$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft File: H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json) Hash identifier: KNIoDdqOt3g9rFbnKzcw1rBIaLNIv9YtItFbw3yb/m0= Subject key identifier: FE:27:A0:3E:CB:19:D9:13:DB:3A:7D:F7:6A:21:01:A4:CB:F9:69:AB Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 28F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft Manifest number: 287F Signing time: Sun 24 Aug 2025 15:35:00 +0000 Manifest this update: Sun 24 Aug 2025 15:35:00 +0000 Manifest next update: Sun 31 Aug 2025 15:35:00 +0000 Files and hashes: 1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: /75Uf4vm/76lEgpo1IMpr/9aIbexJsLfE6r5jQozf5o=) 2: 57D5BBF870F211F086293675C4F9AE02.roa (hash: MfxJKHAl2OU7PVOYPpiK4bilcuV1ajcVyr3SRatYOEw=) 3: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=) 4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10483 (0x28f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Aug 24 15:35:00 2025 GMT Not After : Aug 31 15:35:00 2025 GMT Subject: CN=68ab3124-7a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:77:40:a4:00:f9:47:b0:56:e0:74:80:55: 45:3d:10:04:23:02:34:46:92:5a:1a:39:06:03:37: e9:89:30:0a:26:19:72:c0:42:6f:51:fa:61:ec:0f: 8b:89:b8:6f:48:9c:2c:33:58:ad:ac:5f:bf:1b:60: f7:9f:24:bb:87:f2:23:05:60:eb:91:71:0b:33:71: 54:bf:b7:0d:de:e5:1a:0a:c4:6d:20:ca:80:b6:81: 10:2d:ce:0d:08:fa:9e:cf:e1:96:53:56:b5:97:88: 3f:29:43:f1:f1:68:37:2b:7b:7f:6e:34:23:13:78: 72:34:dc:0e:33:cf:a1:9d:a8:5a:7d:2a:74:2c:5e: c8:f1:6d:f3:65:16:26:94:65:c8:9d:f8:7f:ba:94: 80:ce:b9:5b:1d:ea:de:b3:05:b7:6c:61:d5:a8:c6: 2b:59:cb:7c:88:32:c9:9c:1e:91:39:61:92:35:30: 1c:66:25:15:11:63:e0:dc:d0:4c:b2:8e:23:2c:1c: 1f:d3:6a:52:e7:f6:40:82:be:54:d8:d6:1a:84:fc: f1:85:c7:3b:4d:0f:db:83:16:b7:ac:c2:d6:f7:ac: cd:2d:f6:74:71:c4:42:7e:4e:72:3a:f6:02:5b:63: 5f:41:c9:73:5b:48:12:78:6a:2a:66:73:ca:b8:82: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:27:A0:3E:CB:19:D9:13:DB:3A:7D:F7:6A:21:01:A4:CB:F9:69:AB X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:79:f9:ef:d1:b2:ea:3b:5f:90:21:52:5a:f7:2b:36:1e:0a: 6a:7e:7f:0a:8f:98:00:85:41:f8:ee:4f:29:a5:bc:77:40:7e: 85:36:07:c7:e4:45:75:33:13:23:c1:78:dd:b0:ee:76:36:c7: cd:5b:db:70:ef:32:1d:6c:c3:29:f8:4a:6e:25:6f:d6:9a:8a: d6:1a:50:f1:3a:7e:35:91:40:e8:1f:1a:a2:da:04:da:cd:c9: ff:a3:7c:ce:23:36:d4:7a:da:d5:f5:39:e4:ed:67:33:7c:a9: 95:4e:24:53:ba:f1:10:d5:0f:b3:c5:ca:96:34:95:36:43:24: 4a:63:47:da:61:3e:0f:d1:e9:bb:0b:b8:39:5a:4d:b0:5f:ee: f8:59:9b:ea:b7:f4:b1:c4:cb:d1:8f:df:19:3f:86:17:d2:f3: aa:7e:0e:d6:46:40:c3:8b:4a:82:14:ba:15:50:96:98:65:27: f5:71:26:f0:1d:9b:92:b6:af:25:9a:5a:28:f2:c1:a4:6e:49: 23:01:05:11:15:4b:42:05:88:dc:bf:c3:26:2f:dc:e3:d7:8c: c0:21:60:a8:2c:eb:66:34:96:65:fd:be:a1:66:5a:39:ed:de: 99:1e:ee:a0:e6:a4:2c:56:fd:a1:06:2a:8a:20:88:3a:d1:60: d6:d8:a2:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjUwODI0MTUzNTAwWhcNMjUwODMxMTUzNTAwWjAYMRYwFAYD VQQDEw02OGFiMzEyNC03YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp53QKQA+UewVuB0gFVFPRAEIwI0RpJaGjkGAzfpiTAKJhlywEJvUfph7A+L ibhvSJwsM1itrF+/G2D3nyS7h/IjBWDrkXELM3FUv7cN3uUaCsRtIMqAtoEQLc4N CPqez+GWU1a1l4g/KUPx8Wg3K3t/bjQjE3hyNNwOM8+hnahafSp0LF7I8W3zZRYm lGXInfh/upSAzrlbHereswW3bGHVqMYrWct8iDLJnB6ROWGSNTAcZiUVEWPg3NBM so4jLBwf02pS5/ZAgr5U2NYahPzxhcc7TQ/bgxa3rMLW96zNLfZ0ccRCfk5yOvYC W2NfQclzW0gSeGoqZnPKuIIKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4noD7L GdkT2zp992ohAaTL+WmrMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTQ0Ny9EMjA3NTgxNEEwOUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hi eHhWRFExZlRnQUlCUmtRTzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5efnv0bLqO1+QIVJa9ys2Hgpqfn8Kj5gAhUH47k8ppbx3QH6FNgfH 5EV1MxMjwXjdsO52NsfNW9tw7zIdbMMp+EpuJW/WmorWGlDxOn41kUDoHxqi2gTa zcn/o3zOIzbUetrV9Tnk7WczfKmVTiRTuvEQ1Q+zxcqWNJU2QyRKY0faYT4P0em7 C7g5Wk2wX+74WZvqt/SxxMvRj98ZP4YX0vOqfg7WRkDDi0qCFLoVUJaYZSf1cSbw HZuStq8lmloo8sGkbkkjAQURFUtCBYjcv8MmL9zj14zAIWCoLOtmNJZl/b6hZlo5 7d6ZHu6g5qQsVv2hBiqKIIg60WDW2KJs -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:07 2025 by rpki-client