$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: IW/FHmQiAU48RhrBamKa/JShWrBp0H7ZfHMu1O7iqFQ= Subject key identifier: FE:CC:65:C2:6F:AF:D1:46:F4:28:C3:6F:0F:D0:4E:FD:65:8E:1E:BF Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0ABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0AAF Signing time: Sun 14 Sep 2025 19:40:22 +0000 Manifest this update: Sun 14 Sep 2025 19:40:21 +0000 Manifest next update: Sun 21 Sep 2025 19:40:21 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: wusiEwwgAoaEnxJ15QzukJ/t5Miyneno87QpLt2tJJU=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Sep 2025 19:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2748 (0xabc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Sep 14 19:40:21 2025 GMT Not After : Sep 21 19:40:21 2025 GMT Subject: CN=68c71a25-3f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:0e:38:df:e5:b5:c6:e1:62:82:f5:d9:47: 7a:1d:45:d8:74:5f:23:20:74:1b:07:42:37:98:36: 59:28:64:3c:69:48:4e:af:8e:a7:98:a9:14:0a:b0: ab:03:2f:ca:28:a2:62:34:c6:70:1d:55:c3:0b:0a: 00:de:ec:42:63:68:9f:d9:40:09:64:21:71:0e:8d: f5:ea:01:0e:86:e7:ae:c2:5a:32:b8:bc:10:76:72: 29:3d:34:98:48:2e:40:0f:b6:fc:5c:ef:06:d6:1c: 9b:ee:94:86:a7:3d:54:77:d7:ba:76:c9:1d:a3:cb: d8:67:90:6d:ff:2f:8e:2a:b1:32:e8:26:d2:0f:45: 49:61:50:70:d6:95:4b:28:95:0d:3b:b2:2d:18:06: da:f2:e0:6d:68:33:49:99:4b:2a:d2:e7:d0:8b:2a: 93:e8:b2:53:b7:ec:5f:8d:fd:5c:80:cf:e8:30:ac: 32:9c:90:00:28:b9:23:3b:6c:5c:16:e7:d5:28:79: 46:fd:1c:e6:9e:e8:6d:58:c5:a7:84:a4:3a:85:2e: cb:aa:33:f8:95:e2:ff:6e:8e:ba:61:9b:63:bd:89: b6:6e:a3:b3:f5:59:9b:41:51:f2:8d:bb:4c:e5:b5: e8:3a:89:e7:7a:14:f2:a0:44:3b:cf:1d:c8:b7:ef: cc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CC:65:C2:6F:AF:D1:46:F4:28:C3:6F:0F:D0:4E:FD:65:8E:1E:BF X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:81:7b:9d:82:80:9b:7b:28:16:2c:17:e6:b5:64:4f:ed:4e: 0b:27:16:32:f2:dc:54:af:14:69:42:e5:0f:ab:d7:89:4f:e2: 7c:73:e2:59:56:15:a7:81:93:98:8d:43:7b:28:8c:19:5a:e5: 42:6c:97:97:ef:5d:0a:be:77:8b:fd:98:63:25:8c:ce:e9:09: e1:54:ec:39:46:b9:ac:b9:fc:39:7a:3f:d5:f4:6a:74:82:d0: 0f:bf:1d:82:28:26:11:87:65:a1:2d:9c:2c:52:36:e7:38:04: a6:66:64:0b:21:22:ad:7e:ce:76:77:89:34:fc:4a:f9:e2:03: bf:33:2a:de:f1:32:c7:ee:48:ef:f3:f5:31:5e:db:bd:f3:f1: f1:b0:c0:69:1f:cd:ac:80:a4:57:b9:db:bc:b7:4d:4d:20:34: 73:34:e4:f2:30:d3:fa:41:62:83:ef:2c:34:bf:05:3d:0a:10: 53:cc:05:47:b8:bc:f1:b5:77:da:f2:9d:dd:bd:fd:70:47:a0: 9d:d3:9e:37:a7:b4:66:2d:71:69:fa:b9:35:51:4e:03:05:b2: c0:13:62:d7:1a:a9:71:ce:fb:3d:dc:b9:48:43:00:c1:f3:73: f2:76:a0:d6:1d:e6:e8:9d:df:bb:dc:0a:ce:d5:ce:d7:03:cf: fd:39:2b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwOTE0MTk0MDIxWhcNMjUwOTIxMTk0MDIxWjAYMRYwFAYD VQQDEw02OGM3MWEyNS0zZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uAOON/ltcbhYoL12Ud6HUXYdF8jIHQbB0I3mDZZKGQ8aUhOr46nmKkUCrCr Ay/KKKJiNMZwHVXDCwoA3uxCY2if2UAJZCFxDo316gEOhueuwloyuLwQdnIpPTSY SC5AD7b8XO8G1hyb7pSGpz1Ud9e6dskdo8vYZ5Bt/y+OKrEy6CbSD0VJYVBw1pVL KJUNO7ItGAba8uBtaDNJmUsq0ufQiyqT6LJTt+xfjf1cgM/oMKwynJAAKLkjO2xc FufVKHlG/RzmnuhtWMWnhKQ6hS7LqjP4leL/bo66YZtjvYm2bqOz9VmbQVHyjbtM 5bXoOonnehTyoEQ7zx3It+/MewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7MZcJv r9FG9CjDbw/QTv1ljh6/MB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAgXudgoCbeygWLBfmtWRP7U4LJxYy8txUrxRpQuUPq9eJT+J8c+JZ VhWngZOYjUN7KIwZWuVCbJeX710KvneL/ZhjJYzO6QnhVOw5Rrmsufw5ej/V9Gp0 gtAPvx2CKCYRh2WhLZwsUjbnOASmZmQLISKtfs52d4k0/Er54gO/Myre8TLH7kjv 8/UxXtu98/HxsMBpH82sgKRXudu8t01NIDRzNOTyMNP6QWKD7yw0vwU9ChBTzAVH uLzxtXfa8p3dvf1wR6Cd0543p7RmLXFp+rk1UU4DBbLAE2LXGqlxzvs93LlIQwDB 83PydqDWHebond+73ArO1c7XA8/9OSvp -----END CERTIFICATE-----Generated at Mon Sep 15 07:09:34 2025 by rpki-client