$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: TgTnFr7pjtFbCIkxcTgucS+v+4N71qhb/egNhA0yam0= Subject key identifier: 05:C4:A3:C3:F7:AD:19:0A:15:BA:21:89:C8:C4:3F:FF:1C:78:95:FE Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 06FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 06E1 Signing time: Sun 20 Jul 2025 22:13:00 +0000 Manifest this update: Sun 20 Jul 2025 22:12:59 +0000 Manifest next update: Sun 27 Jul 2025 22:12:59 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: fylNp0NcxaWwMZQCe61gSLVTL7SdK+z1aVmg6nIhZ/k=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1790 (0x6fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Jul 20 22:12:59 2025 GMT Not After : Jul 27 22:12:59 2025 GMT Subject: CN=687d69ec-f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:6d:44:0d:86:3c:3c:5e:c2:f8:f3:24:8e: 88:38:4f:fb:ef:2c:1b:45:e0:f4:e8:e1:d4:3a:32: 81:fc:2e:32:4c:38:ae:1a:7c:45:10:2c:68:e3:eb: 70:c5:5d:78:49:1f:88:8d:5d:0e:21:c8:e2:ff:7a: c9:70:69:00:f5:38:a3:ef:25:d6:fd:f0:26:8f:ba: cf:fb:5a:4a:98:c6:15:06:44:4b:54:cf:d8:f0:9d: 11:7d:30:33:b6:43:42:d5:3b:cc:f8:74:44:cb:01: 69:d2:02:03:c5:ac:d6:ce:17:99:e6:d5:a0:15:a4: 9b:54:13:09:45:d1:80:10:4c:c1:24:3b:59:e8:55: b9:90:30:16:30:27:30:b4:18:44:74:94:ac:ab:a7: f6:69:88:5b:7a:4a:5a:a0:ad:b5:e0:e6:6d:e7:cd: 86:18:ac:ca:7c:67:f2:ae:78:f5:5d:09:4b:a4:77: 60:d9:6c:a7:03:ab:69:10:8a:a2:4a:75:9c:38:d3: 6d:02:35:da:b9:13:3e:17:d7:ca:21:b5:07:99:87: 1b:70:02:78:8d:83:01:d1:b9:4e:8e:06:55:78:e8: 88:73:d5:d4:16:ac:6f:69:34:80:3e:db:3b:c4:86: b9:ef:86:3b:ce:a0:8a:e9:fa:80:ff:ff:6f:6e:12: a6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:A3:C3:F7:AD:19:0A:15:BA:21:89:C8:C4:3F:FF:1C:78:95:FE X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:6e:40:18:c8:31:ed:7f:2e:d4:e2:58:e8:33:04:af:ff:35: 37:b2:90:b4:f1:c6:87:aa:ca:fa:ad:b5:be:b4:a0:60:43:d2: 29:03:66:e9:70:c9:54:9f:9f:1c:de:d1:7d:c0:fb:66:83:f9: 73:0d:e6:96:a0:ba:eb:a0:d7:7e:0b:3d:ed:38:92:37:2b:97: 5a:01:02:bc:d5:db:44:70:c7:c7:3a:92:2e:e3:02:1d:59:f6: ee:a3:47:15:a5:70:a9:58:e2:a5:8d:8f:ee:a3:3d:15:0a:c6: 26:85:ff:a3:e7:37:ec:0a:d9:4f:e0:3d:71:7b:d8:1b:7c:03: fe:1e:e2:ae:2b:bd:b8:ad:26:60:d0:63:73:04:b7:53:3d:76: 46:7e:ac:9d:de:af:6a:0d:2f:37:da:1e:cd:f7:d3:a7:22:fb: ff:15:87:28:72:07:7e:67:65:b3:82:ec:39:b0:a9:d4:d1:59: 9c:ad:dc:50:74:3c:c4:ef:ef:c4:41:45:92:65:73:df:21:d9: 21:58:3a:d8:75:72:97:2c:8c:36:9e:dc:fd:e1:e6:c9:48:8a: bb:66:a2:23:e0:b6:ea:36:68:a2:cc:9e:fa:c7:27:ac:ee:e0: 59:89:d6:f8:80:8d:d4:b3:0e:ac:2c:60:f5:1c:ca:4b:c0:06: 3d:7c:e3:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwNzIwMjIxMjU5WhcNMjUwNzI3MjIxMjU5WjAYMRYwFAYD VQQDEw02ODdkNjllYy1mNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjltRA2GPDxewvjzJI6IOE/77ywbReD06OHUOjKB/C4yTDiuGnxFECxo4+tw xV14SR+IjV0OIcji/3rJcGkA9Tij7yXW/fAmj7rP+1pKmMYVBkRLVM/Y8J0RfTAz tkNC1TvM+HREywFp0gIDxazWzheZ5tWgFaSbVBMJRdGAEEzBJDtZ6FW5kDAWMCcw tBhEdJSsq6f2aYhbekpaoK214OZt582GGKzKfGfyrnj1XQlLpHdg2WynA6tpEIqi SnWcONNtAjXauRM+F9fKIbUHmYcbcAJ4jYMB0blOjgZVeOiIc9XUFqxvaTSAPts7 xIa574Y7zqCK6fqA//9vbhKmewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXEo8P3 rRkKFbohicjEP/8ceJX+MB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUbkAYyDHtfy7U4ljoMwSv/zU3spC08caHqsr6rbW+tKBgQ9IpA2bp cMlUn58c3tF9wPtmg/lzDeaWoLrroNd+Cz3tOJI3K5daAQK81dtEcMfHOpIu4wId Wfbuo0cVpXCpWOKljY/uoz0VCsYmhf+j5zfsCtlP4D1xe9gbfAP+HuKuK724rSZg 0GNzBLdTPXZGfqyd3q9qDS832h7N99OnIvv/FYcocgd+Z2Wzguw5sKnU0VmcrdxQ dDzE7+/EQUWSZXPfIdkhWDrYdXKXLIw2ntz94ebJSIq7ZqIj4LbqNmiizJ76xyes 7uBZidb4gI3Usw6sLGD1HMpLwAY9fOMZ -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:44 2025 by rpki-client