$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json) Hash identifier: 40FvnEXwefAb1Mufwm779j2Ige0rIT2J8Io3hiRk4vE= Subject key identifier: 23:01:D9:75:E4:CC:86:9D:FD:6A:81:2B:9E:86:1F:90:65:0B:02:31 Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft Manifest number: 2101 Signing time: Fri 22 Aug 2025 15:59:29 +0000 Manifest this update: Fri 22 Aug 2025 15:59:29 +0000 Manifest next update: Fri 29 Aug 2025 15:59:29 +0000 Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: BQ7mdLZ4E3U0RGROlUg0VAkrJ8yJnBXShn9DTY2TBS0=) 2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: hUdH/uVzYkF0LtRZr5OEyKuVBZZQ6yEh3YtiBoLV0Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8467 (0x2113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Aug 22 15:59:29 2025 GMT Not After : Aug 29 15:59:29 2025 GMT Subject: CN=68a893e1-ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f7:fb:bc:99:d5:70:ae:01:76:77:c7:73:7d: 4c:30:67:e8:bc:eb:05:e7:1e:57:62:f6:57:f6:f7: dc:7c:32:15:9d:08:4c:8f:b6:27:f1:47:3e:46:2d: 48:59:9b:18:87:c0:60:a1:eb:1d:06:51:26:f1:0a: 43:89:f5:be:d5:38:58:a2:1c:eb:26:1a:56:59:ca: 96:8b:cd:dd:de:08:0d:42:5f:24:11:3d:d7:fb:07: be:03:18:4b:b8:9a:3b:30:c4:23:97:7d:4d:fc:eb: e7:53:c0:c2:fd:f3:d4:98:e5:f5:57:bd:44:d3:81: 60:ec:a3:d1:ce:f4:7f:23:1e:aa:39:b1:9b:1b:d4: e6:40:53:0d:a8:02:9f:72:26:9d:13:23:f9:8a:3e: f8:be:1b:de:30:fc:88:2d:25:bb:44:bc:27:c9:77: 40:ce:fa:a7:a5:f6:aa:a8:8b:a7:c6:35:9c:ea:b7: 69:47:c8:18:db:a5:4d:52:2a:6b:3d:cf:06:d2:e8: b5:b7:27:44:03:c7:50:34:c6:9d:53:ff:70:66:08: 4c:c3:f3:78:2c:8b:07:08:a9:95:c3:13:3a:e2:7f: 5b:c2:60:b3:e8:d3:c8:15:56:88:a7:ae:37:8d:d4: 81:66:c4:b4:52:f5:18:c9:42:6c:10:2a:13:3d:6c: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:D9:75:E4:CC:86:9D:FD:6A:81:2B:9E:86:1F:90:65:0B:02:31 X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:09:ef:71:83:9a:8f:56:6a:55:1b:28:da:19:72:13:2a:a4: 57:80:e5:1b:76:2e:e2:8b:45:cd:12:03:0a:0b:79:1e:e9:24: ee:83:69:ec:75:08:a6:6a:aa:f3:2c:ed:ca:10:fa:1f:95:f8: 5a:76:04:a9:ac:54:28:d1:8e:45:8c:29:a6:59:12:e6:9a:4a: 0c:03:2b:c1:4d:5d:a9:37:96:2e:34:d9:a8:72:67:ec:ed:25: 9e:fc:5a:80:77:a7:b3:87:b9:36:43:b6:8b:62:31:72:0b:57: 77:b5:5b:33:b3:fb:65:9d:0e:1f:f9:2b:3d:c6:c6:1a:cb:a0: f0:7a:65:a9:d7:ad:65:84:48:33:09:a9:c2:e7:60:e7:6d:da: 3e:c8:3d:91:23:e1:1e:16:74:71:c7:b9:37:98:5d:e1:a6:d3: 91:f0:c0:50:8a:c1:2c:61:a8:6d:67:85:63:0f:32:e8:c4:2d: 2b:3b:5a:f0:9c:36:0a:46:03:f6:66:21:ef:9b:48:5e:84:98: 99:ce:38:4c:40:5c:ab:85:67:28:c9:c3:4a:84:fb:3e:23:8a: 23:c7:f5:19:e2:3d:90:00:09:80:e1:2b:5a:11:91:24:d6:35: 7c:64:e7:5e:e9:9e:f8:55:d9:85:09:91:24:7b:e9:83:06:8d: ba:96:45:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjUwODIyMTU1OTI5WhcNMjUwODI5MTU1OTI5WjAYMRYwFAYD VQQDEw02OGE4OTNlMS1iYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vf7vJnVcK4BdnfHc31MMGfovOsF5x5XYvZX9vfcfDIVnQhMj7Yn8Uc+Ri1I WZsYh8BgoesdBlEm8QpDifW+1ThYohzrJhpWWcqWi83d3ggNQl8kET3X+we+AxhL uJo7MMQjl31N/OvnU8DC/fPUmOX1V71E04Fg7KPRzvR/Ix6qObGbG9TmQFMNqAKf ciadEyP5ij74vhveMPyILSW7RLwnyXdAzvqnpfaqqIunxjWc6rdpR8gY26VNUipr Pc8G0ui1tydEA8dQNMadU/9wZghMw/N4LIsHCKmVwxM64n9bwmCz6NPIFVaIp643 jdSBZsS0UvUYyUJsECoTPWxrTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMB2XXk zIad/WqBK56GH5BlCwIxMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT MS1DMTZZRFBrZHZmMHJ0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbCe9xg5qPVmpVGyjaGXITKqRXgOUbdi7ii0XNEgMKC3ke6STug2ns dQimaqrzLO3KEPoflfhadgSprFQo0Y5FjCmmWRLmmkoMAyvBTV2pN5YuNNmocmfs 7SWe/FqAd6ezh7k2Q7aLYjFyC1d3tVszs/tlnQ4f+Ss9xsYay6DwemWp161lhEgz CanC52Dnbdo+yD2RI+EeFnRxx7k3mF3hptOR8MBQisEsYahtZ4VjDzLoxC0rO1rw nDYKRgP2ZiHvm0hehJiZzjhMQFyrhWcoycNKhPs+I4ojx/UZ4j2QAAmA4StaEZEk 1jV8ZOde6Z74VdmFCZEke+mDBo26lkXn -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:32 2025 by rpki-client