f3:66:6c:41:9b:d6:bd: cd:94:d9:08:4b:6a:eb:1d:67:78:2e:4b:fb:e3:d1:b4:c3:d1: 0d:74:d2:86:95:e1:6f:44:6e:cb:4a:dc:e3:ca:e2:aa:6e:8e: a3:e8:44:99:de:94:d2:74:c0:0e:b3:83:8e:ed:af:b4:4b:60: 8b:ca:cc:d8:5a:08:92:43:e8:75:d6:0f:b1:9a:e4:ff:2b:18: 5c:47:89:21:e3:46:0a:43:ae:78:2d:64:4b:bf:9a:04:cd:16: 60:ee:35:31:1d:70:02:da:79:7d:0c:c5:f4:54:69:cd:c2:e4: 01:97:65:a5:a8:1d:a6:1d:49:0b:08:e0:cc:eb:12:1a:c7:c5: 24:67:3f:3f:c7:b0:2f:42:43:dd:df:9b:e4:9a:78:70:c3:03: af:17:7e:6d:bd:70:5b:6d:46:a5:e2:bd:40:46:8d:db:65:b5: aa:19:58:9b:0b:36:56:e1:2a:90:d1:75:ab:58:ce:6d:77:cd: b0:01:ad:63:b8:c0:9f:a2:7b:74:ba:b1:1d:50:06:41:de:ad: 6a:fa:82:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwODIzMDU1ODE4WhcNMjUwODMwMDU1ODE4WjAYMRYwFAYD VQQDEw02OGE5NTg3Yi03ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EzwGnQFNGN2AhK29kd1KbLJ61DvXirH+URM2P90qcWzr8Wv4kW9Zpp70zuY 8sPsMqivkaTqsYv4m1Nw0Se/4CgmTBpOnBL+kgjyKqMEeIPILKpFm30lXKIhoHAf p21LfvPaho0l6WQaulW9Tjwjtkl2qnoMe1yM1ybY2BBKAlVQwkVnTVF/Wugg4H0l SI3tOlzgpuEg0uas/lYqSbOTQ8HaNb0hNLSu/naa9HlPHCO8OuV27LAD3Rsjsg2Q TlCfvrBNbDZTDUOoevJVyISG+YYKrC4rG6BE+MCp5MZAg7A8NL2szGGFVAKkwIvm YxoXxpwOGV7CaX1z+zMp+QXyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbLjEUY TFJBwrJZ2/W0lEX2BdTQMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4g0S2zyZRg8b+yRA+v7XazNuyjAF+hb997UoMlaJERcEQwQSgt4wx 9FPjQjP21fNmbEGb1r3NlNkIS2rrHWd4Lkv749G0w9ENdNKGleFvRG7LStzjyuKq bo6j6ESZ3pTSdMAOs4OO7a+0S2CLyszYWgiSQ+h11g+xmuT/KxhcR4kh40YKQ654 LWRLv5oEzRZg7jUxHXAC2nl9DMX0VGnNwuQBl2WlqB2mHUkLCODM6xIax8UkZz8/ x7AvQkPd35vkmnhwwwOvF35tvXBbbUal4r1ARo3bZbWqGVibCzZW4SqQ0XWrWM5t d82wAa1juMCfont0urEdUAZB3q1q+oLR -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:44 2025 by rpki-client