$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: LDgbJBcKyBTI0cxgbflh2G6i3uXA1fvPRnrx2sWEEvA= Subject key identifier: C2:02:EF:B1:02:3B:B4:04:4A:C1:AB:A6:26:4B:0A:6D:B8:98:E3:F4 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A46 Signing time: Wed 20 Aug 2025 16:25:08 +0000 Manifest this update: Wed 20 Aug 2025 16:25:07 +0000 Manifest next update: Wed 27 Aug 2025 16:25:07 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: kV2cvqETAZOYnpAaeQbbWAB1kIGhnK6OTFg4S/cRJW0=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6735 (0x1a4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Aug 20 16:25:07 2025 GMT Not After : Aug 27 16:25:07 2025 GMT Subject: CN=68a5f6e4-3797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:b8:4e:9d:2a:91:05:b5:58:3d:ba:14:7a: 68:b1:64:70:ea:aa:01:75:ee:00:21:1d:8c:3d:b6: 8d:4b:6a:53:63:4f:02:ef:7e:31:68:2b:d7:a7:ea: 12:e3:05:c9:9e:ce:3f:44:06:40:2a:67:45:70:d0: b7:1a:5a:be:09:3f:27:d8:60:f7:1c:17:a9:dc:ca: 4e:b4:77:5f:18:0a:0b:4c:4d:f2:21:f8:07:d4:b6: d5:f5:55:d2:58:df:38:19:c6:94:ba:23:74:70:08: 63:e9:da:6a:1a:11:af:01:d9:19:45:0a:18:66:1d: 89:e1:27:7a:46:ed:d0:07:b5:d9:b3:eb:3f:21:a3: 6b:c5:91:df:3c:7a:41:fe:47:a5:4b:59:18:ac:75: a5:67:f8:9c:41:0e:ac:bb:19:a6:4c:a4:25:f2:b1: a4:80:50:65:80:2f:e8:35:d2:4b:18:52:d6:63:76: f0:0d:72:f6:84:12:3e:9e:66:a9:7c:aa:26:40:f8: cb:4f:4d:7f:81:a3:dc:ac:de:54:33:fe:6a:79:aa: 5d:46:8c:f6:95:b1:06:3a:6e:8a:3b:4d:d7:c3:fa: 67:87:b8:a2:ea:e9:49:4c:70:f1:e7:91:b0:b2:55: 26:97:06:6f:8c:1a:e7:af:85:7e:f4:ad:c1:ec:4f: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:02:EF:B1:02:3B:B4:04:4A:C1:AB:A6:26:4B:0A:6D:B8:98:E3:F4 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:10:57:72:69:90:fa:4e:39:26:4f:c2:d8:d6:75:f2:1a:2d: 08:25:27:e1:2e:e0:bf:4c:83:33:bd:eb:14:fa:31:55:a9:6a: 82:26:ba:4c:4e:2b:24:64:1f:a1:5e:c5:62:4a:5f:c3:ad:b9: 10:32:90:6c:bb:b7:fc:83:bd:45:b2:02:98:53:d4:22:35:9c: 80:c9:82:2d:08:65:d2:06:a6:9e:1c:99:dd:44:98:6b:35:f8: 44:6b:49:7f:2c:f6:60:51:b8:a0:6e:e2:4d:15:f8:ba:d6:2a: ff:39:43:3e:43:5d:b6:20:c0:c7:a7:dd:68:50:10:9d:97:d3: 0c:09:78:30:0c:5c:56:35:2d:f2:fb:4c:64:28:39:cf:c1:3d: fd:26:86:a1:36:ec:19:e9:64:21:ed:8f:75:82:6c:82:c0:4b: 58:f2:bd:76:69:2f:85:6c:0f:f0:c2:41:0a:b3:2a:8f:97:9c: 91:58:99:2b:09:1b:2e:72:ff:7d:a6:60:8f:83:b8:0b:80:e0: dc:9f:48:8c:a9:84:83:ee:71:ac:f3:1a:d2:71:93:39:da:bc: 09:be:85:d3:44:59:5b:09:85:a7:c8:c5:85:87:6c:c7:3f:db: 4e:76:1d:9f:d9:06:3d:7f:81:6f:dc:24:8a:f1:66:a5:50:94: 13:c0:36:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwODIwMTYyNTA3WhcNMjUwODI3MTYyNTA3WjAYMRYwFAYD VQQDEw02OGE1ZjZlNC0zNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKG4Tp0qkQW1WD26FHposWRw6qoBde4AIR2MPbaNS2pTY08C734xaCvXp+oS 4wXJns4/RAZAKmdFcNC3Glq+CT8n2GD3HBep3MpOtHdfGAoLTE3yIfgH1LbV9VXS WN84GcaUuiN0cAhj6dpqGhGvAdkZRQoYZh2J4Sd6Ru3QB7XZs+s/IaNrxZHfPHpB /kelS1kYrHWlZ/icQQ6suxmmTKQl8rGkgFBlgC/oNdJLGFLWY3bwDXL2hBI+nmap fKomQPjLT01/gaPcrN5UM/5qeapdRoz2lbEGOm6KO03Xw/pnh7ii6ulJTHDx55Gw slUmlwZvjBrnr4V+9K3B7E81MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIC77EC O7QESsGrpiZLCm24mOP0MB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdEFdyaZD6TjkmT8LY1nXyGi0IJSfhLuC/TIMzvesU+jFVqWqCJrpM TiskZB+hXsViSl/DrbkQMpBsu7f8g71FsgKYU9QiNZyAyYItCGXSBqaeHJndRJhr NfhEa0l/LPZgUbigbuJNFfi61ir/OUM+Q122IMDHp91oUBCdl9MMCXgwDFxWNS3y +0xkKDnPwT39JoahNuwZ6WQh7Y91gmyCwEtY8r12aS+FbA/wwkEKsyqPl5yRWJkr CRsucv99pmCPg7gLgODcn0iMqYSD7nGs8xrScZM52rwJvoXTRFlbCYWnyMWFh2zH P9tOdh2f2QY9f4Fv3CSK8WalUJQTwDb5 -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:01 2025 by rpki-client