$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: wWQ6cUi0BGymVEA7Sb2n5P88zNpJnKK/WmYXNSMgWOQ= Subject key identifier: AB:C0:7A:AA:A1:89:6D:69:85:65:83:16:4A:D1:0D:B0:02:EE:B6:3A Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 0679 Signing time: Sun 20 Jul 2025 22:37:35 +0000 Manifest this update: Sun 20 Jul 2025 22:37:34 +0000 Manifest next update: Sun 27 Jul 2025 22:37:34 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: fy/NfKH2fhd5GX5mhV24OIAwqPhoPETDYJMQrm4tJXI=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (hash: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Jul 20 22:37:34 2025 GMT Not After : Jul 27 22:37:34 2025 GMT Subject: CN=687d6fae-6c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:4e:84:50:09:76:b8:40:11:fc:44:c1:21: 82:4a:64:84:00:20:27:4c:2c:4f:48:d7:69:69:5b: 26:dc:e8:b7:d1:40:c3:f1:0d:28:f8:22:38:6c:61: 8f:2e:8b:4d:72:c4:a5:16:35:6b:a3:51:cd:d1:1a: a1:c6:97:59:53:a6:ee:34:f9:bc:16:02:b2:1d:fe: 4c:40:29:92:f7:af:87:78:63:3e:88:39:94:b1:2b: 1e:61:d6:e3:2d:bf:8b:3e:2b:d7:c3:fb:09:c4:e5: 6d:4d:1f:6f:da:50:95:9f:19:29:71:b3:54:14:6c: d8:23:3f:d9:f4:b6:bd:55:d3:9e:5c:8d:34:72:b5: db:ae:4b:a3:b5:13:ac:fd:cb:ed:04:ae:fa:b6:80: 9f:83:96:50:dd:d4:27:40:cc:73:83:70:ca:be:cd: 99:71:ef:03:7b:3f:7d:cd:67:e4:21:d5:a6:f9:08: 5e:8c:d7:5e:15:cc:67:d1:4c:21:f5:b8:8d:e4:c8: ca:85:e7:64:c1:dc:1b:73:3d:ed:a6:56:94:6e:23: e8:2e:ae:f4:8a:46:78:ec:b6:c1:5b:e3:72:18:81: 09:56:8b:00:88:98:d7:84:b7:f8:73:d0:f5:69:9e: 91:5e:7b:dd:0a:2c:2f:5f:5d:ec:6e:b3:c3:99:7b: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C0:7A:AA:A1:89:6D:69:85:65:83:16:4A:D1:0D:B0:02:EE:B6:3A X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d9:d5:24:fb:c2:17:69:75:2c:09:e2:3a:2b:1c:6a:85:30: 19:ae:43:5f:25:e1:de:79:b7:27:a1:39:ec:14:f4:fd:3c:78: e9:c7:e7:5c:ee:d7:70:51:28:5e:0d:a0:8a:b4:b4:d8:9b:9a: f0:a2:ea:20:fd:f2:d8:f9:33:fb:46:53:44:f7:47:f3:ac:62: 53:53:fd:3d:8d:ec:05:0c:b1:0e:bd:fe:7c:2c:83:dd:b0:a7: e2:a8:2b:66:fd:f5:f5:3d:a9:f2:c5:f8:76:97:ad:9b:8d:bb: d4:c7:4a:8f:5f:b3:74:f6:e8:f4:55:70:2f:8a:0a:a7:4c:50: dd:54:39:30:d1:0a:d5:2c:48:1c:58:9e:7f:a0:2d:34:6e:c3: 91:95:ae:91:ee:9e:4c:a6:88:7c:bd:da:e4:23:84:3a:6a:bf: 3b:92:9c:3e:61:3b:22:b7:b4:11:ee:55:67:db:ff:19:a3:69: 01:29:b8:80:96:fb:4a:69:25:f3:b4:2a:7c:10:94:75:3c:ae: 75:3c:e5:04:de:b6:ed:d3:b7:c1:a7:2b:50:a6:d4:12:c0:a5: 79:95:5d:79:a9:a7:a8:0d:e5:30:a5:20:ce:cc:c1:b5:af:f7: 4e:26:90:04:27:0a:48:76:92:72:77:66:6e:23:b8:e1:ca:6a: de:a4:63:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNzIwMjIzNzM0WhcNMjUwNzI3MjIzNzM0WjAYMRYwFAYD VQQDEw02ODdkNmZhZS02Yzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVROhFAJdrhAEfxEwSGCSmSEACAnTCxPSNdpaVsm3Oi30UDD8Q0o+CI4bGGP LotNcsSlFjVro1HN0RqhxpdZU6buNPm8FgKyHf5MQCmS96+HeGM+iDmUsSseYdbj Lb+LPivXw/sJxOVtTR9v2lCVnxkpcbNUFGzYIz/Z9La9VdOeXI00crXbrkujtROs /cvtBK76toCfg5ZQ3dQnQMxzg3DKvs2Zce8Dez99zWfkIdWm+QhejNdeFcxn0Uwh 9biN5MjKhedkwdwbcz3tplaUbiPoLq70ikZ47LbBW+NyGIEJVosAiJjXhLf4c9D1 aZ6RXnvdCiwvX13sbrPDmXty+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvAeqqh iW1phWWDFkrRDbAC7rY6MB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM2dUk+8IXaXUsCeI6KxxqhTAZrkNfJeHeebcnoTnsFPT9PHjpx+dc 7tdwUSheDaCKtLTYm5rwouog/fLY+TP7RlNE90fzrGJTU/09jewFDLEOvf58LIPd sKfiqCtm/fX1Panyxfh2l62bjbvUx0qPX7N09uj0VXAvigqnTFDdVDkw0QrVLEgc WJ5/oC00bsORla6R7p5Mpoh8vdrkI4Q6ar87kpw+YTsit7QR7lVn2/8Zo2kBKbiA lvtKaSXztCp8EJR1PK51POUE3rbt07fBpytQptQSwKV5lV15qaeoDeUwpSDOzMG1 r/dOJpAEJwpIdpJyd2ZuI7jhymrepGO5 -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:19 2025 by rpki-client