$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: AQHnJ3xuCnrHfOvZ11YUfcgEP/uNkGKGvk6h3QSzJeA= Subject key identifier: 63:AB:2B:E3:57:B1:E6:D8:19:5E:9B:B3:73:7E:85:2A:44:16:F5:43 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C7A Signing time: Mon 08 Sep 2025 18:27:05 +0000 Manifest this update: Mon 08 Sep 2025 18:27:05 +0000 Manifest next update: Mon 15 Sep 2025 18:27:05 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: wQJPJveiEaWQMP8u1ErA4PINaWzMrY2lHRUjj6dJiVE=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3222 (0xc96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Sep 8 18:27:05 2025 GMT Not After : Sep 15 18:27:05 2025 GMT Subject: CN=68bf1ff9-4310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fc:58:d0:20:93:d6:d3:97:66:79:12:56:8b: 20:4e:c5:6f:92:f9:11:26:88:c6:1a:f9:e3:f9:99: ac:6a:dc:f2:a0:a0:f6:9b:bc:d1:6a:16:cf:11:99: 44:01:63:a4:ac:8b:d2:bd:f2:40:7e:0d:4e:3e:42: 04:4c:67:25:03:e4:b4:fa:eb:ae:49:85:b3:3e:ee: f9:79:ec:d8:2a:02:ff:d8:9e:e8:8e:58:2f:13:db: f6:32:10:47:45:c5:47:f9:04:70:2f:64:53:f0:89: ad:bb:23:4b:69:c5:c9:06:2f:6d:16:2e:4a:e7:78: 32:7e:d5:44:ef:19:cb:0a:52:e2:09:89:60:73:46: 75:9d:f9:87:f5:d1:bf:de:d0:45:fb:ae:08:77:3b: 57:fa:b4:d4:c9:47:eb:b1:7f:80:bb:b0:b5:68:09: b7:16:67:3f:16:cb:a4:8d:f1:34:da:13:d8:b3:5f: 5a:3b:ec:6f:22:85:1a:62:bf:c2:8f:fc:95:a6:2f: ef:20:ad:0b:47:9d:05:c6:2a:b2:45:e7:c4:1d:12: 6b:d1:7b:11:b0:8d:19:a2:6c:bb:24:ab:2f:07:1e: b2:df:45:7f:3e:16:14:e9:ad:4b:3f:65:46:ce:2f: c7:15:81:fd:5b:40:40:94:5f:6e:fb:2b:3d:67:e9: 08:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AB:2B:E3:57:B1:E6:D8:19:5E:9B:B3:73:7E:85:2A:44:16:F5:43 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9c:7a:46:98:ec:ed:70:e2:ed:0a:27:ae:2f:71:91:11:0c: c1:a0:27:15:c3:4a:77:aa:5b:ac:49:36:a7:92:e5:52:e9:43: 1d:33:49:40:dd:3f:9d:a8:86:de:c3:a3:49:dd:b8:31:91:6b: c3:d7:58:28:52:7b:ed:98:32:b9:e2:92:24:fd:57:bd:8b:51: 9c:66:d8:28:f3:23:7f:a2:4d:cb:1a:2f:ae:49:81:74:aa:21: 25:09:59:1b:e5:3e:a3:76:86:eb:8b:04:f6:5c:33:bb:96:c5: 93:74:ab:83:60:54:c1:a9:09:63:2e:7e:c2:a6:ca:06:02:98: b6:65:d4:0d:cc:a6:36:5c:3d:c0:2b:6e:32:8a:81:5c:f6:03: b0:30:42:f8:b5:6b:3b:ec:2e:3b:15:49:e7:44:af:10:15:76: 86:5d:19:df:63:d6:f5:f1:64:a8:dc:60:54:ce:19:75:ee:d0: b5:e4:20:29:39:1e:46:46:1d:95:6c:63:11:0f:34:1d:ce:78: 18:6f:35:04:18:4a:0b:54:ff:f9:91:b9:cf:9c:62:b3:7e:2a: 67:aa:6e:59:5f:0d:22:1a:14:57:6a:fa:c7:f2:f8:6f:9a:a3: a1:e8:16:22:c1:69:2a:36:e8:94:0f:d6:6b:df:5c:dd:97:a6: 1b:3b:44:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwOTA4MTgyNzA1WhcNMjUwOTE1MTgyNzA1WjAYMRYwFAYD VQQDEw02OGJmMWZmOS00MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkvxY0CCT1tOXZnkSVosgTsVvkvkRJojGGvnj+ZmsatzyoKD2m7zRahbPEZlE AWOkrIvSvfJAfg1OPkIETGclA+S0+uuuSYWzPu75eezYKgL/2J7ojlgvE9v2MhBH RcVH+QRwL2RT8ImtuyNLacXJBi9tFi5K53gyftVE7xnLClLiCYlgc0Z1nfmH9dG/ 3tBF+64IdztX+rTUyUfrsX+Au7C1aAm3Fmc/FsukjfE02hPYs19aO+xvIoUaYr/C j/yVpi/vIK0LR50FxiqyRefEHRJr0XsRsI0Zomy7JKsvBx6y30V/PhYU6a1LP2VG zi/HFYH9W0BAlF9u+ys9Z+kIaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOrK+NX sebYGV6bs3N+hSpEFvVDMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBanHpGmOztcOLtCieuL3GREQzBoCcVw0p3qlusSTankuVS6UMdM0lA 3T+dqIbew6NJ3bgxkWvD11goUnvtmDK54pIk/Ve9i1GcZtgo8yN/ok3LGi+uSYF0 qiElCVkb5T6jdobriwT2XDO7lsWTdKuDYFTBqQljLn7CpsoGApi2ZdQNzKY2XD3A K24yioFc9gOwMEL4tWs77C47FUnnRK8QFXaGXRnfY9b18WSo3GBUzhl17tC15CAp OR5GRh2VbGMRDzQdzngYbzUEGEoLVP/5kbnPnGKzfipnqm5ZXw0iGhRXavrH8vhv mqOh6BYiwWkqNuiUD9Zr31zdl6YbO0SN -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:54 2025 by rpki-client