$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: gsT3SsB9mspNJRqKBpl5LDix+3rumTwOQIHhJt7dS74= Subject key identifier: F4:7A:25:7D:49:6E:3F:5A:CC:02:CA:AB:6D:7C:53:C9:61:36:8E:C5 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0338 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 0333 Signing time: Sat 19 Jul 2025 01:30:45 +0000 Manifest this update: Sat 19 Jul 2025 01:30:45 +0000 Manifest next update: Sat 26 Jul 2025 01:30:45 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: YnF569Fsnjea1fT9fIMULKGC2Z8kFeIuZAG7uFR0fXc=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 824 (0x338) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Jul 19 01:30:45 2025 GMT Not After : Jul 26 01:30:45 2025 GMT Subject: CN=687af545-81e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:f4:6e:be:8e:24:cd:5b:cd:5e:73:18:0f: f5:77:f6:46:32:24:02:a8:2c:78:13:49:12:49:13: 87:fd:6d:31:eb:12:3a:5e:4b:84:ee:a1:94:44:6e: fb:9d:0e:ad:b0:a3:c6:ad:e8:2c:37:c7:47:4c:e6: 86:95:4f:d8:93:1d:be:2a:10:75:e5:b4:9c:e6:3b: 02:d6:34:a1:ad:2e:ea:e7:a4:5b:f3:05:29:a0:5f: 4b:71:a8:a0:d7:f2:c3:ee:a6:64:a7:e3:73:c0:be: a3:e4:d1:23:d8:06:fa:e9:bd:e9:5c:ab:44:3a:09: af:14:f2:36:79:cc:a6:c1:70:3c:28:12:25:48:b6: e8:59:18:81:c5:a7:9e:90:8f:5b:2c:ec:ef:6c:0f: 1c:be:c9:4f:c6:ed:66:97:ce:5a:67:60:40:52:33: 99:f2:8e:ef:74:ad:0e:bc:65:73:0d:18:96:cf:76: 05:3f:61:f6:1f:cc:b3:e9:22:af:c0:96:2c:fe:b4: 5c:f6:47:78:5d:0c:fd:06:d1:6e:26:d1:73:7e:2a: 27:54:25:af:90:08:84:63:3d:c6:34:38:5e:7a:99: 2b:a4:19:5e:51:8a:43:5c:f7:6e:6e:8a:84:5b:c7: ad:60:9b:08:13:56:6a:d4:b0:0f:87:b6:61:1e:13: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7A:25:7D:49:6E:3F:5A:CC:02:CA:AB:6D:7C:53:C9:61:36:8E:C5 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f2:c6:92:88:3d:b4:2e:33:d2:23:9f:91:c7:21:3d:6e:ba: 1b:32:d0:de:e2:92:d7:42:3c:d1:29:93:e3:b7:81:dc:ce:76: a6:0d:fb:fb:10:cf:27:74:73:fe:28:d8:a4:31:8e:df:90:43: 7d:b2:33:f6:42:7b:2e:c3:c4:36:a5:43:ca:2a:85:7a:1f:6a: 31:a3:8a:32:e0:c8:67:0f:f9:ed:6a:e8:ae:1d:01:8b:be:67: 67:73:de:10:e6:9b:b5:41:6f:dd:c9:13:51:c7:06:d1:69:40: 20:2b:0d:8d:d5:df:01:45:10:6f:eb:2e:f5:4e:6d:67:46:15: 5a:8d:95:5e:ad:39:1b:05:7d:6e:71:ae:10:b7:40:89:01:80: 30:5d:88:63:83:89:ec:0c:51:ec:8b:08:2b:90:d9:05:c1:1b: e6:ac:5e:76:55:68:6d:d4:9d:d3:dc:d0:5b:e3:b4:31:20:c1: a6:fd:4b:9a:ee:59:12:71:8a:30:ae:22:14:21:75:7a:b4:a6: 4a:67:4f:8e:5a:c7:5c:b9:35:98:42:fd:4e:f5:24:03:a8:39: 73:d1:b0:e8:46:22:31:3e:ca:33:57:e1:07:e0:35:62:e0:a2: 8d:da:c0:6c:c2:26:e0:7f:4d:fe:69:77:c0:e5:19:4b:8d:5c: 9a:70:8e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwNzE5MDEzMDQ1WhcNMjUwNzI2MDEzMDQ1WjAYMRYwFAYD VQQDEw02ODdhZjU0NS04MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOb0br6OJM1bzV5zGA/1d/ZGMiQCqCx4E0kSSROH/W0x6xI6XkuE7qGURG77 nQ6tsKPGregsN8dHTOaGlU/Ykx2+KhB15bSc5jsC1jShrS7q56Rb8wUpoF9Lcaig 1/LD7qZkp+NzwL6j5NEj2Ab66b3pXKtEOgmvFPI2ecymwXA8KBIlSLboWRiBxaee kI9bLOzvbA8cvslPxu1ml85aZ2BAUjOZ8o7vdK0OvGVzDRiWz3YFP2H2H8yz6SKv wJYs/rRc9kd4XQz9BtFuJtFzfionVCWvkAiEYz3GNDheepkrpBleUYpDXPduboqE W8etYJsIE1Zq1LAPh7ZhHhM7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR6JX1J bj9azALKq218U8lhNo7FMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs8saSiD20LjPSI5+RxyE9brobMtDe4pLXQjzRKZPjt4HcznamDfv7 EM8ndHP+KNikMY7fkEN9sjP2Qnsuw8Q2pUPKKoV6H2oxo4oy4MhnD/ntauiuHQGL vmdnc94Q5pu1QW/dyRNRxwbRaUAgKw2N1d8BRRBv6y71Tm1nRhVajZVerTkbBX1u ca4Qt0CJAYAwXYhjg4nsDFHsiwgrkNkFwRvmrF52VWht1J3T3NBb47QxIMGm/Uua 7lkScYowriIUIXV6tKZKZ0+OWsdcuTWYQv1O9SQDqDlz0bDoRiIxPsozV+EH4DVi 4KKN2sBswibgf03+aXfA5RlLjVyacI5w -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:20 2025 by rpki-client