$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: /DI6eBP05mudQTOQQJ6rKcn5uNIUE1N+cFD5mTqQLHo= Subject key identifier: AB:2A:D9:7B:6B:21:E0:69:AB:1B:25:CA:B9:DB:6A:58:04:9F:CF:A2 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: 6E Signing time: Fri 25 Jul 2025 07:26:32 +0000 Manifest this update: Fri 25 Jul 2025 07:26:31 +0000 Manifest next update: Fri 01 Aug 2025 07:26:31 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: /rlZTWgp3ctNlfXM9ud5SZeZMJeN23MjeRbG5RcwHNw=) 2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) 3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Jul 25 07:26:31 2025 GMT Not After : Aug 1 07:26:31 2025 GMT Subject: CN=688331a7-0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:eb:f7:34:b1:d1:20:43:d0:96:19:56:b6: f2:7a:61:fb:0c:e1:67:29:c4:ea:f4:32:a8:72:42: b8:b3:5b:34:36:19:ae:64:c7:5c:85:e4:53:27:fa: 30:ac:4b:63:c7:31:01:27:2f:a0:7f:28:01:ca:93: 05:1e:ba:31:25:1d:a3:01:c3:a4:4b:d8:21:84:2f: 71:3d:f8:f6:2b:0b:da:10:54:51:d7:5c:e6:3d:6e: 74:bf:32:c8:a8:17:42:32:0d:9f:2f:1d:3f:31:e1: 50:bb:2a:19:a5:18:61:dd:60:8d:a4:43:58:6d:b2: 86:74:e6:83:a7:0f:0e:df:96:f6:e3:43:67:d7:bc: 99:ab:04:8c:8d:48:96:1e:1b:74:b2:8d:35:a5:d1: 74:f6:a1:82:89:7b:25:82:04:aa:bf:63:08:ae:63: 01:51:a8:a6:49:82:70:21:71:87:34:80:c5:17:c0: d9:e0:ca:2f:2f:97:ae:3e:ca:1c:ac:44:f9:0d:bc: 34:81:1b:13:f9:62:c4:33:b8:e4:1f:29:7b:99:d7: a6:39:6d:04:be:07:f7:3e:c9:94:53:31:07:eb:b9: 52:3f:41:eb:ee:4f:65:2b:c9:b3:11:e9:97:8e:b8: 00:56:c1:7f:a3:dd:a0:f2:bb:c0:48:15:32:3c:47: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2A:D9:7B:6B:21:E0:69:AB:1B:25:CA:B9:DB:6A:58:04:9F:CF:A2 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:07:53:67:b5:39:78:95:ac:a8:a4:54:73:fa:23:c4:50:31: ea:4e:37:4d:c3:52:98:1a:a5:71:95:45:30:a8:62:1e:f0:ec: 76:7a:6d:fb:bc:31:f3:70:f2:1e:ac:0e:4a:bb:0e:20:0b:ef: 65:e4:41:cc:4d:0f:79:c4:0e:40:91:5e:47:df:c3:bc:8c:9c: e6:56:f8:65:03:35:9c:62:1f:17:61:c9:35:96:d3:0b:83:0c: 85:ab:f9:6e:f2:4f:d1:b1:4c:90:b6:e7:8b:92:28:74:e6:1b: 46:7b:dd:97:e1:9f:10:31:69:7a:6b:35:31:cf:53:3d:1d:7f: 4b:17:28:c4:b2:7b:95:7f:34:ea:f9:86:2a:9d:29:bf:f5:9e: dc:21:73:51:e5:1e:f5:36:23:db:fd:3c:62:cb:cb:fa:23:74: 62:62:8d:0b:6d:df:f4:8a:80:9d:b6:2e:d8:ae:98:c8:90:07: 38:f2:9f:26:a2:75:1b:9d:95:46:c6:12:a3:e9:a1:a2:32:d5: e3:94:11:f9:b7:3a:a7:2a:3e:2c:c7:41:1c:32:49:00:0c:0a: 95:5f:91:94:6b:e4:64:fa:6b:b0:5e:ae:18:28:a1:ed:c9:c8: 36:b9:f4:e0:85:ad:eb:1f:2b:5c:c1:ca:9e:82:9c:95:84:96: a1:7b:98:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw OENBN0NFOTAeFw0yNTA3MjUwNzI2MzFaFw0yNTA4MDEwNzI2MzFaMBgxFjAUBgNV BAMTDTY4ODMzMWE3LTBlMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQNev3NLHRIEPQlhlWtvJ6YfsM4WcpxOr0MqhyQrizWzQ2Ga5kx1yF5FMn+jCs S2PHMQEnL6B/KAHKkwUeujElHaMBw6RL2CGEL3E9+PYrC9oQVFHXXOY9bnS/Msio F0IyDZ8vHT8x4VC7KhmlGGHdYI2kQ1htsoZ05oOnDw7flvbjQ2fXvJmrBIyNSJYe G3SyjTWl0XT2oYKJeyWCBKq/YwiuYwFRqKZJgnAhcYc0gMUXwNngyi8vl64+yhys RPkNvDSBGxP5YsQzuOQfKXuZ16Y5bQS+B/c+yZRTMQfruVI/QevuT2UrybMR6ZeO uABWwX+j3aDyu8BIFTI8R3bvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqyrZe2sh 4GmrGyXKudtqWASfz6IwHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MTgwLzc3NDI4N0YyRDZDNzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRp QnhydzRhRHpOd3dqS2ZPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwHU2e1OXiVrKikVHP6I8RQMepON03DUpgapXGVRTCoYh7w7HZ6bfu8 MfNw8h6sDkq7DiAL72XkQcxND3nEDkCRXkffw7yMnOZW+GUDNZxiHxdhyTWW0wuD DIWr+W7yT9GxTJC254uSKHTmG0Z73ZfhnxAxaXprNTHPUz0df0sXKMSye5V/NOr5 hiqdKb/1ntwhc1HlHvU2I9v9PGLLy/ojdGJijQtt3/SKgJ22LtiumMiQBzjynyai dRudlUbGEqPpoaIy1eOUEfm3OqcqPizHQRwySQAMCpVfkZRr5GT6a7Berhgooe3J yDa59OCFresfK1zByp6CnJWElqF7mJE= -----END CERTIFICATE-----Generated at Sat Jul 26 01:59:29 2025 by rpki-client