$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: Lh45TIuKCI9VT+6wBXDa4XCLp+unUtA6gTAVNy/oQ/c= Subject key identifier: 09:FE:82:A1:71:7F:8A:93:3B:4A:CE:A2:61:69:3A:E8:FB:E3:EA:3C Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 070B Signing time: Mon 08 Sep 2025 21:54:03 +0000 Manifest this update: Mon 08 Sep 2025 21:54:03 +0000 Manifest next update: Mon 15 Sep 2025 21:54:03 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: nf/5+QosD7tzOuEHzuuQHcGKCRJFlrh0NOlx3Ed5Z8A=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: Sep 8 21:54:03 2025 GMT Not After : Sep 15 21:54:03 2025 GMT Subject: CN=68bf507b-d4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:c2:c5:86:ef:1a:07:3f:76:d8:19:c3:f8: 41:0e:c8:7d:7d:a9:65:3e:62:95:a4:80:03:d3:af: be:ef:6a:69:c9:39:38:62:6e:11:15:9d:da:9d:28: e8:4f:b6:82:79:0d:7f:bd:40:4c:77:d1:c8:1b:d0: 72:ee:24:66:62:1e:2e:86:85:7e:42:25:e4:bb:8c: 65:f3:1f:ed:7a:1b:c7:c0:6f:f0:5a:90:8b:04:c4: 4d:eb:d6:13:3e:85:42:b4:d4:f4:2c:1a:ce:88:6d: ab:7c:7d:65:bb:96:f3:0b:77:d6:73:7e:8a:dc:f3: 75:cc:de:eb:ec:0e:2e:54:d6:ac:e5:a4:ea:8f:f3: 4d:ee:e9:11:e9:a6:21:22:01:ac:81:d7:c2:f0:c7: 6d:16:d5:bd:9f:f3:d6:99:4e:f1:46:86:08:07:92: df:8c:80:df:50:aa:11:40:31:4e:95:25:c5:6f:84: d2:c9:0b:91:8b:f1:2f:5a:e2:3d:be:33:0c:bb:4a: 35:8c:25:03:7c:6d:dd:92:04:44:d8:61:0a:97:d4: a5:18:58:3e:66:35:fd:f2:04:05:bd:ae:9d:8d:0c: 49:fa:50:bf:90:18:be:66:ec:31:a1:8e:96:f8:48: b8:a0:3d:24:dc:8d:01:e7:80:32:a3:90:66:5b:5a: 96:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:82:A1:71:7F:8A:93:3B:4A:CE:A2:61:69:3A:E8:FB:E3:EA:3C X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:12:f8:15:6e:13:38:2a:c3:8f:f3:6d:e4:86:c7:e5:cf:c4: 32:8c:fa:5d:b4:cb:12:55:7f:ee:53:5c:fe:97:8a:cc:46:b0: 21:41:a8:d8:2b:e6:21:e2:1c:68:b5:5b:33:32:a3:3d:14:7b: 88:8a:0a:f9:50:01:48:b2:5c:ca:a5:99:6d:8a:74:b1:81:e5: 46:0c:6a:46:cd:d3:0a:8d:09:a2:56:5b:2f:a4:51:5e:73:e2: 3f:c4:b0:ab:f7:e7:1b:32:0f:e1:20:af:ca:4f:b8:af:8c:27: 3d:88:cb:6a:e4:e9:22:ea:c7:ad:66:7f:e9:55:78:f4:61:14: 12:9c:08:78:0e:4c:3f:c1:72:8f:5e:c5:7b:16:49:71:74:00: a1:a9:41:d7:d2:cc:e5:14:21:ff:62:d2:d7:5d:e9:ab:f4:4f: 58:27:5c:5c:4c:60:a5:50:1c:fc:18:f6:a8:0d:bb:08:d4:62: b2:fd:1e:46:90:d2:18:b9:92:b5:a5:5e:03:cc:c3:b4:e9:a9: 0e:8b:1e:15:a2:85:c1:80:00:c3:39:4b:ca:ca:fb:13:1c:a8: 30:cc:22:69:09:97:b1:fd:8a:06:75:c4:ba:f8:86:1a:c7:29: ea:c0:22:35:35:85:76:34:2e:14:f7:cb:d2:39:5b:cb:73:a8: 8a:46:33:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjUwOTA4MjE1NDAzWhcNMjUwOTE1MjE1NDAzWjAYMRYwFAYD VQQDEw02OGJmNTA3Yi1kNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWPCxYbvGgc/dtgZw/hBDsh9fallPmKVpIAD06++72ppyTk4Ym4RFZ3anSjo T7aCeQ1/vUBMd9HIG9By7iRmYh4uhoV+QiXku4xl8x/tehvHwG/wWpCLBMRN69YT PoVCtNT0LBrOiG2rfH1lu5bzC3fWc36K3PN1zN7r7A4uVNas5aTqj/NN7ukR6aYh IgGsgdfC8MdtFtW9n/PWmU7xRoYIB5LfjIDfUKoRQDFOlSXFb4TSyQuRi/EvWuI9 vjMMu0o1jCUDfG3dkgRE2GEKl9SlGFg+ZjX98gQFva6djQxJ+lC/kBi+ZuwxoY6W +Ei4oD0k3I0B54Ayo5BmW1qW9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAn+gqFx f4qTO0rOomFpOuj74+o8MB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpEvgVbhM4KsOP823khsflz8QyjPpdtMsSVX/uU1z+l4rMRrAhQajY K+Yh4hxotVszMqM9FHuIigr5UAFIslzKpZltinSxgeVGDGpGzdMKjQmiVlsvpFFe c+I/xLCr9+cbMg/hIK/KT7ivjCc9iMtq5Oki6setZn/pVXj0YRQSnAh4Dkw/wXKP XsV7FklxdAChqUHX0szlFCH/YtLXXemr9E9YJ1xcTGClUBz8GPaoDbsI1GKy/R5G kNIYuZK1pV4DzMO06akOix4VooXBgADDOUvKyvsTHKgwzCJpCZex/YoGdcS6+IYa xynqwCI1NYV2NC4U98vSOVvLc6iKRjPG -----END CERTIFICATE-----Generated at Tue Sep 9 15:35:20 2025 by rpki-client