$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: EeHyYSdUbMWz5PRrJ0Xg1yF01t8TavdSR8F2MqP0wDw= Subject key identifier: 9D:B1:EB:D8:E7:79:89:ED:04:D6:85:B9:C4:10:5A:B1:AB:7C:EF:D2 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0627 Signing time: Fri 18 Jul 2025 23:04:28 +0000 Manifest this update: Fri 18 Jul 2025 23:04:28 +0000 Manifest next update: Fri 25 Jul 2025 23:04:28 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: SWqoncilvAm1u6k0uZm0EHlOGJw8UENizagf6EMZJ64=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Jul 18 23:04:28 2025 GMT Not After : Jul 25 23:04:28 2025 GMT Subject: CN=687ad2fc-339b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:89:8e:b5:fe:8c:cb:83:7f:7c:79:92:5d: 0e:81:53:8a:84:fe:01:91:0b:22:a3:93:40:a0:30: 4f:f2:7b:40:e3:e3:2c:90:3c:97:fc:83:ec:69:fd: a8:9b:bc:b2:14:a3:60:cc:ef:97:a9:b6:e5:c5:99: 74:06:e4:29:e5:d1:55:b6:bf:20:dd:2f:eb:8c:3c: f3:4e:e5:9a:6b:c7:7e:74:3b:ba:d6:80:88:d9:50: 9e:2d:4d:e0:f1:68:e6:47:01:9a:a4:0b:83:42:33: de:77:18:82:f8:82:26:3c:38:d1:f0:4e:55:cb:d9: fb:97:34:e7:74:bb:53:f3:38:9e:9c:2b:b5:c1:1b: bc:35:68:2f:74:de:1b:c1:b9:43:8f:b8:82:68:1a: 8b:41:87:8b:23:5c:b4:82:14:64:33:09:0f:6c:97: 5d:bc:37:9b:db:ee:1d:22:1a:8f:f0:9f:f6:fc:4a: 0f:c7:ac:a3:53:8a:cd:84:b6:87:20:2f:d8:e1:47: 31:ff:8d:c8:34:0e:cd:3c:7e:c4:36:51:3d:d6:47: 17:ab:c4:7a:82:a6:f6:11:16:81:00:1a:30:e9:d3: 19:70:31:90:f5:fe:7f:fb:67:62:a5:7f:c1:ea:f6: 24:e4:f0:e6:28:68:f1:30:ba:52:6f:9a:9e:40:47: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B1:EB:D8:E7:79:89:ED:04:D6:85:B9:C4:10:5A:B1:AB:7C:EF:D2 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:21:2d:a9:d1:60:f9:00:2d:c4:2e:11:e7:9a:3d:37:98:4c: 66:eb:c9:76:32:97:ed:1a:15:0a:a9:31:b5:2d:65:df:84:f3: 59:2b:b5:77:21:85:ee:74:31:a5:1a:07:d5:ef:04:fd:4d:91: eb:b0:4d:0b:fe:c9:67:46:88:29:ca:5c:44:40:80:ac:51:72: 2c:03:a4:ec:80:27:7d:b5:36:16:e3:f6:3a:a9:cb:5c:3d:a4: 50:09:d8:24:88:0a:9f:60:35:2c:4e:78:c5:9c:aa:1b:1a:ff: fd:36:a5:70:dc:94:39:f5:5d:1f:e8:04:97:ac:50:6e:b1:86: 75:0d:a7:c8:e0:02:aa:a3:61:99:50:fe:af:6c:4d:96:ea:17: 97:55:ff:b0:2a:47:83:a0:c6:8c:6b:df:06:7a:14:57:42:cc: ea:86:1e:31:98:9f:da:0f:12:34:b0:a1:13:d2:0f:2b:84:1f: 3e:3d:a6:e4:1a:da:bf:a3:dc:42:1f:e8:5c:da:33:78:55:c7: ac:20:50:96:5f:b0:1e:f5:41:f6:43:34:07:09:f2:5c:ca:97: f6:ae:8c:22:8f:fe:e5:3f:c6:e3:74:a2:73:5a:df:e3:21:18: 55:7b:36:cf:24:30:2e:32:a6:77:5f:1c:fe:41:c0:d0:ab:c2: 3e:70:6a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwNzE4MjMwNDI4WhcNMjUwNzI1MjMwNDI4WjAYMRYwFAYD VQQDEw02ODdhZDJmYy0zMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo6JjrX+jMuDf3x5kl0OgVOKhP4BkQsio5NAoDBP8ntA4+MskDyX/IPsaf2o m7yyFKNgzO+XqbblxZl0BuQp5dFVtr8g3S/rjDzzTuWaa8d+dDu61oCI2VCeLU3g 8WjmRwGapAuDQjPedxiC+IImPDjR8E5Vy9n7lzTndLtT8zienCu1wRu8NWgvdN4b wblDj7iCaBqLQYeLI1y0ghRkMwkPbJddvDeb2+4dIhqP8J/2/EoPx6yjU4rNhLaH IC/Y4Ucx/43INA7NPH7ENlE91kcXq8R6gqb2ERaBABow6dMZcDGQ9f5/+2dipX/B 6vYk5PDmKGjxMLpSb5qeQEd1NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2x69jn eYntBNaFucQQWrGrfO/SMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4IS2p0WD5AC3ELhHnmj03mExm68l2MpftGhUKqTG1LWXfhPNZK7V3 IYXudDGlGgfV7wT9TZHrsE0L/slnRogpylxEQICsUXIsA6TsgCd9tTYW4/Y6qctc PaRQCdgkiAqfYDUsTnjFnKobGv/9NqVw3JQ59V0f6ASXrFBusYZ1DafI4AKqo2GZ UP6vbE2W6heXVf+wKkeDoMaMa98GehRXQszqhh4xmJ/aDxI0sKET0g8rhB8+Pabk Gtq/o9xCH+hc2jN4VcesIFCWX7Ae9UH2QzQHCfJcypf2rowij/7lP8bjdKJzWt/j IRhVezbPJDAuMqZ3Xxz+QcDQq8I+cGrr -----END CERTIFICATE-----Generated at Sun Jul 20 07:03:43 2025 by rpki-client