$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: 3doWeaM0VsXtn5xDWUkqx/LJwmgmfMKsAHP1GUheGeA= Subject key identifier: 02:D6:F6:63:28:09:E5:6A:3A:FD:79:AE:30:07:75:69:C9:45:BE:ED Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 01A7 Signing time: Wed 23 Jul 2025 03:39:08 +0000 Manifest this update: Wed 23 Jul 2025 03:39:08 +0000 Manifest next update: Wed 30 Jul 2025 03:39:08 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: SLSu6AzQuE851Egzw0P1XGzNd0nc3u/7QkdJrqbAiQ0=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Jul 23 03:39:08 2025 GMT Not After : Jul 30 03:39:08 2025 GMT Subject: CN=6880595c-acf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:56:f2:db:13:de:7f:6d:cc:8c:a1:bf:ca: ea:ba:16:ce:df:bb:e9:15:c4:97:24:7d:45:ee:34: a9:0e:22:bd:37:50:72:24:f7:53:89:2f:90:3b:71: 63:75:0d:e4:96:b6:29:8f:02:6e:1a:6f:bb:90:a5: 78:cd:30:f9:65:22:61:1b:1a:f7:cc:58:f2:45:0b: 34:3c:6d:87:c6:80:94:53:6e:8c:4b:10:1b:8f:17: a1:54:7d:00:1a:26:a9:be:ba:1c:8c:d2:bb:28:2e: 7c:64:ab:3c:45:8b:73:37:65:f1:66:4c:63:74:a1: 28:77:f9:79:48:1c:ca:41:a2:d2:43:67:9a:6d:27: 49:6f:1c:f5:dc:06:6d:2e:94:bb:dd:2c:ee:9f:1a: 0a:00:7c:bc:fe:5d:a3:eb:2a:99:14:26:0c:34:b7: bb:7b:42:e8:93:8f:e5:39:2d:91:09:4b:ca:ea:e0: cb:2e:16:f7:04:d6:4c:f1:b1:78:a5:c5:ff:93:09: 19:02:02:6a:88:05:a8:48:a5:d2:5c:3f:f6:93:d9: 77:bf:61:8b:94:01:e0:08:61:42:d0:e1:78:22:22: dd:a1:07:1e:2f:0e:27:91:cc:18:79:b0:1c:d2:ef: b7:db:9d:8d:87:cb:3e:c4:c5:08:85:83:c1:b7:51: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D6:F6:63:28:09:E5:6A:3A:FD:79:AE:30:07:75:69:C9:45:BE:ED X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5d:0f:6e:68:fa:6b:a7:46:a4:1b:2c:32:b0:2a:33:64:22: 7f:85:f8:74:73:00:43:d7:28:bf:5e:f8:fe:d3:ab:a1:65:77: 5b:12:89:fd:15:c0:26:71:84:2a:7e:4f:bc:f8:7e:4e:85:9c: 13:e5:17:c5:d2:14:45:62:26:f5:af:3c:36:7d:56:05:e8:c5: f3:b8:ea:6e:69:87:79:fa:17:17:f7:5d:5a:a1:5d:e8:33:4d: e3:19:4f:01:6e:fd:57:8a:0b:6f:ae:91:e7:c6:a4:67:2f:7d: 86:e7:1d:af:d9:54:e9:80:4b:60:da:a0:97:0a:9e:b0:97:85: 79:6c:46:6d:32:ec:7a:f3:ce:ba:6a:35:58:a4:06:94:32:6b: cb:96:e0:cf:6f:72:55:9f:69:f8:15:da:38:ee:ec:6d:97:fe: 0e:a7:00:35:3e:c5:0a:07:0d:06:a3:c4:cd:d4:79:e7:db:c8: d7:98:e4:f4:e2:4f:8f:78:da:3a:29:90:a6:64:8f:22:8c:73: 28:08:2f:b0:e1:f7:1d:bc:b9:3a:e5:d7:20:52:5b:e5:9d:a9: 8e:2e:85:25:63:c0:8d:9d:e2:c0:eb:f3:de:b0:ea:84:d3:60: 72:80:81:51:c5:a1:7f:c7:5d:6b:56:e9:c6:ba:ad:85:7e:d4: 4e:a7:b8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUwNzIzMDMzOTA4WhcNMjUwNzMwMDMzOTA4WjAYMRYwFAYD VQQDEw02ODgwNTk1Yy1hY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wZW8tsT3n9tzIyhv8rquhbO37vpFcSXJH1F7jSpDiK9N1ByJPdTiS+QO3Fj dQ3klrYpjwJuGm+7kKV4zTD5ZSJhGxr3zFjyRQs0PG2HxoCUU26MSxAbjxehVH0A GiapvrocjNK7KC58ZKs8RYtzN2XxZkxjdKEod/l5SBzKQaLSQ2eabSdJbxz13AZt LpS73SzunxoKAHy8/l2j6yqZFCYMNLe7e0Lok4/lOS2RCUvK6uDLLhb3BNZM8bF4 pcX/kwkZAgJqiAWoSKXSXD/2k9l3v2GLlAHgCGFC0OF4IiLdoQceLw4nkcwYebAc 0u+3252Nh8s+xMUIhYPBt1Ed4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALW9mMo CeVqOv15rjAHdWnJRb7tMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPXQ9uaPprp0akGywysCozZCJ/hfh0cwBD1yi/Xvj+06uhZXdbEon9 FcAmcYQqfk+8+H5OhZwT5RfF0hRFYib1rzw2fVYF6MXzuOpuaYd5+hcX911aoV3o M03jGU8Bbv1XigtvrpHnxqRnL32G5x2v2VTpgEtg2qCXCp6wl4V5bEZtMux68866 ajVYpAaUMmvLluDPb3JVn2n4Fdo47uxtl/4OpwA1PsUKBw0Go8TN1Hnn28jXmOT0 4k+PeNo6KZCmZI8ijHMoCC+w4fcdvLk65dcgUlvlnamOLoUlY8CNneLA6/PesOqE 02BygIFRxaF/x11rVunGuq2FftROp7h5 -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:40 2025 by rpki-client