$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft File: 05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json) Hash identifier: QVqDcwm21IFo7wApqdKs7ZtQFcOd+r1QV/kXqveTlLM= Subject key identifier: 1A:8F:91:A0:C5:D2:40:38:1B:89:77:A3:EC:6C:CA:FA:CA:BA:D8:08 Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft Manifest number: AD Signing time: Sat 19 Jul 2025 06:18:33 +0000 Manifest this update: Sat 19 Jul 2025 06:18:33 +0000 Manifest next update: Sat 26 Jul 2025 06:18:33 +0000 Files and hashes: 1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: DAVMKGMfhFeAg4tfHYeN0Dvy/dVa4lBFXG9oITeV+9g=) 2: E1EF913A5DF011EFAC9CA43BC4F9AE02.roa (hash: HnEUHlw9gil+mYxp63GxFhUGPoOAuwCoKZnzCLBninA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Validity Not Before: Jul 19 06:18:33 2025 GMT Not After : Jul 26 06:18:33 2025 GMT Subject: CN=687b38b9-0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:0a:ec:3d:5b:14:45:45:4f:2c:6d:20:7d: 23:75:09:b0:3b:cf:b7:96:fb:9b:cf:9d:a8:b3:91: 59:d9:9a:0c:52:0d:d1:ef:42:88:90:97:1c:d6:43: 02:fa:3b:ff:ba:73:97:31:0f:4f:40:28:45:61:06: aa:e1:3b:34:81:f6:39:b9:e6:bf:37:35:e1:1e:ea: b0:55:47:61:db:ae:ca:6c:6e:82:9e:65:32:d1:d0: 15:4b:62:57:63:d0:42:6a:d5:47:b0:a4:18:8b:3d: 18:b7:4a:ca:4e:63:e8:45:03:c5:2b:27:04:5a:05: 5c:5e:ae:e6:3e:f8:9c:1a:da:c9:cd:4e:e8:ca:91: 22:53:f9:59:f8:38:8c:e7:9e:b0:cf:44:ed:38:68: 87:a3:15:26:fa:8b:16:98:e8:ce:68:54:5d:e9:83: dd:41:ee:1c:8f:22:7a:5b:8a:ca:76:44:d7:fe:1c: 2c:39:74:31:36:73:75:67:d6:ec:5e:0d:99:d4:3c: d0:3b:84:f1:a9:ad:ac:b4:8f:93:36:74:23:cb:88: 8e:c5:b8:71:10:0a:aa:70:a2:9a:ed:99:08:dc:eb: c6:a0:f7:f9:91:35:f7:df:d4:bb:70:37:a4:1f:08: 5f:d1:e2:32:c4:b3:77:24:97:eb:a7:15:53:c4:d8: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:91:A0:C5:D2:40:38:1B:89:77:A3:EC:6C:CA:FA:CA:BA:D8:08 X509v3 Authority Key Identifier: keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:1f:50:9f:e5:31:8f:46:fa:d5:94:c3:71:48:82:00:c4:12: 4e:75:9b:7e:97:f9:75:99:a7:63:00:02:de:36:fb:18:81:2c: 60:92:3a:d8:61:88:57:f4:6b:fe:e5:fd:49:6d:b7:e4:d7:45: 96:b3:a5:c1:57:df:66:21:bb:64:a4:d8:6b:5f:4a:f2:8b:35: 32:33:8d:ae:22:46:fa:e5:30:34:f7:3d:1c:de:ac:99:9d:37: bb:e8:a6:bc:c7:b0:41:46:f5:a3:bd:78:5a:a0:33:43:a0:45: d4:45:03:1f:e1:7e:fe:93:f9:d6:be:be:01:fc:55:fe:95:90: 06:0c:53:ab:63:b7:bf:4e:b6:41:89:91:74:30:7c:c6:75:96: 28:75:50:4c:d7:f2:78:3a:f2:4f:9c:f8:ff:de:ea:4b:9b:39: e9:17:ff:de:bb:8d:73:f1:e5:3f:62:c0:03:e8:a5:79:f1:f9: 30:be:c4:a9:54:0d:66:cc:8f:96:c2:ad:25:cf:f3:66:a8:f4: 86:e9:9b:43:a5:1c:88:1d:6c:92:67:78:fa:f0:f0:04:92:c1: ae:bb:37:2b:a6:5f:e4:51:57:34:80:11:93:33:1f:45:a9:52: 3e:ee:df:6c:1f:ce:a2:2e:5b:12:7b:8e:37:ca:cf:f9:f6:c4: f2:dd:e2:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkMxMTAvBgNVBAUTKEQzOTg0NzQ3MTQyNTdCQkVGM0E1QTk3NUQ5MENEMERD NjVCRERCRUYwHhcNMjUwNzE5MDYxODMzWhcNMjUwNzI2MDYxODMzWjAYMRYwFAYD VQQDEw02ODdiMzhiOS0wNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/MK7D1bFEVFTyxtIH0jdQmwO8+3lvubz52os5FZ2ZoMUg3R70KIkJcc1kMC +jv/unOXMQ9PQChFYQaq4Ts0gfY5uea/NzXhHuqwVUdh267KbG6CnmUy0dAVS2JX Y9BCatVHsKQYiz0Yt0rKTmPoRQPFKycEWgVcXq7mPvicGtrJzU7oypEiU/lZ+DiM 556wz0TtOGiHoxUm+osWmOjOaFRd6YPdQe4cjyJ6W4rKdkTX/hwsOXQxNnN1Z9bs Xg2Z1DzQO4Txqa2stI+TNnQjy4iOxbhxEAqqcKKa7ZkI3OvGoPf5kTX339S7cDek Hwhf0eIyxLN3JJfrpxVTxNh0KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqPkaDF 0kA4G4l3o+xsyvrKutgIMB8GA1UdIwQYMBaAFNOYR0cUJXu+86WpddkM0Nxlvdvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCQy85NTJCQUUyRTVE RjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3N3pwYWwxMlF6UTNHVzky LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1aEhSeFFsZTc3enBhbDEyUXpRM0dXOTItOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0NCQy85NTJCQUUyRTVERjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3 N3pwYWwxMlF6UTNHVzkyLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQH1Cf5TGPRvrVlMNxSIIAxBJOdZt+l/l1madjAALeNvsYgSxgkjrY YYhX9Gv+5f1Jbbfk10WWs6XBV99mIbtkpNhrX0ryizUyM42uIkb65TA09z0c3qyZ nTe76Ka8x7BBRvWjvXhaoDNDoEXURQMf4X7+k/nWvr4B/FX+lZAGDFOrY7e/TrZB iZF0MHzGdZYodVBM1/J4OvJPnPj/3upLmznpF//eu41z8eU/YsAD6KV58fkwvsSp VA1mzI+Wwq0lz/NmqPSG6ZtDpRyIHWySZ3j68PAEksGuuzcrpl/kUVc0gBGTMx9F qVI+7t9sH86iLlsSe443ys/59sTy3eLV -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:02 2025 by rpki-client