$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json) Hash identifier: QSeDwTl4wZGStbpG6ztyV4JlHz2f1ULrGk03YCDMt/Y= Subject key identifier: 82:F7:02:71:6A:93:1E:A6:94:C7:F5:8A:34:11:AC:EF:E8:46:70:11 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 058D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft Manifest number: 0581 Signing time: Fri 18 Jul 2025 23:37:36 +0000 Manifest this update: Fri 18 Jul 2025 23:37:35 +0000 Manifest next update: Fri 25 Jul 2025 23:37:35 +0000 Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: 6lqiE4rNGzerynm8t/21ML7tuGpop+Nsr8A8fygUYhY=) 2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: AcP4+2aIj47AkfHQ0Si3gKCupjSk93I6lVYcHLmJ46k=) 3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: zDAY/JgF04rYgWurZj2nx6aFtMaDIFUtTRAO3VpvWV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1421 (0x58d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Jul 18 23:37:35 2025 GMT Not After : Jul 25 23:37:35 2025 GMT Subject: CN=687adabf-2922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:03:d3:f1:d1:64:62:db:40:97:e3:26:29: 28:66:bb:2b:93:ef:f1:33:bc:6a:dd:a1:ec:91:ad: 1f:78:e6:46:cf:ce:a4:41:c7:fc:db:21:42:e4:11: b2:62:5c:f0:37:5d:81:a6:c7:4a:27:a9:97:9b:0c: b7:8a:3a:df:21:26:65:d0:26:06:bd:a4:eb:4f:53: cb:e9:a7:93:b2:06:e1:36:23:cd:2b:f5:ea:df:74: 8f:62:4c:30:81:84:1e:1e:4d:b9:d9:88:d3:f6:ba: 0a:e8:d0:30:eb:a9:a2:09:c0:30:24:47:ec:b1:93: 87:34:c1:b6:27:72:cd:03:41:64:e7:a5:36:c4:19: ee:34:ea:c6:0d:dc:1f:59:99:fd:7e:a9:59:e4:69: d8:85:91:5d:1f:98:f9:d0:6c:67:44:58:84:34:48: 49:af:e0:8a:64:8e:09:1a:66:fb:c6:19:00:a9:86: 71:9f:c5:e1:27:f2:61:71:2f:4b:58:de:0e:72:22: 7c:1b:6b:7d:66:16:59:02:29:f5:4a:93:0c:e7:4c: 5e:d1:86:63:4b:38:ff:98:6e:5c:28:bb:cf:98:f2: b1:bc:80:c7:de:1a:08:58:90:1f:96:8e:0a:d7:61: f2:9d:ab:6a:fb:9c:20:27:35:e5:8c:d8:f7:e4:b2: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:02:71:6A:93:1E:A6:94:C7:F5:8A:34:11:AC:EF:E8:46:70:11 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:ef:d2:d8:67:6e:cb:e9:8b:ec:24:a9:1e:8b:fd:fa:96: 61:5f:d3:ce:9d:56:aa:0e:83:07:a4:ec:5d:40:3b:19:9f:62: 52:90:53:93:ff:ec:dc:0c:52:cf:10:f8:f0:31:3a:dc:41:71: 8d:fe:b0:25:7b:25:db:c9:e8:ca:3f:85:5b:e3:10:b6:83:12: fc:58:9f:17:2d:50:ab:f9:91:ef:8d:47:24:e8:9e:d5:51:2f: 9f:ca:b9:1d:0c:58:78:de:5b:a0:0d:92:97:33:ca:45:d1:0e: 1e:65:7e:e6:42:12:1d:8a:9b:52:90:e3:9a:32:f4:6a:22:12: 41:26:a5:eb:a0:24:0c:d2:d3:0a:e3:09:65:cd:ac:f3:62:a0: e6:0b:5a:a5:6d:d7:7b:0a:51:4e:9e:22:d3:f5:77:11:e5:0a: 44:6f:1b:31:e4:e0:20:b8:9c:9f:3d:c1:b1:d6:73:70:69:f0: b8:30:1a:36:41:80:98:a6:ec:8f:85:7e:45:a2:50:be:ef:c0: 1c:5a:52:b0:8f:2f:ef:3e:50:5a:dc:5c:5f:c3:4d:af:2b:99: 9d:c5:67:38:61:58:8d:98:81:b2:6e:21:62:e1:f8:cc:9f:20: 63:cf:ef:a1:4f:bc:8c:17:dc:9a:aa:3d:62:02:83:75:f1:48: a7:ed:a9:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjUwNzE4MjMzNzM1WhcNMjUwNzI1MjMzNzM1WjAYMRYwFAYD VQQDEw02ODdhZGFiZi0yOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDwD0/HRZGLbQJfjJikoZrsrk+/xM7xq3aHska0feOZGz86kQcf82yFC5BGy YlzwN12BpsdKJ6mXmwy3ijrfISZl0CYGvaTrT1PL6aeTsgbhNiPNK/Xq33SPYkww gYQeHk252YjT9roK6NAw66miCcAwJEfssZOHNMG2J3LNA0Fk56U2xBnuNOrGDdwf WZn9fqlZ5GnYhZFdH5j50GxnRFiENEhJr+CKZI4JGmb7xhkAqYZxn8XhJ/JhcS9L WN4OciJ8G2t9ZhZZAin1SpMM50xe0YZjSzj/mG5cKLvPmPKxvIDH3hoIWJAflo4K 12Hynatq+5wgJzXljNj35LKbjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL3AnFq kx6mlMf1ijQRrO/oRnARMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg+u/S2Gduy+mL7CSpHov9+pZhX9POnVaqDoMHpOxdQDsZn2JSkFOT /+zcDFLPEPjwMTrcQXGN/rAleyXbyejKP4Vb4xC2gxL8WJ8XLVCr+ZHvjUck6J7V US+fyrkdDFh43lugDZKXM8pF0Q4eZX7mQhIdiptSkOOaMvRqIhJBJqXroCQM0tMK 4wllzazzYqDmC1qlbdd7ClFOniLT9XcR5QpEbxsx5OAguJyfPcGx1nNwafC4MBo2 QYCYpuyPhX5FolC+78AcWlKwjy/vPlBa3Fxfw02vK5mdxWc4YViNmIGybiFi4fjM nyBjz++hT7yMF9yaqj1iAoN18Uin7al3 -----END CERTIFICATE-----Generated at Sun Jul 20 06:44:29 2025 by rpki-client