$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: 4woo28j/krZRNUDOwrvpElVIxsCi841lRorewXARgXk= Subject key identifier: 01:DD:9D:DB:A8:6F:73:BF:74:38:32:E6:1A:7F:51:59:AB:32:C6:86 Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 02F3 Signing time: Sat 19 Jul 2025 01:45:29 +0000 Manifest this update: Sat 19 Jul 2025 01:45:28 +0000 Manifest next update: Sat 26 Jul 2025 01:45:28 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: eDSWKKkgMwQNA5UIQBY+YL+XvfKe13QsOKprH9xUgjE=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: n1usrOSAiqPPh6QVH101wxyixxXVokFjjpTCh03UzYI=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: yLUp5ssNL8jRCU8pwv3KHHNqOfo0vVixndIFRXexYhU=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: TJhzWTZSa5k8Gql/1DKmw/NfXVCNcWBU1ddvojpFVGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945, serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Jul 19 01:45:28 2025 GMT Not After : Jul 26 01:45:28 2025 GMT Subject: CN=687af8b8-e55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:84:da:23:6e:ec:cd:d2:df:5e:20:f2:b7: 04:b2:01:10:69:96:3f:68:32:0e:b1:07:2b:19:82: f1:2f:41:c6:10:30:21:50:13:09:31:35:35:a3:26: b7:0f:9c:17:69:be:66:05:7f:ea:e2:53:a8:06:c1: c8:d1:4b:e8:9e:16:35:64:9f:eb:45:d3:60:6c:4a: fc:89:82:19:e7:e9:5e:20:f0:99:81:8f:f8:12:94: 10:4d:4e:aa:9d:39:03:b5:3e:8e:bf:fe:3f:a7:be: b9:de:7e:d7:08:45:5d:95:ba:00:66:71:74:80:59: a1:7b:a1:33:90:87:5a:f5:96:e1:40:ef:c3:4f:84: 37:14:3d:c5:fd:e9:41:69:43:c4:99:6b:b2:95:53: d3:81:b5:e2:fd:8a:39:44:11:89:45:49:8d:d5:6e: 80:7e:67:18:5a:30:34:90:7a:47:2a:92:aa:70:cd: eb:41:42:4b:9a:42:1b:b1:ca:a4:e7:5d:e0:ca:80: f9:a0:4f:99:78:d1:1b:eb:79:e1:16:97:b0:45:30: 46:c5:40:ac:66:d2:53:4e:ee:62:0c:e9:59:da:f3: 1f:17:8f:71:2d:25:ea:b8:9b:f2:03:c5:53:a5:fb: ac:0b:ea:93:33:1e:c6:e7:ff:8b:46:e5:85:25:50: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DD:9D:DB:A8:6F:73:BF:74:38:32:E6:1A:7F:51:59:AB:32:C6:86 X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:27:78:83:24:db:43:61:7a:59:07:00:0d:ee:02:2b:13:94: 4f:cb:dc:19:f5:44:c4:f4:56:75:47:0f:db:88:13:af:ed:e6: c8:05:4a:51:07:4f:d0:98:58:a8:cd:9a:2d:8d:5e:16:e9:c6: 3b:0e:23:15:7e:be:6d:12:2c:d4:3b:fe:48:55:f0:09:64:1f: f7:51:da:64:03:4e:69:bd:f3:b2:62:3f:59:23:52:2c:09:c7: 6b:46:ef:54:8b:9d:0e:5c:a1:2c:07:b3:5e:11:3d:a3:7a:f4: 70:88:99:0f:2f:48:a8:ee:73:21:b3:c9:ec:31:db:a0:58:25: 61:65:aa:95:7b:c2:ef:d1:88:a5:a8:30:0f:e0:d4:df:76:3b: 10:74:f3:72:ef:0f:5b:f5:4b:42:ae:aa:76:60:76:76:fe:68: 35:6d:24:aa:75:98:c6:3e:be:52:25:a1:5e:66:50:a2:ee:8e: 2a:fb:03:98:9d:bf:84:54:dd:f7:0e:51:67:25:2c:e9:84:66: 5f:39:15:b4:cf:d2:11:bb:06:b8:80:fa:94:0a:49:ad:95:c9: 70:a5:ee:6f:fa:f1:ff:4d:f2:c7:2f:60:d4:cc:75:6b:83:8d: 66:9a:13:03:37:46:b6:16:5a:78:0e:c9:7a:59:0c:63:d6:f7: b3:3f:cb:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjUwNzE5MDE0NTI4WhcNMjUwNzI2MDE0NTI4WjAYMRYwFAYD VQQDEw02ODdhZjhiOC1lNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFCE2iNu7M3S314g8rcEsgEQaZY/aDIOsQcrGYLxL0HGEDAhUBMJMTU1oya3 D5wXab5mBX/q4lOoBsHI0UvonhY1ZJ/rRdNgbEr8iYIZ5+leIPCZgY/4EpQQTU6q nTkDtT6Ov/4/p7653n7XCEVdlboAZnF0gFmhe6EzkIda9ZbhQO/DT4Q3FD3F/elB aUPEmWuylVPTgbXi/Yo5RBGJRUmN1W6AfmcYWjA0kHpHKpKqcM3rQUJLmkIbscqk 513gyoD5oE+ZeNEb63nhFpewRTBGxUCsZtJTTu5iDOlZ2vMfF49xLSXquJvyA8VT pfusC+qTMx7G5/+LRuWFJVASuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHdnduo b3O/dDgy5hp/UVmrMsaGMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbJ3iDJNtDYXpZBwAN7gIrE5RPy9wZ9UTE9FZ1Rw/biBOv7ebIBUpR B0/QmFiozZotjV4W6cY7DiMVfr5tEizUO/5IVfAJZB/3UdpkA05pvfOyYj9ZI1Is CcdrRu9Ui50OXKEsB7NeET2jevRwiJkPL0io7nMhs8nsMdugWCVhZaqVe8Lv0Yil qDAP4NTfdjsQdPNy7w9b9UtCrqp2YHZ2/mg1bSSqdZjGPr5SJaFeZlCi7o4q+wOY nb+EVN33DlFnJSzphGZfORW0z9IRuwa4gPqUCkmtlclwpe5v+vH/TfLHL2DUzHVr g41mmhMDN0a2Flp4Dsl6WQxj1vezP8u9 -----END CERTIFICATE-----Generated at Sun Jul 20 03:31:05 2025 by rpki-client