$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: K76DzyEL2uDpUutR2QIqESFzhhAkBFjIvDYVFSHJqCI= Subject key identifier: 6D:BA:75:C5:C7:BB:E5:9B:89:6B:A0:B2:A1:2C:D3:E8:6E:70:57:33 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B22 Signing time: Thu 31 Jul 2025 19:58:12 +0000 Manifest this update: Thu 31 Jul 2025 19:58:12 +0000 Manifest next update: Thu 07 Aug 2025 19:58:12 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: 252OWXdVjqT+t94oKZV4FBqGhXLOrPtHGQ0zpueV+UY=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: Y5ilqY3EX1YlNkwmQC54jat5s6RkhEqIyQvx25IhbvA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 19:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Jul 31 19:58:12 2025 GMT Not After : Aug 7 19:58:12 2025 GMT Subject: CN=688bcad4-c48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:d0:5a:86:62:3b:6c:b0:92:cc:4d:8c:72: 72:2f:68:77:4a:14:72:61:54:60:1a:e0:8c:e0:09: 9c:3a:fd:da:91:26:4b:05:bb:9a:ed:de:35:6a:17: 08:5d:b0:50:2e:4c:c9:90:61:14:43:de:dd:16:db: 23:74:6d:fd:db:28:f1:42:9e:40:3a:cb:36:c1:29: 39:07:47:41:a7:ce:bf:a0:55:a3:51:42:ac:bc:9f: 8c:d9:c6:85:b2:65:8e:fc:c3:45:d6:dd:64:ec:da: d4:cb:99:2e:64:8b:f3:a6:2d:bd:a6:2e:07:77:d9: 8c:e6:2d:5a:4e:4b:56:19:0f:ad:53:8b:2f:90:bb: 1d:5d:85:bc:4f:f5:ca:e0:80:30:a5:e8:cf:1b:f6: cd:40:ca:fa:b9:78:3a:60:e8:74:74:7b:f8:f2:74: ff:ea:46:15:8c:4c:b2:63:98:63:f0:cd:04:fe:8e: 2c:9e:b6:51:08:66:f7:79:79:3c:c8:b5:1c:2e:05: 92:39:9e:9a:be:46:b7:22:06:8e:04:a9:53:44:16: 6d:d6:f9:46:c9:5d:4c:e1:5a:43:d1:f0:91:c0:17: dc:93:81:82:1c:94:8f:4e:d8:22:2f:69:10:80:a4: 77:30:18:71:d5:3b:0f:0a:a3:3b:92:50:1d:c6:b4: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BA:75:C5:C7:BB:E5:9B:89:6B:A0:B2:A1:2C:D3:E8:6E:70:57:33 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:50:68:30:bf:8d:47:b8:c5:a4:2f:34:eb:2d:10:58:49: e7:69:54:f5:e6:fe:7f:72:4b:37:15:56:da:1f:ec:0b:ac:80: 5c:92:2d:0a:e5:2c:3e:86:6c:ab:c0:0b:19:1f:62:8a:77:da: b1:10:43:8c:c8:bf:a2:c9:f3:ac:72:ea:ce:0c:d4:72:97:22: e8:9d:f3:b8:de:ba:6b:c9:f4:44:65:09:2e:ac:ac:39:f8:10: 1c:e0:b4:7d:6f:3a:8a:17:51:f1:25:0b:26:bf:75:9b:e5:39: 9e:c8:71:1a:75:76:ed:d7:b0:fc:5d:10:bd:79:dd:6d:fe:9e: 8d:0e:c7:6d:18:b2:fa:32:15:a7:de:ca:ca:8f:47:97:54:4a: 55:2e:2c:95:ab:d7:5e:8a:90:fe:d6:10:dd:7b:5c:ab:86:13: af:c8:c2:50:ab:47:f3:88:54:c7:a7:00:6a:83:b5:b3:b1:c4: 86:dc:1a:44:4b:dc:94:f2:83:13:50:1c:d4:6f:f6:9d:eb:99: 7f:b4:70:0b:b7:11:7f:37:19:37:1b:d7:e6:fe:28:93:82:94: b3:07:88:37:99:4e:f4:7e:07:8e:59:39:50:30:79:21:31:59: cd:33:5e:48:36:06:db:55:9d:1d:91:c9:28:99:7f:b9:0f:d3: e7:6a:60:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUwNzMxMTk1ODEyWhcNMjUwODA3MTk1ODEyWjAYMRYwFAYD VQQDEw02ODhiY2FkNC1jNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuezQWoZiO2ywksxNjHJyL2h3ShRyYVRgGuCM4AmcOv3akSZLBbua7d41ahcI XbBQLkzJkGEUQ97dFtsjdG392yjxQp5AOss2wSk5B0dBp86/oFWjUUKsvJ+M2caF smWO/MNF1t1k7NrUy5kuZIvzpi29pi4Hd9mM5i1aTktWGQ+tU4svkLsdXYW8T/XK 4IAwpejPG/bNQMr6uXg6YOh0dHv48nT/6kYVjEyyY5hj8M0E/o4snrZRCGb3eXk8 yLUcLgWSOZ6avka3IgaOBKlTRBZt1vlGyV1M4VpD0fCRwBfck4GCHJSPTtgiL2kQ gKR3MBhx1TsPCqM7klAdxrTfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG26dcXH u+WbiWugsqEs0+hucFczMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB561BoML+NR7jFpC806y0QWEnnaVT15v5/cks3FVbaH+wLrIBcki0K 5Sw+hmyrwAsZH2KKd9qxEEOMyL+iyfOscurODNRylyLonfO43rpryfREZQkurKw5 +BAc4LR9bzqKF1HxJQsmv3Wb5TmeyHEadXbt17D8XRC9ed1t/p6NDsdtGLL6MhWn 3srKj0eXVEpVLiyVq9deipD+1hDde1yrhhOvyMJQq0fziFTHpwBqg7WzscSG3BpE S9yU8oMTUBzUb/ad65l/tHALtxF/Nxk3G9fm/iiTgpSzB4g3mU70fgeOWTlQMHkh MVnNM15INgbbVZ0dkckomX+5D9PnamCV -----END CERTIFICATE-----Generated at Sat Aug 2 05:36:54 2025 by rpki-client