$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: tsDBOI8GEggafeq1FtUnHXIGdpyIhoFuDz+uwWhb4RM= Subject key identifier: 62:A4:00:85:A4:66:20:2D:38:0F:42:C1:AE:DA:4E:D0:6F:84:23:8B Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 0363 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 0357 Signing time: Wed 23 Jul 2025 01:26:36 +0000 Manifest this update: Wed 23 Jul 2025 01:26:36 +0000 Manifest next update: Wed 30 Jul 2025 01:26:36 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: gIEW0rsAiQThQQ9IUneSKjW93066nAwwcqVzm1DzJLE=) 2: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: 3s6p6IHgZC45kvL23cNu0YXbOcuA1F+MQwPScSyDlKk=) 3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: +5uBQt4gfgzj6gqFvILfpbTSJXasbFw4oq/rmtG7RAY=) 4: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: VWO2Uwwkr/UYdQgz95fDReq4DoMCxGn/P7kloeUMBUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 867 (0x363) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Jul 23 01:26:36 2025 GMT Not After : Jul 30 01:26:36 2025 GMT Subject: CN=68803a4c-74b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:db:f4:da:04:02:c7:42:20:86:55:50:b1: 0b:bf:a1:2b:7b:13:0d:e2:2a:68:40:01:c2:0f:e7: 3f:c7:13:03:0a:75:0a:e0:29:0d:57:c8:18:71:b7: d2:f3:dd:48:0c:2e:5b:3b:c0:17:55:5b:2d:83:3c: 08:34:92:3c:a5:c5:0d:f9:24:67:71:d0:73:b4:57: ce:79:2c:85:11:65:1b:0f:ef:61:59:3b:37:5b:4c: f0:fb:f5:90:bc:80:b5:c5:e8:08:d7:7f:76:4f:f7: 39:74:6a:8c:0b:0f:fa:8a:05:38:a1:48:57:d4:c6: 11:3e:56:23:47:bc:2b:40:a6:af:aa:be:2b:de:34: 2f:f9:fd:55:00:8a:04:ed:ca:aa:e6:5c:93:49:8d: 04:61:68:0a:cf:39:3f:7a:b8:88:d4:2a:bf:75:8d: 41:2f:ff:b8:f5:f8:4f:3e:b9:88:5b:14:a6:c1:88: e0:1f:ba:a6:33:93:62:46:92:57:c6:67:5f:2d:38: 5e:92:b4:66:2b:d4:7b:b4:84:fa:c7:9a:83:16:b3: d0:04:02:cf:98:80:f8:c2:67:60:7c:6e:60:8a:b0: c3:a7:b1:22:cb:ef:70:68:21:00:12:f0:1e:dd:02: c3:11:f3:30:d4:92:a9:69:7b:d5:5d:53:2e:ac:36: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A4:00:85:A4:66:20:2D:38:0F:42:C1:AE:DA:4E:D0:6F:84:23:8B X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0a:a9:74:b8:7a:e1:5b:90:f6:b8:c8:18:e2:66:4c:18:3d: 22:c9:d8:23:0c:59:b7:19:c5:16:43:f3:97:54:11:e4:e8:94: aa:16:a8:84:a7:b1:01:26:d5:9f:32:6d:de:dd:91:eb:0b:aa: 7b:1e:61:47:fb:a5:5f:00:b2:69:45:4f:4c:24:ea:f0:d8:60: ee:0a:e8:b6:e4:22:22:c3:04:55:14:b0:9e:bb:f4:39:35:13: 6d:8f:d3:7e:b4:cb:b3:ff:a9:4f:80:a1:f8:62:f8:05:c9:f1: be:89:6a:12:2d:29:dd:9e:fc:17:88:b2:2b:47:6d:5f:1c:b2: e9:91:7f:0a:62:9d:2a:20:51:27:18:d9:cb:3b:31:91:56:18: 3f:85:5e:3f:5e:51:32:b5:60:d0:ce:c8:37:d4:7a:b9:91:00: d8:2e:9b:74:25:c7:f3:a4:e9:ba:23:1c:75:d0:28:1c:d5:d8: 18:88:9b:85:a8:dd:80:13:3d:2a:e5:9c:eb:cb:58:ff:f3:7f: db:78:a7:d8:65:c0:d4:36:63:b5:78:c6:bc:49:83:4d:1c:be: 25:fc:48:ff:fe:75:ca:94:21:82:75:8c:15:93:64:67:25:a0: 93:56:96:1d:3b:2e:0f:e6:b8:44:1f:ec:a2:ca:cd:1c:16:d6: 20:86:9e:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjUwNzIzMDEyNjM2WhcNMjUwNzMwMDEyNjM2WjAYMRYwFAYD VQQDEw02ODgwM2E0Yy03NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp//b9NoEAsdCIIZVULELv6ErexMN4ipoQAHCD+c/xxMDCnUK4CkNV8gYcbfS 891IDC5bO8AXVVstgzwINJI8pcUN+SRncdBztFfOeSyFEWUbD+9hWTs3W0zw+/WQ vIC1xegI1392T/c5dGqMCw/6igU4oUhX1MYRPlYjR7wrQKavqr4r3jQv+f1VAIoE 7cqq5lyTSY0EYWgKzzk/eriI1Cq/dY1BL/+49fhPPrmIWxSmwYjgH7qmM5NiRpJX xmdfLThekrRmK9R7tIT6x5qDFrPQBALPmID4wmdgfG5girDDp7Eiy+9waCEAEvAe 3QLDEfMw1JKpaXvVXVMurDbHIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKkAIWk ZiAtOA9Cwa7aTtBvhCOLMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7Cql0uHrhW5D2uMgY4mZMGD0iydgjDFm3GcUWQ/OXVBHk6JSqFqiE p7EBJtWfMm3e3ZHrC6p7HmFH+6VfALJpRU9MJOrw2GDuCui25CIiwwRVFLCeu/Q5 NRNtj9N+tMuz/6lPgKH4YvgFyfG+iWoSLSndnvwXiLIrR21fHLLpkX8KYp0qIFEn GNnLOzGRVhg/hV4/XlEytWDQzsg31Hq5kQDYLpt0JcfzpOm6Ixx10Cgc1dgYiJuF qN2AEz0q5Zzry1j/83/beKfYZcDUNmO1eMa8SYNNHL4l/Ej//nXKlCGCdYwVk2Rn JaCTVpYdOy4P5rhEH+yiys0cFtYghp4V -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:46 2025 by rpki-client