$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: m+laCDx6s6UxB+qnGyKFd+19JEvP1Jz0o/s2lYlwSyw= Subject key identifier: E8:11:70:24:A7:EF:D9:DD:85:24:7A:22:54:0E:79:70:CB:F0:B6:6D Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08D1 Signing time: Sun 24 Aug 2025 20:27:52 +0000 Manifest this update: Sun 24 Aug 2025 20:27:51 +0000 Manifest next update: Sun 31 Aug 2025 20:27:51 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: x67EpZX39UwxmeJFhGswlGcNzdBzq+eJR1AQQzcp7ms=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Aug 24 20:27:51 2025 GMT Not After : Aug 31 20:27:51 2025 GMT Subject: CN=68ab75c7-1b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:24:37:dd:46:f6:97:44:f9:82:61:ab:14:90: 89:c8:9f:30:08:00:b6:45:7f:52:0c:d9:2c:0a:bf: e3:04:04:11:21:3c:fe:97:31:16:3d:09:e8:44:e1: ed:39:a0:e8:19:f7:e6:80:a6:25:aa:c0:27:da:0f: f8:13:15:80:77:8d:49:89:82:af:43:19:c8:d5:d0: 05:61:6c:7f:1b:e1:f0:ae:44:60:ad:bb:1a:f3:b9: 86:c7:c1:20:26:32:c8:6b:8b:a5:7e:5a:b0:39:51: 41:3b:54:ca:1f:66:b7:c2:2c:79:9d:c0:25:00:1f: cc:54:84:b1:6a:58:b7:3e:d2:aa:64:6c:a7:c0:76: 7f:e6:10:35:da:40:85:53:73:03:1b:a4:2d:f8:15: 05:8d:7b:e8:59:cb:23:41:ce:1f:03:d0:9e:4c:7f: 98:8b:23:fe:f0:b5:fd:8f:4c:f7:63:fc:8c:c3:34: f1:2b:0d:66:ad:87:ec:83:67:ab:08:7c:81:ff:a9: 8b:2e:ff:d1:7e:94:f5:d5:b0:a7:7e:1d:94:2d:f4: a2:38:75:99:f8:5d:a3:73:2f:4b:47:74:da:15:b9: 09:ae:65:98:b7:ff:ac:e8:e7:50:a3:ed:f6:2d:7d: 2d:0d:1f:ac:50:ce:3a:e4:12:f7:6f:fa:c8:8c:d1: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:70:24:A7:EF:D9:DD:85:24:7A:22:54:0E:79:70:CB:F0:B6:6D X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:1f:48:01:3b:b9:f9:46:7d:cb:b4:05:21:fd:8e:7d:b4:94: 19:69:f9:da:ac:ca:71:ca:2b:0b:e6:9b:5d:4d:26:c3:2d:46: 06:be:04:0d:17:d6:b4:05:45:ea:e0:fe:2e:c3:fc:4b:b4:e6: 48:e9:5b:7d:8a:3a:e8:42:12:d3:12:e7:9e:5b:55:7e:3b:63: 93:1c:e9:0e:07:8a:33:b7:e3:31:69:26:52:f8:bb:30:d6:d6: 93:b0:76:29:9c:e5:5d:3f:e3:d3:fa:35:19:3b:a7:52:d6:aa: 38:0f:79:a8:75:50:21:00:af:25:0c:b4:bc:a4:0f:28:a9:de: 4b:08:90:9c:25:10:5e:1e:55:d5:bc:41:25:5b:93:8d:ba:6f: 2f:7d:a7:8b:57:64:cc:24:29:a8:b4:e1:03:c2:a6:26:b3:fb: 99:3c:1b:5e:59:a8:64:26:ee:6f:ea:57:d5:78:71:c2:d9:68: ea:61:fc:08:be:4a:7b:d2:e9:f5:06:18:ce:f7:95:32:38:3d: 08:39:b8:91:51:97:67:29:68:6e:c7:bf:86:32:88:08:dc:6b: 71:69:fb:b1:23:b1:81:7a:55:6d:d5:54:a3:5e:91:20:43:02: 49:1e:db:c6:0c:75:df:13:86:7e:c8:75:d8:28:ef:7c:4b:05: f9:5c:4b:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwODI0MjAyNzUxWhcNMjUwODMxMjAyNzUxWjAYMRYwFAYD VQQDEw02OGFiNzVjNy0xYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yQ33Ub2l0T5gmGrFJCJyJ8wCAC2RX9SDNksCr/jBAQRITz+lzEWPQnoROHt OaDoGffmgKYlqsAn2g/4ExWAd41JiYKvQxnI1dAFYWx/G+HwrkRgrbsa87mGx8Eg JjLIa4ulflqwOVFBO1TKH2a3wix5ncAlAB/MVISxali3PtKqZGynwHZ/5hA12kCF U3MDG6Qt+BUFjXvoWcsjQc4fA9CeTH+YiyP+8LX9j0z3Y/yMwzTxKw1mrYfsg2er CHyB/6mLLv/RfpT11bCnfh2ULfSiOHWZ+F2jcy9LR3TaFbkJrmWYt/+s6OdQo+32 LX0tDR+sUM465BL3b/rIjNGCTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgRcCSn 79ndhSR6IlQOeXDL8LZtMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyH0gBO7n5Rn3LtAUh/Y59tJQZafnarMpxyisL5ptdTSbDLUYGvgQN F9a0BUXq4P4uw/xLtOZI6Vt9ijroQhLTEueeW1V+O2OTHOkOB4ozt+MxaSZS+Lsw 1taTsHYpnOVdP+PT+jUZO6dS1qo4D3modVAhAK8lDLS8pA8oqd5LCJCcJRBeHlXV vEElW5ONum8vfaeLV2TMJCmotOEDwqYms/uZPBteWahkJu5v6lfVeHHC2WjqYfwI vkp70un1BhjO95UyOD0IObiRUZdnKWhux7+GMogI3GtxafuxI7GBelVt1VSjXpEg QwJJHtvGDHXfE4Z+yHXYKO98SwX5XEsN -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:21 2025 by rpki-client