$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: ryln+1GArVbgOuMGkXkAJKUtWYairIly3refEvkFB8I= Subject key identifier: 7A:B8:0D:F5:FE:60:B7:D2:62:19:DD:D3:18:BC:00:52:32:67:ED:AE Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 06F2 Signing time: Fri 22 Aug 2025 22:11:13 +0000 Manifest this update: Fri 22 Aug 2025 22:11:12 +0000 Manifest next update: Fri 29 Aug 2025 22:11:12 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: bZyADzUks1Bo6kvmFWi3dCop7T8deZh0w05yhSCW2+k=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Aug 22 22:11:12 2025 GMT Not After : Aug 29 22:11:12 2025 GMT Subject: CN=68a8eb00-2a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:26:55:82:39:ff:c8:9c:37:56:99:6a:e0: 9a:b9:eb:26:44:e3:b1:76:4b:15:9d:a9:f4:7c:e5: 4e:65:d6:7c:94:e4:c1:8b:4f:84:cd:35:f0:80:b8: 00:0a:f0:64:b8:f7:4c:28:be:d9:e3:92:60:d7:46: 88:a2:0f:21:1a:e8:96:7c:ca:7f:c2:73:46:e5:4e: 8a:2b:9f:89:fb:06:3c:fc:d3:fa:ee:38:4d:54:6c: 27:12:5d:13:19:64:77:6e:04:62:40:fe:5e:75:5a: a7:9f:8d:3d:df:b9:6c:d6:97:4c:8f:ec:f3:e0:9e: 58:2b:93:d4:d6:d8:f9:44:84:fc:38:57:98:ec:97: 42:39:21:8d:65:b8:76:a8:9f:c0:80:6f:ca:e2:c2: 90:a6:d6:4e:e0:1e:1a:cf:bd:e6:47:64:66:03:aa: af:fe:f6:00:5c:68:f9:7e:26:ab:47:47:82:7c:4f: b3:1d:13:66:5c:6f:8b:39:f6:88:b5:c0:60:24:1b: 5b:c0:8a:37:98:96:ca:68:6f:90:d4:86:1c:1d:31: d2:9a:91:6b:1c:53:2e:bc:96:e8:f2:6e:20:39:19: 9c:35:ff:09:79:e1:2b:a2:8f:7f:0a:30:36:3d:29: 5c:f5:70:b0:5a:ce:4a:de:f5:46:5a:84:23:7f:3f: 30:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:0D:F5:FE:60:B7:D2:62:19:DD:D3:18:BC:00:52:32:67:ED:AE X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ea:9b:e8:58:49:06:8c:d3:5c:e1:56:41:e5:b0:2a:33:13: 36:dc:38:a0:45:6f:fb:6c:1f:74:9e:0e:54:ae:4d:98:cc:95: f1:c0:49:6d:9f:da:21:56:03:37:af:10:9b:09:b3:ed:1d:38: 39:a3:c0:c8:ad:9a:40:f6:6d:47:bd:e7:62:fc:d5:ab:7b:50: b5:e9:47:e8:4f:7a:7c:01:b6:f6:90:41:a2:93:53:6e:cf:0e: 37:7b:4e:0b:fe:84:5d:5a:9e:25:8c:04:bb:87:4d:88:0d:3c: bc:c8:04:c7:14:35:ee:3c:d9:0c:f5:3a:e2:1c:f7:a5:f7:8d: b3:58:33:b7:a5:65:25:57:41:66:6b:87:d8:3d:2f:0d:b8:c7: 0e:97:9d:ce:2b:73:a9:80:23:29:f5:cd:c1:f6:c0:96:0d:1d: b8:90:43:0f:c4:fb:7e:bd:2d:e8:46:06:c4:f7:bf:de:6e:6a: 8f:60:97:39:87:86:56:b1:50:84:26:98:f7:58:da:f1:14:f8: 5a:19:cb:19:83:b2:34:49:04:0f:67:6e:ae:f2:d6:e6:3a:eb: 5b:4c:29:f0:49:78:41:e2:bc:60:fd:26:a2:cd:f2:1c:58:11: 59:98:e9:0a:34:14:f1:cf:fa:31:1f:e3:a5:da:7e:8a:d4:99: 29:da:fc:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwODIyMjIxMTEyWhcNMjUwODI5MjIxMTEyWjAYMRYwFAYD VQQDEw02OGE4ZWIwMC0yYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lomVYI5/8icN1aZauCauesmROOxdksVnan0fOVOZdZ8lOTBi0+EzTXwgLgA CvBkuPdMKL7Z45Jg10aIog8hGuiWfMp/wnNG5U6KK5+J+wY8/NP67jhNVGwnEl0T GWR3bgRiQP5edVqnn40937ls1pdMj+zz4J5YK5PU1tj5RIT8OFeY7JdCOSGNZbh2 qJ/AgG/K4sKQptZO4B4az73mR2RmA6qv/vYAXGj5fiarR0eCfE+zHRNmXG+LOfaI tcBgJBtbwIo3mJbKaG+Q1IYcHTHSmpFrHFMuvJbo8m4gORmcNf8JeeEroo9/CjA2 PSlc9XCwWs5K3vVGWoQjfz8w7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq4DfX+ YLfSYhnd0xi8AFIyZ+2uMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO6pvoWEkGjNNc4VZB5bAqMxM23DigRW/7bB90ng5Urk2YzJXxwElt n9ohVgM3rxCbCbPtHTg5o8DIrZpA9m1Hvedi/NWre1C16UfoT3p8Abb2kEGik1Nu zw43e04L/oRdWp4ljAS7h02IDTy8yATHFDXuPNkM9TriHPel942zWDO3pWUlV0Fm a4fYPS8NuMcOl53OK3OpgCMp9c3B9sCWDR24kEMPxPt+vS3oRgbE97/ebmqPYJc5 h4ZWsVCEJpj3WNrxFPhaGcsZg7I0SQQPZ26u8tbmOutbTCnwSXhB4rxg/SaizfIc WBFZmOkKNBTxz/oxH+Ol2n6K1Jkp2vxf -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:05 2025 by rpki-client