$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: J+FgCmW4QySbGiMaBivo7R9yqdw6BjrUjRgjCfdMdvU= Subject key identifier: 98:0F:83:B6:12:C2:E4:99:95:ED:48:D3:4D:07:C9:00:6C:F3:6E:B2 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:54:26 +0000 Manifest this update: Sat 23 Aug 2025 07:54:25 +0000 Manifest next update: Sat 30 Aug 2025 07:54:25 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: wtJcoSyvvj3M5/P8eL2fE1pryyJkY6/0QM+56S3D+iA=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Aug 23 07:54:25 2025 GMT Not After : Aug 30 07:54:25 2025 GMT Subject: CN=68a973b1-e2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:14:7c:e6:53:92:13:90:d5:89:22:ab:4b:70: bd:2d:80:68:78:01:7c:ba:a3:5c:27:bf:e7:d3:49: 48:3f:c6:d7:e0:a0:71:6c:b5:72:c5:3e:12:77:a1: 65:05:17:37:04:00:d2:2c:f4:8d:9f:04:f4:4a:14: 7b:a6:f9:d1:ce:c2:6f:48:43:38:0a:16:17:9d:6c: 07:60:a3:0f:6c:23:16:58:01:f0:5e:22:21:23:b9: 02:05:7d:6f:14:f0:8b:7e:b8:a3:2b:da:86:06:87: da:65:fd:ed:4a:76:cd:7c:1a:b4:2d:01:87:b6:bb: ef:3d:b2:02:93:da:e0:d2:e0:bb:33:c5:f1:58:e8: 01:44:2c:d7:dd:a9:38:ac:f5:6f:e3:f5:9e:86:f9: bf:7c:94:08:b1:ca:3d:c2:47:4a:a9:f7:b1:75:cc: 08:f3:0d:09:4f:91:05:8f:0b:97:a2:a8:88:99:47: 57:42:ad:43:3c:11:e2:fe:a5:f2:25:73:0f:2b:c6: ec:73:74:30:f7:9f:8b:73:df:8e:28:83:ed:e6:9e: ed:cf:82:75:10:d1:68:4a:9b:a8:49:9c:82:e8:28: b5:e5:e7:7b:8c:ad:1e:18:b1:46:a4:ca:88:01:d3: 07:52:bc:85:d9:9c:14:bb:24:2f:e2:59:c4:65:70: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:83:B6:12:C2:E4:99:95:ED:48:D3:4D:07:C9:00:6C:F3:6E:B2 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5d:01:59:f4:4b:a2:70:62:d4:05:ae:f0:5c:1a:24:a0:22: 43:19:bf:5e:c7:70:a1:c7:b6:c9:b5:c0:45:5c:20:52:16:81: ba:71:cb:0d:31:02:16:2f:d4:29:0e:37:e6:4b:83:39:dc:f0: 39:a8:ab:fd:de:40:ce:ac:6f:b2:d4:c7:cf:30:5e:67:64:72: d9:24:9c:a3:42:d1:b6:ad:1a:b1:3c:a3:cb:fb:14:9f:af:e6: 6e:36:23:fa:7b:a9:f8:20:9b:69:80:31:db:85:69:97:40:9a: d8:37:09:ec:26:42:79:f9:41:9a:5b:cd:ce:a2:2c:e7:25:95: b0:93:3c:71:4f:14:90:11:fc:71:0b:52:33:9e:7a:87:cb:53: 17:16:93:2a:66:20:0e:b6:ef:57:3c:71:17:b0:c2:72:a3:7b: 2d:d1:cc:68:b2:99:e0:af:cb:5e:34:41:48:e9:3d:a7:af:79: 52:fc:16:06:cc:3f:6d:fb:ee:a3:77:3f:3a:94:85:8e:4c:04: d2:0e:5e:1e:b9:52:0b:03:69:8a:de:42:96:68:ff:e1:11:57: 36:31:b2:5d:17:53:ca:23:bc:67:30:67:55:b3:2b:ab:23:56: c0:94:63:e6:1d:05:d9:91:eb:23:c7:8f:e2:4c:88:53:0f:18: 58:f2:9f:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA4MjMwNzU0MjVaFw0yNTA4MzAwNzU0MjVaMBgxFjAUBgNV BAMTDTY4YTk3M2IxLWUyZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrFHzmU5ITkNWJIqtLcL0tgGh4AXy6o1wnv+fTSUg/xtfgoHFstXLFPhJ3oWUF FzcEANIs9I2fBPRKFHum+dHOwm9IQzgKFhedbAdgow9sIxZYAfBeIiEjuQIFfW8U 8It+uKMr2oYGh9pl/e1Kds18GrQtAYe2u+89sgKT2uDS4LszxfFY6AFELNfdqTis 9W/j9Z6G+b98lAixyj3CR0qp97F1zAjzDQlPkQWPC5eiqIiZR1dCrUM8EeL+pfIl cw8rxuxzdDD3n4tz344og+3mnu3PgnUQ0WhKm6hJnILoKLXl53uMrR4YsUakyogB 0wdSvIXZnBS7JC/iWcRlcJvHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmA+DthLC 5JmV7UjTTQfJAGzzbrIwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJddAVn0S6JwYtQFrvBcGiSgIkMZv17HcKHHtsm1wEVcIFIWgbpxyw0x AhYv1CkON+ZLgznc8Dmoq/3eQM6sb7LUx88wXmdkctkknKNC0batGrE8o8v7FJ+v 5m42I/p7qfggm2mAMduFaZdAmtg3CewmQnn5QZpbzc6iLOcllbCTPHFPFJAR/HEL UjOeeofLUxcWkypmIA6271c8cRewwnKjey3RzGiymeCvy140QUjpPaeveVL8FgbM P2377qN3PzqUhY5MBNIOXh65UgsDaYreQpZo/+ERVzYxsl0XU8ojvGcwZ1WzK6sj VsCUY+YdBdmR6yPHj+JMiFMPGFjyn94= -----END CERTIFICATE-----Generated at Sat Aug 23 12:46:05 2025 by rpki-client