$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft File: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json) Hash identifier: Z3OPpnPvTYiZxzIetfF+prWk3BxqpqfaDvv2Qj2h8c8= Subject key identifier: 36:F6:F2:52:AF:55:0E:65:E8:24:77:20:F7:31:56:DF:F4:F4:79:EF Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft Manifest number: 34DF Signing time: Fri 22 Aug 2025 14:33:59 +0000 Manifest this update: Fri 22 Aug 2025 14:33:59 +0000 Manifest next update: Fri 29 Aug 2025 14:33:59 +0000 Files and hashes: 1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: vmxE8tlCQ9dMVa742Xhggs7c7tZudhW+5tmZjvY2G0k=) 2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: d0P/BKes6SbSKV4r9lK1XjzU3f1Gv4sq1ihkJ2akzQw=) 3: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (hash: 1oolI04ZrhXaYmXgZvqSiMymHhXrDoJjC9cjKEp6I10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0 Validity Not Before: Aug 22 14:33:59 2025 GMT Not After : Aug 29 14:33:59 2025 GMT Subject: CN=68a87fd7-2041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:10:a1:a2:b3:e2:7b:db:29:e4:2e:bc:bb: a2:cd:32:a2:bf:78:81:3e:00:e0:1b:03:d4:de:9a: a0:db:cd:a6:63:0c:81:63:16:b4:66:9f:2b:fc:0a: ae:a4:83:82:6e:90:ec:8f:9c:8e:a6:8c:da:12:db: fb:33:bf:19:71:1f:1a:f2:7e:38:5f:b7:ac:f3:79: 40:70:06:7e:ad:5c:25:3e:40:b8:10:7d:f2:0b:e8: 5c:0d:35:ea:b3:14:90:3f:8f:ee:f3:82:69:22:ba: a3:7e:59:8e:82:03:dd:c4:44:25:3f:97:91:07:87: a3:0a:7f:cf:27:5f:42:f5:39:91:8d:4b:be:5e:d5: 26:2b:98:4d:b8:1b:8f:f9:08:f0:ce:8a:8c:fd:c8: 63:4d:df:9d:b1:b4:d9:54:b9:89:bb:bb:5e:bb:51: c4:30:c8:da:20:bc:e0:9e:65:f6:0c:21:65:f6:64: a5:28:1f:6a:09:54:62:17:f7:12:37:33:ae:15:8d: c4:9c:42:2d:e1:38:24:06:c4:95:a2:18:28:0b:89: af:00:78:e3:2e:71:05:23:6b:97:dc:ec:ba:d6:29: 92:c2:d0:0e:de:26:5c:59:eb:55:f1:22:fb:ad:9d: a4:24:c5:78:72:a0:2b:6b:a8:7d:15:81:f0:3f:b4: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F6:F2:52:AF:55:0E:65:E8:24:77:20:F7:31:56:DF:F4:F4:79:EF X509v3 Authority Key Identifier: keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f1:c9:fd:15:ea:2c:4f:85:cc:09:32:0c:c8:cc:eb:12:f1: 64:65:88:7c:a9:93:d9:a7:52:4d:8c:ab:28:c2:c6:de:aa:4a: 0b:9c:45:11:21:85:57:ce:96:85:cf:89:44:a2:17:9d:5d:81: b0:c6:46:8e:42:36:5b:57:7d:51:57:aa:8e:3e:56:6d:c5:cf: af:fa:5b:0d:f9:20:90:e2:e2:9e:7e:94:89:cd:54:43:19:8d: 3a:08:70:fb:4d:0c:9f:7e:47:e0:c7:79:8d:76:d6:c9:cf:fe: d5:6a:a4:14:13:c1:82:8b:ae:c4:4c:58:bb:bc:9a:13:90:43: d0:f3:8e:fd:a2:f6:ad:a8:9b:0e:b9:02:8c:ec:f7:02:18:32: b1:68:08:d0:59:51:86:6b:f1:7b:84:7c:98:16:55:69:41:bd: 39:e7:69:f2:f3:b1:53:34:28:3b:17:ba:da:1d:81:1d:78:48: f6:bb:74:cc:51:9d:d0:8d:ff:63:98:e7:6a:04:34:ab:44:be: 46:2e:df:00:a0:08:9e:64:c6:51:22:d8:b1:4a:34:95:dd:47: 16:e3:de:07:44:fa:67:ef:86:d0:f1:e0:76:b3:8c:98:d2:22: 5e:d6:98:f1:89:16:14:56:37:7f:80:34:4c:82:d4:31:d3:a0: b9:73:97:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFRTAxMTAvBgNVBAUTKDg2MEMwOTA0Q0VEN0JCMEQxRDk3QjI5MkZEQjY2MkU4 QjlBOEFGRjAwHhcNMjUwODIyMTQzMzU5WhcNMjUwODI5MTQzMzU5WjAYMRYwFAYD VQQDEw02OGE4N2ZkNy0yMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv94QoaKz4nvbKeQuvLuizTKiv3iBPgDgGwPU3pqg282mYwyBYxa0Zp8r/Aqu pIOCbpDsj5yOpozaEtv7M78ZcR8a8n44X7es83lAcAZ+rVwlPkC4EH3yC+hcDTXq sxSQP4/u84JpIrqjflmOggPdxEQlP5eRB4ejCn/PJ19C9TmRjUu+XtUmK5hNuBuP +QjwzoqM/chjTd+dsbTZVLmJu7teu1HEMMjaILzgnmX2DCFl9mSlKB9qCVRiF/cS NzOuFY3EnEIt4TgkBsSVohgoC4mvAHjjLnEFI2uX3Oy61imSwtAO3iZcWetV8SL7 rZ2kJMV4cqAra6h9FYHwP7TdqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb28lKv VQ5l6CR3IPcxVt/09HnvMB8GA1UdIwQYMBaAFIYMCQTO17sNHZeykv22Yui5qK/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUVFMC9EMjM2MzQ0NjFE OEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3MGRsN0tTX2JaaTZMbW9y X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hnd0pCTTdYdXcwZGw3S1NfYlppNkxtb3JfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUVFMC9EMjM2MzQ0NjFEOEExMUUyODIwRjA0RTUwOEIwMkNEMi9oZ3dKQk03WHV3 MGRsN0tTX2JaaTZMbW9yX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU8cn9FeosT4XMCTIMyMzrEvFkZYh8qZPZp1JNjKsowsbeqkoLnEUR IYVXzpaFz4lEohedXYGwxkaOQjZbV31RV6qOPlZtxc+v+lsN+SCQ4uKefpSJzVRD GY06CHD7TQyffkfgx3mNdtbJz/7VaqQUE8GCi67ETFi7vJoTkEPQ8479ovatqJsO uQKM7PcCGDKxaAjQWVGGa/F7hHyYFlVpQb0552ny87FTNCg7F7raHYEdeEj2u3TM UZ3Qjf9jmOdqBDSrRL5GLt8AoAieZMZRItixSjSV3UcW494HRPpn74bQ8eB2s4yY 0iJe1pjxiRYUVjd/gDRMgtQx06C5c5ef -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:03 2025 by rpki-client