$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: RtniPDU5o44Z4Lbf/6mZ4gcoJe/En5uorxG7kBI7MRg= Subject key identifier: 2F:53:39:BC:8B:6C:93:60:93:83:1D:45:BE:31:C7:32:EF:1B:5B:28 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 0125 Signing time: Sun 07 Sep 2025 05:21:42 +0000 Manifest this update: Sun 07 Sep 2025 05:21:41 +0000 Manifest next update: Sun 14 Sep 2025 05:21:41 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: Kxx0FPCDm/PXiR++rSi5D0Ugd2f86SIu8uxecsoGMU0=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Sep 7 05:21:41 2025 GMT Not After : Sep 14 05:21:41 2025 GMT Subject: CN=68bd1665-589e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:72:32:b2:c9:f6:3d:cf:8d:a2:7f:29:ac: 1e:a2:66:6b:bb:5d:d5:31:95:38:2e:e0:c4:a7:fe: 56:51:0b:aa:4f:88:71:52:91:71:28:15:b7:fc:9e: e8:27:43:fd:da:1f:d5:14:17:8a:90:85:7b:1b:e9: b8:42:97:d6:02:ff:14:b0:d7:e8:61:cb:77:82:0f: ac:e7:ba:33:55:41:9b:42:38:58:b1:19:8b:6c:46: 5f:11:9e:47:fb:85:16:e0:7a:0d:a3:b1:0d:c2:ef: 3d:16:d1:51:db:8f:51:9c:3a:28:13:86:88:2f:a8: 5e:2d:c9:3a:36:71:21:b6:a1:39:ff:3d:86:92:36: 56:c1:cc:b5:04:97:fb:80:b3:55:c9:7c:49:59:53: 20:7a:97:3e:94:c6:21:ea:11:50:c2:c2:4c:ac:57: 65:73:eb:5f:6f:1d:36:d1:60:ae:91:46:1b:72:da: fa:7a:87:90:c7:58:d3:0e:a3:df:42:36:3f:46:c4: d6:0b:49:ab:93:93:cf:2d:5f:9a:2e:ac:d1:87:7f: b7:38:8b:f5:b1:67:d7:fd:35:26:8b:60:61:07:e0: f4:1a:ee:b4:8c:04:66:04:5d:28:20:02:3d:a6:ad: cf:8d:de:aa:c2:e6:3b:31:c1:16:7f:a4:53:f5:63: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:39:BC:8B:6C:93:60:93:83:1D:45:BE:31:C7:32:EF:1B:5B:28 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:8f:ff:27:fe:6b:79:c4:3c:53:0a:db:62:d6:b7:ad:f7: 22:a9:dd:d5:d5:0b:2d:7b:54:38:77:ae:a3:d9:0a:8b:ea:b0: a7:9f:10:d1:da:85:34:65:be:04:f2:96:9c:3d:36:df:2c:55: 8b:71:55:a4:1d:91:1c:83:0b:6a:89:63:bb:43:eb:50:b3:23: 5f:af:28:6a:a4:9f:7c:3f:27:be:ed:d4:a0:01:16:77:48:fb: c6:6b:a5:7b:ad:1a:27:56:cf:bd:d5:cb:b0:5d:54:c2:df:90: b0:8b:10:4a:68:05:55:b0:a1:70:4b:2d:01:ea:59:6d:54:0d: 10:93:85:ff:95:e8:94:94:b3:d4:1a:3e:49:2c:40:ec:96:27: 65:b3:0f:e0:10:ad:16:b3:16:80:bc:fc:ba:a9:79:bd:f1:9d: 7a:43:f6:34:50:45:d9:4c:72:72:38:b3:2b:e6:d8:1e:b6:d5: 0d:5e:d2:e6:6e:02:33:7f:08:8a:99:ed:47:41:ef:d8:d1:f5: 1b:3d:70:56:99:2b:c3:25:14:de:8f:9c:85:2c:20:54:42:26: ef:89:17:0d:cb:dd:8a:90:e4:49:d4:dc:8e:9e:fc:6f:ef:97: 26:55:dd:8a:c1:97:14:80:de:cf:02:bc:b3:d1:a6:a0:1e:0d: 46:00:67:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUwOTA3MDUyMTQxWhcNMjUwOTE0MDUyMTQxWjAYMRYwFAYD VQQDEw02OGJkMTY2NS01ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXhyMrLJ9j3PjaJ/KaweomZru13VMZU4LuDEp/5WUQuqT4hxUpFxKBW3/J7o J0P92h/VFBeKkIV7G+m4QpfWAv8UsNfoYct3gg+s57ozVUGbQjhYsRmLbEZfEZ5H +4UW4HoNo7ENwu89FtFR249RnDooE4aIL6heLck6NnEhtqE5/z2GkjZWwcy1BJf7 gLNVyXxJWVMgepc+lMYh6hFQwsJMrFdlc+tfbx020WCukUYbctr6eoeQx1jTDqPf QjY/RsTWC0mrk5PPLV+aLqzRh3+3OIv1sWfX/TUmi2BhB+D0Gu60jARmBF0oIAI9 pq3Pjd6qwuY7McEWf6RT9WPlBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9TObyL bJNgk4MdRb4xxzLvG1soMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV1I//J/5recQ8UwrbYta3rfciqd3V1Qste1Q4d66j2QqL6rCnnxDR 2oU0Zb4E8pacPTbfLFWLcVWkHZEcgwtqiWO7Q+tQsyNfryhqpJ98Pye+7dSgARZ3 SPvGa6V7rRonVs+91cuwXVTC35CwixBKaAVVsKFwSy0B6lltVA0Qk4X/leiUlLPU Gj5JLEDslidlsw/gEK0WsxaAvPy6qXm98Z16Q/Y0UEXZTHJyOLMr5tgettUNXtLm bgIzfwiKme1HQe/Y0fUbPXBWmSvDJRTej5yFLCBUQibviRcNy92KkORJ1NyOnvxv 75cmVd2KwZcUgN7PAryz0aagHg1GAGcf -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:16 2025 by rpki-client