$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: aVd/uaPoZAAiMBqBCBd3DkG5CS3+mk7G7LjT91d/Hpg= Subject key identifier: 8E:08:77:A6:D6:9B:6A:0C:10:2E:6A:4C:78:D6:CB:86:5D:79:79:DD Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 78 Signing time: Sat 23 Aug 2025 07:03:46 +0000 Manifest this update: Sat 23 Aug 2025 07:03:46 +0000 Manifest next update: Sat 30 Aug 2025 07:03:46 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: sTnhntThWfq4pi63vCiMwcM7dXP/f3ecl1ckgGpVzwY=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Aug 23 07:03:46 2025 GMT Not After : Aug 30 07:03:46 2025 GMT Subject: CN=68a967d2-c038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0e:19:f9:ae:7a:d8:35:05:ea:36:fb:82:da: 4f:cc:95:ee:21:ab:7d:4c:65:6e:6b:3f:e8:2c:bd: 73:0f:aa:08:a3:0d:c0:64:a8:b7:76:d2:34:f1:a7: 97:8c:cf:7e:68:fe:54:81:11:17:d2:7d:42:97:92: 80:7e:68:18:80:08:f9:01:52:4f:eb:ae:dd:3d:22: d8:6d:54:61:b0:ec:cf:f6:8d:8d:f0:66:46:97:32: 65:fa:de:89:08:4b:67:e8:44:1f:cb:1d:b6:7e:0d: 16:7e:34:60:64:c7:70:63:cb:a1:d0:b3:a7:47:db: 2f:d9:cb:74:b3:68:e5:3c:f0:90:ea:23:c1:8a:a6: e0:47:16:35:26:c5:74:88:1d:ac:71:5f:d3:52:9e: a2:10:c1:14:de:ef:98:3f:3a:55:41:34:6a:5c:00: 35:40:22:ec:51:76:d7:0a:b6:a9:18:12:59:3a:94: 6a:ae:ba:f5:ea:df:25:2a:8e:36:1c:40:1d:7a:ae: 99:8d:30:3f:77:4b:c1:90:40:9c:79:a4:14:c6:f5: dd:d4:e3:a1:91:1f:68:f6:8b:ee:84:2e:19:8e:6e: 05:ae:72:5e:31:25:f5:28:5b:a4:f1:35:a0:3b:7e: f7:e7:54:94:e4:68:fe:34:2b:10:3b:55:32:a9:a0: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:08:77:A6:D6:9B:6A:0C:10:2E:6A:4C:78:D6:CB:86:5D:79:79:DD X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6a:73:5a:56:df:33:fa:60:b6:ed:0e:c7:48:81:f5:55:2c: 89:ed:b1:1f:6f:61:f2:6d:19:8a:c6:be:4f:e8:0d:e6:92:34: 2a:60:d9:59:dd:8f:23:0d:d6:a6:3f:23:1b:f6:59:64:26:c3: bf:a4:db:e4:b4:e7:51:21:af:24:0e:d9:a3:cf:2c:29:7a:51: b7:78:9d:ce:73:4d:e7:cd:96:4d:22:d2:8d:aa:f1:3f:da:3f: 91:b1:6d:5b:c1:8a:be:f1:f4:eb:c9:10:c1:8b:89:92:92:51: a3:a1:69:f2:94:43:9a:04:e2:16:97:08:33:ac:49:8d:ca:a7: de:28:5a:df:6e:d3:22:ca:bb:73:a0:47:e3:a6:97:4d:32:79: 3a:4d:14:c3:05:3c:8e:27:21:2b:26:ce:58:80:19:e9:3a:04: 63:b9:ec:51:c6:ba:86:5d:c3:40:59:c8:9a:6f:fa:c2:9d:c6: 50:64:43:34:b2:30:07:64:ca:61:4b:c9:da:c5:73:ec:c6:09: 31:96:fd:97:9b:36:51:f3:ae:52:54:45:cd:bf:52:c5:3f:f6: 1c:c0:b3:73:56:ea:d5:15:d1:f6:fa:6c:36:c0:59:89:74:7d: d4:04:de:e5:0b:87:47:14:c6:72:55:af:58:c1:51:9c:3b:c3: f2:d7:68:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTA4MjMwNzAzNDZaFw0yNTA4MzAwNzAzNDZaMBgxFjAUBgNV BAMTDTY4YTk2N2QyLWMwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmDhn5rnrYNQXqNvuC2k/Mle4hq31MZW5rP+gsvXMPqgijDcBkqLd20jTxp5eM z35o/lSBERfSfUKXkoB+aBiACPkBUk/rrt09IthtVGGw7M/2jY3wZkaXMmX63okI S2foRB/LHbZ+DRZ+NGBkx3Bjy6HQs6dH2y/Zy3SzaOU88JDqI8GKpuBHFjUmxXSI HaxxX9NSnqIQwRTe75g/OlVBNGpcADVAIuxRdtcKtqkYElk6lGquuvXq3yUqjjYc QB16rpmNMD93S8GQQJx5pBTG9d3U46GRH2j2i+6ELhmObgWucl4xJfUoW6TxNaA7 fvfnVJTkaP40KxA7VTKpoNmJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjgh3ptab agwQLmpMeNbLhl15ed0wHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAANqc1pW3zP6YLbtDsdIgfVVLIntsR9vYfJtGYrGvk/oDeaSNCpg2Vnd jyMN1qY/Ixv2WWQmw7+k2+S051EhryQO2aPPLCl6Ubd4nc5zTefNlk0i0o2q8T/a P5GxbVvBir7x9OvJEMGLiZKSUaOhafKUQ5oE4haXCDOsSY3Kp94oWt9u0yLKu3Og R+Oml00yeTpNFMMFPI4nISsmzliAGek6BGO57FHGuoZdw0BZyJpv+sKdxlBkQzSy MAdkymFLydrFc+zGCTGW/ZebNlHzrlJURc2/UsU/9hzAs3NW6tUV0fb6bDbAWYl0 fdQE3uULh0cUxnJVr1jBUZw7w/LXaHA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:01 2025 by rpki-client