$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: HiYOTUnrWhVVGGO+Va4tv9sFcw+7xzJ4GqyUCerj8wA= Subject key identifier: A8:DA:08:D4:01:BC:40:9F:43:2D:EC:E8:BD:9E:A1:D3:19:52:B0:A8 Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 10CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 10A2 Signing time: Sat 06 Sep 2025 17:29:45 +0000 Manifest this update: Sat 06 Sep 2025 17:29:45 +0000 Manifest next update: Sat 13 Sep 2025 17:29:45 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: XtoJvsJhPmSLNamfnSrhNYjrgWcyDmHOFqZ6PR+Nwfo=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4298 (0x10ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Sep 6 17:29:45 2025 GMT Not After : Sep 13 17:29:45 2025 GMT Subject: CN=68bc6f89-a2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:1d:f8:de:c6:70:57:77:fc:6a:ca:6c:48: a2:33:96:d6:1b:68:14:b8:38:21:b7:17:3d:63:91: c8:7a:b7:26:1f:e5:97:fc:83:98:62:d1:14:fb:66: f8:0a:7c:2a:ed:ff:11:b0:1f:96:ac:08:c2:01:53: de:98:96:68:4b:b1:b3:98:e1:8e:a0:39:65:49:df: 16:c1:c9:7d:dd:cf:9a:7c:35:c7:77:73:3d:15:df: 0a:e7:8b:dc:5d:70:02:53:f6:9b:4d:0a:0e:c8:9d: 71:57:08:42:0c:95:6e:2d:c3:7f:fe:15:35:d0:32: d2:70:1d:c6:cd:5f:03:fb:9b:0f:f7:e8:e7:39:f7: 29:a2:67:56:7a:13:94:ac:21:cb:02:9f:89:ff:3e: a0:73:1f:b0:2d:72:13:fe:8a:73:46:d9:f7:b8:ad: 98:aa:c1:53:57:f0:56:17:d3:9e:e5:a9:87:92:86: 5d:4d:75:1c:a2:4c:b1:96:cb:eb:32:f7:6a:5a:b3: 49:a0:09:18:e1:12:04:a9:05:5b:de:11:44:1f:16: cc:cb:df:ad:c4:2d:0a:d2:70:02:9f:78:d2:88:5a: c7:a7:42:76:62:5f:9a:0d:7f:10:94:7e:db:34:5a: 7b:d8:9c:e5:3f:5e:07:e6:80:93:2d:3f:d8:81:54: b1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DA:08:D4:01:BC:40:9F:43:2D:EC:E8:BD:9E:A1:D3:19:52:B0:A8 X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2e:29:31:65:55:f3:2c:9b:a2:50:18:3c:b5:00:e2:61:23: c6:52:78:57:3f:38:92:ee:68:d4:d7:cf:0c:21:33:4a:84:58: 96:3f:89:d2:4c:f1:56:db:52:9e:b1:ee:74:6c:d7:44:6a:85: 2f:76:93:50:00:e6:ae:06:53:f9:fe:af:31:33:4a:75:e1:4d: 22:03:3d:7b:9a:2f:a6:7d:e1:d7:65:50:0d:45:bc:fe:eb:00: 1d:40:8e:0a:39:a0:98:f9:5e:84:d9:28:40:2d:ab:4c:83:91: f1:ec:97:3b:0d:93:59:dc:cc:93:45:85:00:4e:47:29:bd:cd: c1:99:70:fe:a0:07:c5:d1:58:62:a2:37:2d:87:b4:e3:1f:80: 1a:7b:eb:a6:2a:42:b8:62:e1:3a:68:c1:32:73:51:3e:6a:26: 26:94:18:c5:1e:d3:e2:46:5b:39:86:51:a5:72:38:d6:6f:db: e2:bc:b3:65:24:40:e5:4f:81:b9:10:d3:3a:50:f3:d7:19:90: ef:df:ea:11:1f:b2:b2:8b:85:c4:f1:a0:57:d7:98:e8:1d:ab: 65:45:31:2e:cb:26:3f:df:d7:05:24:c3:99:1d:5a:f3:61:72: 87:b9:dd:52:71:2f:91:a1:84:a9:62:f6:da:ee:3d:aa:ae:1c: 76:9b:41:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUwOTA2MTcyOTQ1WhcNMjUwOTEzMTcyOTQ1WjAYMRYwFAYD VQQDEw02OGJjNmY4OS1hMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlkd+N7GcFd3/GrKbEiiM5bWG2gUuDghtxc9Y5HIercmH+WX/IOYYtEU+2b4 Cnwq7f8RsB+WrAjCAVPemJZoS7GzmOGOoDllSd8Wwcl93c+afDXHd3M9Fd8K54vc XXACU/abTQoOyJ1xVwhCDJVuLcN//hU10DLScB3GzV8D+5sP9+jnOfcpomdWehOU rCHLAp+J/z6gcx+wLXIT/opzRtn3uK2YqsFTV/BWF9Oe5amHkoZdTXUcokyxlsvr MvdqWrNJoAkY4RIEqQVb3hFEHxbMy9+txC0K0nACn3jSiFrHp0J2Yl+aDX8QlH7b NFp72JzlP14H5oCTLT/YgVSxqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjaCNQB vECfQy3s6L2eodMZUrCoMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcLikxZVXzLJuiUBg8tQDiYSPGUnhXPziS7mjU188MITNKhFiWP4nS TPFW21Kese50bNdEaoUvdpNQAOauBlP5/q8xM0p14U0iAz17mi+mfeHXZVANRbz+ 6wAdQI4KOaCY+V6E2ShALatMg5Hx7Jc7DZNZ3MyTRYUATkcpvc3BmXD+oAfF0Vhi ojcth7TjH4Aae+umKkK4YuE6aMEyc1E+aiYmlBjFHtPiRls5hlGlcjjWb9vivLNl JEDlT4G5ENM6UPPXGZDv3+oRH7Kyi4XE8aBX15joHatlRTEuyyY/39cFJMOZHVrz YXKHud1ScS+RoYSpYvba7j2qrhx2m0FG -----END CERTIFICATE-----Generated at Sat Sep 6 20:56:56 2025 by rpki-client