$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: YVkVDVNWhTwSZ3MDaiIRb+g2ViHzc4iDMM7H36U0J6o= Subject key identifier: B0:62:C4:86:A3:D9:6D:0C:9A:B6:B0:D9:37:07:17:B7:08:9E:E9:B7 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 1F Signing time: Sat 19 Jul 2025 08:09:39 +0000 Manifest this update: Sat 19 Jul 2025 08:09:38 +0000 Manifest next update: Sat 26 Jul 2025 08:09:38 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: 2zH19+HVIStyryZ/1lcU1p+ntkoCsLv1bxV4ffFPwvA=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Jul 19 08:09:38 2025 GMT Not After : Jul 26 08:09:38 2025 GMT Subject: CN=687b52c3-a2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:15:7b:76:47:f9:77:a9:52:d5:32:9c:18: e6:91:f2:c8:ff:9a:86:e7:ea:96:d3:97:d0:2c:e9: 4e:e5:52:70:3d:12:66:d1:1a:8b:f8:0d:47:f2:58: c2:0a:ed:00:ef:b0:05:d7:e6:e3:f5:7c:03:07:ca: 97:d1:3f:4a:6c:51:66:6c:cf:78:34:89:47:15:fe: a4:b7:b5:dc:44:1d:3d:07:7e:84:d5:e4:c7:08:4e: d6:73:06:76:9b:42:61:3f:cf:0c:6b:18:e5:6f:23: 97:6e:17:e1:ab:21:cf:04:c6:cb:11:51:67:28:63: bc:de:31:8d:b9:68:35:ee:d8:59:b8:ec:eb:81:7d: d2:91:17:cd:36:f3:e3:b5:fa:e5:05:3b:42:07:63: 7f:34:3e:3c:97:1a:42:1e:7e:c0:99:3c:78:fb:53: bf:ca:02:b1:78:74:68:e9:97:d8:df:0d:2f:26:72: fe:4d:c5:1f:36:de:2c:2e:fd:39:60:da:7e:ad:97: 44:1c:00:1c:1b:38:8a:f1:eb:76:7a:dd:5b:17:0c: 8a:de:df:05:38:19:35:72:60:0f:06:c3:08:ad:bb: a4:d2:f4:14:21:28:b6:2c:f4:08:7a:9f:d4:9f:b9: d7:ea:18:b3:38:cc:ed:0f:a6:56:88:69:3c:3b:2b: 8e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:62:C4:86:A3:D9:6D:0C:9A:B6:B0:D9:37:07:17:B7:08:9E:E9:B7 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:03:bd:b7:40:8b:88:e9:ae:8a:cf:90:a4:72:cb:2d:34:e5: 2c:1f:81:9d:52:1f:66:8a:98:8c:66:a9:92:d4:f9:3e:6b:2e: 0a:e3:ec:8c:fb:ed:e7:93:af:72:12:62:55:4f:37:41:f1:d8: ee:3a:5a:5b:38:ee:a0:2f:7f:50:da:f9:3a:3b:c1:85:5d:88: 0a:fb:4d:39:d1:a9:dd:93:93:0c:cb:e6:18:a2:93:6b:20:93: 05:3e:05:7f:d6:4b:65:9f:61:00:db:b0:b1:05:e3:92:48:7c: 31:4d:7f:4b:73:f9:73:db:ad:ec:dd:15:2b:ba:c2:22:31:dd: c9:8a:4e:4a:29:9d:27:29:2b:79:8e:2c:8b:27:45:77:5c:ed: 87:61:3e:f7:de:fd:75:76:94:34:d5:16:d8:b2:fc:f8:a3:47: 9d:f3:39:02:54:18:83:a2:4b:9c:77:73:2f:a7:e9:43:40:2e: 01:3d:e8:78:56:9c:b9:03:3a:12:a2:80:8d:b5:81:13:12:4c: 60:b2:01:f9:76:57:b2:2e:c1:3b:88:b9:3e:c3:9c:8a:43:c6: b3:22:6b:01:c7:d1:44:b1:d8:ca:5b:8f:02:51:82:7a:66:83: 15:d8:8e:fc:a4:b9:08:0d:1c:98:74:ae:52:3d:21:b0:02:cb: 10:00:56:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA3MTkwODA5MzhaFw0yNTA3MjYwODA5MzhaMBgxFjAUBgNV BAMTDTY4N2I1MmMzLWEyY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHgRV7dkf5d6lS1TKcGOaR8sj/mobn6pbTl9As6U7lUnA9EmbRGov4DUfyWMIK 7QDvsAXX5uP1fAMHypfRP0psUWZsz3g0iUcV/qS3tdxEHT0HfoTV5McITtZzBnab QmE/zwxrGOVvI5duF+GrIc8ExssRUWcoY7zeMY25aDXu2Fm47OuBfdKRF8028+O1 +uUFO0IHY380PjyXGkIefsCZPHj7U7/KArF4dGjpl9jfDS8mcv5NxR823iwu/Tlg 2n6tl0QcABwbOIrx63Z63VsXDIre3wU4GTVyYA8Gwwitu6TS9BQhKLYs9Ah6n9Sf udfqGLM4zO0PplaIaTw7K47jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsGLEhqPZ bQyatrDZNwcXtwie6bcwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEDvbdAi4jprorPkKRyyy005SwfgZ1SH2aKmIxmqZLU+T5rLgrj7Iz7 7eeTr3ISYlVPN0Hx2O46Wls47qAvf1Da+To7wYVdiAr7TTnRqd2TkwzL5hiik2sg kwU+BX/WS2WfYQDbsLEF45JIfDFNf0tz+XPbrezdFSu6wiIx3cmKTkopnScpK3mO LIsnRXdc7YdhPvfe/XV2lDTVFtiy/PijR53zOQJUGIOiS5x3cy+n6UNALgE96HhW nLkDOhKigI21gRMSTGCyAfl2V7IuwTuIuT7DnIpDxrMiawHH0USx2MpbjwJRgnpm gxXYjvykuQgNHJh0rlI9IbACyxAAVr0= -----END CERTIFICATE-----Generated at Sun Jul 20 06:43:25 2025 by rpki-client