$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: 0ThH03eXzpIpLfpLpbB4rDzNqXoI76NG95CVULYoyBo= Subject key identifier: 08:25:A5:EE:FE:84:08:DC:E4:AE:96:42:B8:F1:9D:1A:00:03:C8:AD Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 0204 Signing time: Tue 09 Sep 2025 02:23:08 +0000 Manifest this update: Tue 09 Sep 2025 02:23:07 +0000 Manifest next update: Tue 16 Sep 2025 02:23:07 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: yEyOXgOANE83PTwvBoKhZMIeoAkfQ7clJWiYCdHJ7e0=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Sep 9 02:23:07 2025 GMT Not After : Sep 16 02:23:07 2025 GMT Subject: CN=68bf8f8b-8279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:e1:19:98:ee:57:76:e1:6b:6e:a5:a6:f0: 93:74:1b:c7:45:46:73:06:37:6e:60:15:c8:49:81: 6f:b3:cb:c7:0f:a7:40:40:20:85:8f:9e:2e:09:ff: 2e:0a:e1:32:62:cd:10:cf:c8:a8:1f:bd:d2:ff:33: e1:3b:ed:be:bd:12:b8:10:54:f5:8e:08:19:af:14: 43:56:82:6e:28:27:2a:90:f1:5d:5a:5a:17:b2:f3: 3f:1a:80:c8:22:c9:d7:8a:f6:39:65:12:c3:c1:2a: a5:75:e0:a7:f5:db:f4:cc:a5:5f:ba:21:c9:3b:ce: 35:61:9c:d4:32:69:87:30:96:6f:48:bb:c9:aa:3f: 64:87:76:bc:96:e3:82:8e:85:e0:17:d0:21:c2:6c: 78:15:22:3a:77:25:7f:db:95:fe:20:5b:3a:98:58: c2:ef:5f:fe:b8:33:26:37:27:65:64:d9:3a:95:71: ef:a2:71:42:ac:5c:60:3e:11:86:60:d0:a7:7c:dc: 79:b1:57:ac:bd:30:e7:8e:fd:64:1f:7d:07:24:c8: a0:05:6c:e6:a1:04:06:e4:cf:de:ec:97:4e:94:7f: 51:27:e9:d9:a6:1c:a6:db:47:77:f6:49:bd:7f:de: a2:ea:d3:d2:d2:1b:de:7f:b4:3a:84:3b:d1:e1:3b: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:A5:EE:FE:84:08:DC:E4:AE:96:42:B8:F1:9D:1A:00:03:C8:AD X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f2:b4:be:f1:49:13:cd:8f:d0:b4:51:56:24:1d:4e:3b:e3: fc:4f:b7:4b:82:f0:56:5d:31:7f:e3:29:35:5c:1c:42:65:f1: b4:b3:1c:9b:ca:7e:f3:86:c2:09:ac:bb:dc:9f:dd:1c:1c:d8: 71:e1:1b:37:10:d8:f6:2c:0f:bd:7e:60:cd:6b:b1:21:e5:0b: 80:8a:70:a1:ff:c1:0f:23:62:ab:07:75:d3:21:d1:6f:6e:04: a4:25:b8:09:c2:29:f5:fe:a8:86:35:5c:d9:e8:d0:15:3d:fd: 94:7e:dd:8d:b8:00:b7:83:13:39:22:74:e2:b6:9f:dc:71:db: 1c:01:fa:5a:b1:11:a4:27:e6:b3:77:7d:6f:06:41:86:eb:96: 71:b0:b5:a1:c5:33:47:ba:8f:46:67:6b:aa:45:5d:41:bb:d8: f0:48:af:cc:ce:eb:36:27:a7:93:88:97:31:75:72:e4:45:70: 66:c5:41:07:83:01:05:62:d3:01:bd:88:fb:61:f3:76:bb:95: b8:fc:04:8a:be:70:24:3c:f6:d1:0e:79:22:7d:d9:50:fc:b8: 14:db:b6:76:b4:6c:1f:43:1b:8a:d9:93:9d:6a:00:59:8f:95: ef:96:10:48:5c:30:95:55:32:6c:fd:b3:86:5f:d5:1a:a2:7e: f4:f8:df:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwOTA5MDIyMzA3WhcNMjUwOTE2MDIyMzA3WjAYMRYwFAYD VQQDEw02OGJmOGY4Yi04Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs3hGZjuV3bha26lpvCTdBvHRUZzBjduYBXISYFvs8vHD6dAQCCFj54uCf8u CuEyYs0Qz8ioH73S/zPhO+2+vRK4EFT1jggZrxRDVoJuKCcqkPFdWloXsvM/GoDI IsnXivY5ZRLDwSqldeCn9dv0zKVfuiHJO841YZzUMmmHMJZvSLvJqj9kh3a8luOC joXgF9Ahwmx4FSI6dyV/25X+IFs6mFjC71/+uDMmNydlZNk6lXHvonFCrFxgPhGG YNCnfNx5sVesvTDnjv1kH30HJMigBWzmoQQG5M/e7JdOlH9RJ+nZphym20d39km9 f96i6tPS0hvef7Q6hDvR4Tsl/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAglpe7+ hAjc5K6WQrjxnRoAA8itMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/8rS+8UkTzY/QtFFWJB1OO+P8T7dLgvBWXTF/4yk1XBxCZfG0sxyb yn7zhsIJrLvcn90cHNhx4Rs3ENj2LA+9fmDNa7Eh5QuAinCh/8EPI2KrB3XTIdFv bgSkJbgJwin1/qiGNVzZ6NAVPf2Uft2NuAC3gxM5InTitp/ccdscAfpasRGkJ+az d31vBkGG65ZxsLWhxTNHuo9GZ2uqRV1Bu9jwSK/Mzus2J6eTiJcxdXLkRXBmxUEH gwEFYtMBvYj7YfN2u5W4/ASKvnAkPPbRDnkifdlQ/LgU27Z2tGwfQxuK2ZOdagBZ j5XvlhBIXDCVVTJs/bOGX9Uaon70+N/8 -----END CERTIFICATE-----Generated at Thu Sep 11 00:29:26 2025 by rpki-client