$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: pr3xFwNoE2JrdUVrakKlsluTGdHMuMb1TOQXsj6tw5M= Subject key identifier: 41:E1:96:A3:55:BD:F9:36:12:95:A9:04:77:6E:84:BB:3F:A8:9D:00 Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0779 Signing time: Fri 22 Aug 2025 21:41:00 +0000 Manifest this update: Fri 22 Aug 2025 21:40:59 +0000 Manifest next update: Fri 29 Aug 2025 21:40:59 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: iX8tR+438ijbmeT6l5to5vlbg2yFFj0IPx/MXOL3KEc=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Aug 22 21:40:59 2025 GMT Not After : Aug 29 21:40:59 2025 GMT Subject: CN=68a8e3eb-2647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6b:06:10:c4:27:2f:ea:8e:f2:4a:fc:a2:f9: e9:79:e1:f9:2a:d9:f6:a2:91:3d:35:ea:6f:f6:53: 1c:db:1c:50:8c:b7:90:0d:e5:62:2f:89:7d:f9:b2: b6:03:df:5f:dd:b9:d3:31:77:74:77:5d:3c:92:ee: e5:f7:6d:c4:47:58:31:0b:d7:87:3d:0b:6b:b9:23: 67:fe:c0:29:0b:a9:e0:8a:70:76:db:3a:1e:51:93: e9:5c:43:c0:d5:d7:78:51:3e:36:c2:88:a8:3c:1b: 9f:1c:64:09:74:55:d7:b5:d7:40:98:95:75:ab:de: 7a:17:40:a6:15:65:4a:22:53:99:b3:58:3f:b5:ca: 8a:71:7a:69:94:64:e2:78:00:c3:44:29:95:0b:c5: 37:52:e5:b3:fa:ec:3e:3d:0c:39:05:31:9d:bd:f6: 9a:08:fd:c2:5c:aa:02:6a:88:3e:6f:c9:ac:1a:21: 47:04:54:35:57:8c:48:84:1f:3f:ae:eb:93:c9:b7: 89:34:46:97:f4:e8:e2:7c:95:52:74:6c:cd:67:18: 35:16:6d:74:e4:65:9c:d8:4e:dc:98:95:7d:46:a4: d9:5a:de:9b:ec:d9:e3:c2:14:86:59:ee:0f:4d:4f: f7:f8:64:56:57:3d:1c:f5:a5:8c:e1:5a:c1:3d:cf: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:96:A3:55:BD:F9:36:12:95:A9:04:77:6E:84:BB:3F:A8:9D:00 X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:77:53:f5:d9:10:4d:e2:a8:e4:e7:68:35:93:2a:7c:14: 73:29:f9:f7:b8:62:50:29:b2:81:19:8d:f0:ea:d0:0d:0a:f9: c3:7f:e9:e5:66:8c:99:eb:32:6e:57:49:26:36:e9:47:c3:51: ab:fc:d6:9b:b4:49:4f:33:30:ea:a4:c5:d0:1a:f9:ec:8e:0c: 9f:4e:46:9e:02:16:ed:50:60:2f:e8:7f:01:07:fb:f3:02:d6: 7e:1e:4b:97:ee:f3:19:6c:49:37:c2:42:36:7b:3d:0a:92:57: 3a:9c:2b:ca:77:0e:b7:f9:e9:1b:c7:63:8f:98:25:ab:7c:12: 7a:fe:8c:eb:5a:21:b3:94:89:03:1f:f3:ea:dd:bd:f2:94:70: 3d:6d:c6:ce:f4:8c:a3:86:65:6b:82:13:b3:33:43:f1:14:fb: fc:ca:cc:59:33:99:82:e8:7a:8e:8d:30:49:92:44:12:af:6d: 3c:bb:9e:83:f6:a3:a0:db:09:61:5d:64:ba:c4:ae:6a:99:fa: 6b:2a:47:2d:90:be:63:17:73:86:01:32:34:1b:8a:35:0a:71: b5:27:77:62:37:68:02:83:eb:8d:bb:fe:0c:fa:33:21:8f:bd: a3:1f:f2:c6:38:1e:5a:80:ec:2d:73:fa:13:b9:a0:15:23:7d: f6:36:bf:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwODIyMjE0MDU5WhcNMjUwODI5MjE0MDU5WjAYMRYwFAYD VQQDEw02OGE4ZTNlYi0yNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2sGEMQnL+qO8kr8ovnpeeH5Ktn2opE9Nepv9lMc2xxQjLeQDeViL4l9+bK2 A99f3bnTMXd0d108ku7l923ER1gxC9eHPQtruSNn/sApC6nginB22zoeUZPpXEPA 1dd4UT42woioPBufHGQJdFXXtddAmJV1q956F0CmFWVKIlOZs1g/tcqKcXpplGTi eADDRCmVC8U3UuWz+uw+PQw5BTGdvfaaCP3CXKoCaog+b8msGiFHBFQ1V4xIhB8/ ruuTybeJNEaX9OjifJVSdGzNZxg1Fm105GWc2E7cmJV9RqTZWt6b7NnjwhSGWe4P TU/3+GRWVz0c9aWM4VrBPc8RWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHhlqNV vfk2EpWpBHduhLs/qJ0AMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4fHdT9dkQTeKo5OdoNZMqfBRzKfn3uGJQKbKBGY3w6tANCvnDf+nl ZoyZ6zJuV0kmNulHw1Gr/NabtElPMzDqpMXQGvnsjgyfTkaeAhbtUGAv6H8BB/vz AtZ+HkuX7vMZbEk3wkI2ez0Kklc6nCvKdw63+ekbx2OPmCWrfBJ6/ozrWiGzlIkD H/Pq3b3ylHA9bcbO9IyjhmVrghOzM0PxFPv8ysxZM5mC6HqOjTBJkkQSr208u56D 9qOg2wlhXWS6xK5qmfprKkctkL5jF3OGATI0G4o1CnG1J3diN2gCg+uNu/4M+jMh j72jH/LGOB5agOwtc/oTuaAVI332Nr81 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:39 2025 by rpki-client