$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: wuVvT79AyG30zu3xn5+R82oPVRJYc946YrVQqTDmoLM= Subject key identifier: 9E:A7:2B:11:C9:6F:C9:27:69:9F:26:D1:27:25:A1:28:AB:24:36:98 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 07C5 Signing time: Fri 22 Aug 2025 21:21:21 +0000 Manifest this update: Fri 22 Aug 2025 21:21:20 +0000 Manifest next update: Fri 29 Aug 2025 21:21:20 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: K13W8904/h/b6DVtwNFWLFKbijvVPWCQJ3eC+KB2RXU=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: +LCAkAjuOva0wvpdg8eQD1RUB4/36WnSyP1+IZjx2KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Aug 22 21:21:20 2025 GMT Not After : Aug 29 21:21:20 2025 GMT Subject: CN=68a8df51-7be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:39:93:f2:98:0d:c0:79:dc:2b:25:c2:18: cb:fa:24:9e:b2:3f:11:04:0a:97:5b:be:b7:b1:29: 6e:6c:ef:e0:8c:82:ec:45:2e:93:b4:35:a7:b1:73: d4:7f:8f:d4:4c:5e:ff:b2:b7:5f:a8:52:8c:37:20: 20:db:82:99:58:6f:fb:e5:89:97:70:ae:89:66:05: e5:1e:d4:22:de:ce:a2:29:3f:58:cd:56:bf:52:ec: 48:99:d0:5e:cb:48:a5:14:d2:cf:c3:78:d5:e5:02: 11:94:70:47:31:fc:59:d7:61:52:b6:a2:ea:75:36: 19:12:63:48:63:d3:1b:73:80:3c:b5:89:25:6f:15: 1b:b5:dc:7f:7c:a7:af:5f:5f:9a:4a:65:4c:51:8d: e2:9a:cc:40:d7:40:eb:72:0b:02:d7:6b:4b:59:95: 03:65:8e:ae:48:b9:c6:dc:d0:93:45:35:34:6c:e9: f7:25:75:46:e1:22:d8:f7:3c:ab:60:07:2a:e6:e4: a1:a4:1c:06:84:ad:63:94:d9:8a:d8:4f:58:59:62: ea:c1:ee:71:93:ed:4b:59:94:a6:12:77:af:53:91: f1:d0:c8:53:93:38:53:5f:dd:f7:90:99:2f:4f:4f: a8:5b:a3:63:64:8c:4a:b7:3b:cc:33:08:7a:29:19: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:2B:11:C9:6F:C9:27:69:9F:26:D1:27:25:A1:28:AB:24:36:98 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:a6:e6:e5:31:65:01:07:9c:29:c5:35:5e:1d:48:7e:a5:c2: 52:ab:d5:01:b4:c9:2a:cd:b7:87:47:51:8b:aa:4f:aa:37:c7: 4b:59:91:bc:4c:01:52:88:b5:3c:c3:4b:62:b7:1b:9e:27:11: a9:ef:62:a4:f6:c1:4a:2f:c1:58:e7:8e:67:01:9b:b4:60:73: 20:0d:6c:95:a1:bf:61:1d:ed:1e:aa:1d:3f:dd:d7:51:2d:34: 3e:ff:9d:7f:ba:39:b8:c6:a8:9a:99:a1:fa:9f:6c:01:15:60: b3:b1:79:c0:f7:2c:ad:b8:42:fa:9a:a2:82:37:1a:63:b0:4c: 21:1a:12:83:cb:fd:0d:d0:2a:78:47:99:d2:63:9e:c2:43:c1: 03:e3:54:dd:52:57:94:65:78:8b:70:2c:16:77:4d:85:cd:a7: 15:75:28:f3:2d:37:f3:00:f1:90:19:1f:ce:c6:f4:64:80:7e: fb:33:ca:27:bb:e2:ce:3c:2b:34:d8:76:65:0f:53:27:25:f9: 67:2b:13:e3:9f:14:30:f0:26:86:2e:46:41:c8:54:3e:d1:59: d5:91:8b:ca:fe:d9:d8:e8:76:22:0e:5a:71:be:95:b0:2c:49: 8a:c9:51:23:ed:e8:71:65:82:a8:bf:34:99:dd:32:ed:24:8f: 5c:c1:0c:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjUwODIyMjEyMTIwWhcNMjUwODI5MjEyMTIwWjAYMRYwFAYD VQQDEw02OGE4ZGY1MS03YmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVg5k/KYDcB53CslwhjL+iSesj8RBAqXW763sSlubO/gjILsRS6TtDWnsXPU f4/UTF7/srdfqFKMNyAg24KZWG/75YmXcK6JZgXlHtQi3s6iKT9YzVa/UuxImdBe y0ilFNLPw3jV5QIRlHBHMfxZ12FStqLqdTYZEmNIY9Mbc4A8tYklbxUbtdx/fKev X1+aSmVMUY3imsxA10DrcgsC12tLWZUDZY6uSLnG3NCTRTU0bOn3JXVG4SLY9zyr YAcq5uShpBwGhK1jlNmK2E9YWWLqwe5xk+1LWZSmEnevU5Hx0MhTkzhTX933kJkv T0+oW6NjZIxKtzvMMwh6KRkE2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6nKxHJ b8knaZ8m0ScloSirJDaYMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxpublMWUBB5wpxTVeHUh+pcJSq9UBtMkqzbeHR1GLqk+qN8dLWZG8 TAFSiLU8w0titxueJxGp72Kk9sFKL8FY545nAZu0YHMgDWyVob9hHe0eqh0/3ddR LTQ+/51/ujm4xqiamaH6n2wBFWCzsXnA9yytuEL6mqKCNxpjsEwhGhKDy/0N0Cp4 R5nSY57CQ8ED41TdUleUZXiLcCwWd02FzacVdSjzLTfzAPGQGR/OxvRkgH77M8on u+LOPCs02HZlD1MnJflnKxPjnxQw8CaGLkZByFQ+0VnVkYvK/tnY6HYiDlpxvpWw LEmKyVEj7ehxZYKovzSZ3TLtJI9cwQyn -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:21 2025 by rpki-client