$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: 1BgWa0nN20w502B2TqAJorFAdhOII4kbx2HAKtOlfsk= Subject key identifier: F1:54:5B:CF:13:42:E7:51:1D:3E:8D:44:46:53:A0:B1:2F:41:BF:C6 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01E9 Signing time: Sat 19 Jul 2025 02:48:12 +0000 Manifest this update: Sat 19 Jul 2025 02:48:12 +0000 Manifest next update: Sat 26 Jul 2025 02:48:12 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: eFv9nBqHPAGCXfY98rFBzEnQRST0Dz7DzlufpBQFlxY=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Jul 19 02:48:12 2025 GMT Not After : Jul 26 02:48:12 2025 GMT Subject: CN=687b076c-8606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:3a:1c:de:fa:f0:18:e0:68:e4:48:9c:4a: dd:66:02:23:c6:ad:98:3b:71:5a:39:43:a0:7b:77: 98:57:30:3e:56:43:e2:6d:14:60:38:2a:f6:32:8b: ce:5f:35:00:f5:f9:3a:45:50:ea:cc:ec:fb:08:13: 90:b9:06:ae:51:3a:0b:7c:c8:a3:ad:28:1e:1f:9c: 40:48:24:05:a1:27:3c:5c:75:bf:8a:bc:36:ce:ec: ed:7a:f3:47:85:ed:33:57:f5:39:cd:9c:08:69:6f: 53:72:cd:8f:74:92:bc:42:65:ad:84:42:08:d0:49: a9:57:fb:c3:ad:12:44:46:87:96:02:4a:e5:c3:36: 79:e5:25:ec:30:2c:be:37:b0:80:70:5a:f3:e0:ae: db:0e:e0:68:33:cf:d0:16:96:c3:44:d8:77:94:8f: 70:cc:3f:e8:ff:2e:01:8c:84:99:29:85:0c:69:77: 17:6b:fa:fd:fb:8d:52:f7:f9:02:8c:94:ee:c4:82: c7:dc:4a:ef:47:29:09:89:92:aa:58:3e:b6:89:72: 70:56:1a:5c:69:25:9e:09:60:74:45:87:4e:ef:57: fa:67:fa:11:97:8f:a8:35:02:2e:fe:5a:88:ef:7f: 07:db:11:29:c5:65:38:da:04:79:72:7e:6e:62:a6: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:5B:CF:13:42:E7:51:1D:3E:8D:44:46:53:A0:B1:2F:41:BF:C6 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:16:65:58:71:82:d0:b5:53:66:eb:58:d3:2c:80:21:45:d5: ac:e9:bb:3a:b6:3f:2c:d8:68:02:9a:d5:da:28:11:7f:4a:89: 88:9e:78:e7:d6:20:19:cf:27:20:a2:54:17:1a:2e:d4:87:31: b3:b9:bc:00:57:65:60:e3:f7:ff:b5:1d:c9:b4:db:27:b7:a3: b8:7d:ea:9b:77:5e:87:67:72:2c:73:a5:cb:44:e8:34:8b:7f: cb:36:65:50:ba:0d:5a:4d:b9:e4:41:de:3e:65:fc:22:d2:a0: d1:c9:07:7b:0f:a4:d2:22:f9:a2:8a:94:52:63:9e:a7:b6:d8: 6f:a8:5c:d4:55:9e:30:f2:38:bd:cd:c3:1a:70:97:1d:97:eb: 9d:d3:65:76:5c:01:46:cc:8e:2c:cf:81:8a:ac:a2:78:64:77: d2:52:fe:6c:e9:f9:eb:ed:8a:72:8f:c4:52:83:ad:8e:e1:1d: 88:bb:bc:e6:49:40:a7:41:f6:5d:4e:29:1c:c8:b0:ad:b2:9d: 9e:3f:c5:5b:c4:60:19:a5:46:05:16:ad:09:79:a4:2d:1b:34: 21:f9:36:dc:62:be:af:06:d6:03:c1:8f:1c:3f:70:1e:a6:d8: 68:b6:92:0b:fa:af:f4:3f:01:a3:c4:8e:35:24:45:25:c3:65: b0:c6:93:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwNzE5MDI0ODEyWhcNMjUwNzI2MDI0ODEyWjAYMRYwFAYD VQQDEw02ODdiMDc2Yy04NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6846HN768BjgaORInErdZgIjxq2YO3FaOUOge3eYVzA+VkPibRRgOCr2MovO XzUA9fk6RVDqzOz7CBOQuQauUToLfMijrSgeH5xASCQFoSc8XHW/irw2zuztevNH he0zV/U5zZwIaW9Tcs2PdJK8QmWthEII0EmpV/vDrRJERoeWAkrlwzZ55SXsMCy+ N7CAcFrz4K7bDuBoM8/QFpbDRNh3lI9wzD/o/y4BjISZKYUMaXcXa/r9+41S9/kC jJTuxILH3ErvRykJiZKqWD62iXJwVhpcaSWeCWB0RYdO71f6Z/oRl4+oNQIu/lqI 738H2xEpxWU42gR5cn5uYqaaaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFUW88T QudRHT6NREZToLEvQb/GMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAFmVYcYLQtVNm61jTLIAhRdWs6bs6tj8s2GgCmtXaKBF/SomInnjn 1iAZzycgolQXGi7UhzGzubwAV2Vg4/f/tR3JtNsnt6O4feqbd16HZ3Isc6XLROg0 i3/LNmVQug1aTbnkQd4+Zfwi0qDRyQd7D6TSIvmiipRSY56ntthvqFzUVZ4w8ji9 zcMacJcdl+ud02V2XAFGzI4sz4GKrKJ4ZHfSUv5s6fnr7Ypyj8RSg62O4R2Iu7zm SUCnQfZdTikcyLCtsp2eP8VbxGAZpUYFFq0JeaQtGzQh+TbcYr6vBtYDwY8cP3Ae pthotpIL+q/0PwGjxI41JEUlw2WwxpNa -----END CERTIFICATE-----Generated at Sun Jul 20 18:51:36 2025 by rpki-client