$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: wRo4lvVTHTLb/U9G/vUG823XLAfvvRWa+gqWsHySbeM= Subject key identifier: F6:50:98:EE:A2:04:A4:05:8C:08:41:62:5A:79:C0:CA:C6:80:BC:BE Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 0413 Signing time: Mon 21 Jul 2025 00:37:52 +0000 Manifest this update: Mon 21 Jul 2025 00:37:52 +0000 Manifest next update: Mon 28 Jul 2025 00:37:51 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: a7sim5Qhc7HE0aBdgogjxvzdKhXKXbICxIOmNjh11jQ=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Jul 21 00:37:52 2025 GMT Not After : Jul 28 00:37:51 2025 GMT Subject: CN=687d8be0-4d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c7:9e:89:aa:7f:fd:30:16:62:99:e3:3c:1d: 76:80:11:dc:f3:17:7c:13:19:ca:91:15:01:69:c5: 4e:98:c0:cf:0c:d6:fd:9b:f2:ba:b4:d1:c9:64:c4: ee:ee:95:e5:cb:f7:a3:fc:fe:65:56:ad:ed:df:b0: fd:d6:be:1a:d1:25:d2:af:be:54:a4:70:bd:03:80: 36:c0:8a:da:7e:e5:7f:17:3c:0f:88:f2:e0:b5:71: 00:ed:c8:28:b3:0f:73:e7:af:c7:61:1a:26:21:71: 24:2c:ec:2c:a0:61:fa:d4:89:24:7f:94:ce:2e:03: 17:42:55:26:54:47:da:3e:04:f7:29:b1:36:6c:f8: e6:80:e7:5e:19:12:1c:3e:01:0e:e9:ea:c8:bc:ef: 0f:9d:ec:70:6f:4c:f5:31:e6:fa:9f:08:22:51:62: 15:24:77:aa:d8:3f:0b:11:70:ce:ce:cb:e6:97:4d: b7:fc:84:dd:85:6b:02:47:4e:00:4b:c2:c5:c8:bc: e8:6b:86:5a:73:91:d2:4b:f7:b5:19:54:21:1f:34: 83:94:8d:26:6a:45:93:5c:ce:b7:a9:fd:f6:cc:ef: dc:65:c8:3d:72:fc:1f:fd:7e:f4:5d:73:e7:a0:cb: 03:1d:d0:53:0c:e3:72:11:5f:e0:99:a3:d9:38:8d: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:50:98:EE:A2:04:A4:05:8C:08:41:62:5A:79:C0:CA:C6:80:BC:BE X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:a9:04:77:b0:4d:17:c7:ca:2c:96:89:c7:8b:00:c2:43:fa: 17:dd:0f:37:90:e8:ba:60:7d:a2:f2:8b:0e:9a:d7:4c:98:8f: a8:c9:40:5c:c7:a5:bb:07:b1:19:c7:d7:8d:44:62:a9:db:c7: 63:0e:37:65:a2:dc:88:10:a2:cd:21:13:77:c4:98:9d:29:29: 6b:0a:fa:60:ec:da:63:dd:29:5e:54:51:d5:d5:2f:8d:02:95: 68:0b:24:f6:db:cf:86:94:67:13:08:95:33:ec:d1:a1:9b:5b: c2:6b:2a:05:dc:8f:0c:c1:80:ec:92:3a:3b:08:5b:04:47:1c: 7f:2a:b2:0a:74:c8:82:01:c7:23:8d:07:be:8f:ae:ee:7f:aa: 83:de:8d:ad:5e:06:be:46:06:1e:b6:0e:be:64:7f:89:a3:fc: df:16:1f:67:31:9c:5d:41:31:87:7d:59:c4:69:00:73:b5:59: fc:e6:39:66:26:7a:ba:9a:a9:6f:39:fb:ed:d7:f8:32:5f:bf: c3:91:41:41:ba:c3:f0:86:c9:ca:cd:3d:a8:e7:b3:62:e6:33: 66:76:52:9b:93:0c:62:9c:f3:a2:e5:38:59:4c:74:7a:86:6c: 7e:b3:c5:0f:60:3f:3b:02:f0:44:3b:58:2b:d0:79:df:24:18: 3f:76:3d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwNzIxMDAzNzUyWhcNMjUwNzI4MDAzNzUxWjAYMRYwFAYD VQQDEw02ODdkOGJlMC00ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Meeiap//TAWYpnjPB12gBHc8xd8ExnKkRUBacVOmMDPDNb9m/K6tNHJZMTu 7pXly/ej/P5lVq3t37D91r4a0SXSr75UpHC9A4A2wIrafuV/FzwPiPLgtXEA7cgo sw9z56/HYRomIXEkLOwsoGH61Ikkf5TOLgMXQlUmVEfaPgT3KbE2bPjmgOdeGRIc PgEO6erIvO8Pnexwb0z1Meb6nwgiUWIVJHeq2D8LEXDOzsvml023/ITdhWsCR04A S8LFyLzoa4Zac5HSS/e1GVQhHzSDlI0makWTXM63qf32zO/cZcg9cvwf/X70XXPn oMsDHdBTDONyEV/gmaPZOI3fGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZQmO6i BKQFjAhBYlp5wMrGgLy+MB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARqQR3sE0Xx8oslonHiwDCQ/oX3Q83kOi6YH2i8osOmtdMmI+oyUBc x6W7B7EZx9eNRGKp28djDjdlotyIEKLNIRN3xJidKSlrCvpg7Npj3SleVFHV1S+N ApVoCyT228+GlGcTCJUz7NGhm1vCayoF3I8MwYDskjo7CFsERxx/KrIKdMiCAccj jQe+j67uf6qD3o2tXga+RgYetg6+ZH+Jo/zfFh9nMZxdQTGHfVnEaQBztVn85jlm Jnq6mqlvOfvt1/gyX7/DkUFBusPwhsnKzT2o57Ni5jNmdlKbkwxinPOi5ThZTHR6 hmx+s8UPYD87AvBEO1gr0HnfJBg/dj0+ -----END CERTIFICATE-----Generated at Mon Jul 21 08:09:25 2025 by rpki-client