$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: Vgm5tb0bdJaSu4kMpGYZNCjYlVzLBcpQtnrx6n+ttXQ= Subject key identifier: 0E:C9:BC:F3:08:9F:87:26:07:85:CC:7D:7D:C6:3F:6D:C1:CE:4A:3C Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 01FD Signing time: Thu 21 Aug 2025 02:29:07 +0000 Manifest this update: Thu 21 Aug 2025 02:29:07 +0000 Manifest next update: Thu 28 Aug 2025 02:29:07 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: LA8yivGNztzWbfdXbQms/GVW/RdNzLS45kAgOjcCmfI=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Aug 21 02:29:07 2025 GMT Not After : Aug 28 02:29:07 2025 GMT Subject: CN=68a68473-d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:f5:e2:78:55:e6:63:bd:8e:b7:bc:24:6e: 5b:49:8c:41:ef:30:d7:92:5c:d6:4c:de:80:c5:7d: d8:f5:e3:59:b1:c7:60:ef:8e:84:f2:97:b0:8d:20: b8:fe:9e:66:46:99:eb:34:a9:95:07:75:d4:b6:b1: c2:4b:a7:43:05:8e:ff:08:94:62:da:7a:6d:ca:48: 8f:73:b1:c6:7e:81:d3:e5:04:8e:82:63:2e:ae:fe: 53:d2:87:dc:85:9e:c0:78:76:70:63:fa:66:c2:b1: 9b:a6:aa:97:18:d8:de:6d:94:47:29:ff:24:a0:0a: 2c:9b:f2:d4:fd:af:7f:79:5b:8f:eb:63:2e:4d:9f: 77:3c:78:d9:a1:5d:84:2d:6e:1a:ff:33:93:0c:3f: 57:43:d8:76:c8:d0:d5:65:ad:53:c1:48:5b:f1:02: f9:f1:3b:5c:71:bf:e0:c9:6a:94:41:a4:7e:52:6e: 64:ac:74:68:58:1a:ab:d0:49:7e:49:06:ec:bb:e5: 64:8d:ef:73:0d:3f:7f:38:5e:7e:05:b7:0a:9a:f8: 65:94:b4:54:c8:8c:49:7d:7d:4c:c8:09:66:bd:51: 1c:09:7e:c7:95:7c:ca:a7:30:c6:ed:92:69:cb:e0: 6f:4e:b2:b3:ec:db:93:e0:94:15:6f:48:44:2e:8b: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:BC:F3:08:9F:87:26:07:85:CC:7D:7D:C6:3F:6D:C1:CE:4A:3C X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5b:6f:e7:d8:c8:a2:0f:6d:34:c9:25:b1:04:ab:03:ff:41: 3f:23:09:f8:50:64:46:6c:3e:90:98:b1:fc:ff:cd:c2:e3:6f: ea:54:bc:d1:f7:87:40:f1:bf:bd:92:c7:e1:04:ac:a7:c7:9b: 9d:26:75:c5:36:6f:08:77:10:0d:09:70:6f:dd:f7:cc:19:9a: bd:89:41:cc:a7:27:73:65:35:b0:96:2b:16:6c:b5:08:0d:53: 32:c7:97:0e:4e:16:fd:45:5b:39:37:51:39:cc:33:1b:c4:03: 51:4c:c3:28:5d:04:83:70:69:a0:34:a4:4c:07:8d:a4:ce:fd: 87:db:e4:5a:df:30:a5:c3:cb:fb:cc:41:8d:74:ef:5d:3f:52: 64:f4:4f:19:ca:4d:81:de:27:05:0c:70:64:36:65:9a:0d:7e: 14:75:bb:2e:a5:49:05:ea:c1:20:09:4f:ee:3b:0e:53:a5:c5: 21:3d:e7:fc:4d:a5:05:1c:a8:32:03:b5:13:d4:28:41:f4:b1: 3f:2e:85:72:89:a0:42:03:a5:69:60:5a:4c:34:31:b2:0a:bb: 44:aa:aa:77:01:e4:d9:20:b1:98:67:e4:20:46:22:18:b2:2b: 85:a1:a8:9c:a4:a8:ab:b4:d9:5c:b0:e6:f3:95:c0:0e:e3:47: 5f:a9:41:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUwODIxMDIyOTA3WhcNMjUwODI4MDIyOTA3WjAYMRYwFAYD VQQDEw02OGE2ODQ3My1kNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bb14nhV5mO9jre8JG5bSYxB7zDXklzWTN6AxX3Y9eNZscdg746E8pewjSC4 /p5mRpnrNKmVB3XUtrHCS6dDBY7/CJRi2nptykiPc7HGfoHT5QSOgmMurv5T0ofc hZ7AeHZwY/pmwrGbpqqXGNjebZRHKf8koAosm/LU/a9/eVuP62MuTZ93PHjZoV2E LW4a/zOTDD9XQ9h2yNDVZa1TwUhb8QL58Ttccb/gyWqUQaR+Um5krHRoWBqr0El+ SQbsu+Vkje9zDT9/OF5+BbcKmvhllLRUyIxJfX1MyAlmvVEcCX7HlXzKpzDG7ZJp y+BvTrKz7NuT4JQVb0hELotBBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7JvPMI n4cmB4XMfX3GP23Bzko8MB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0W2/n2MiiD200ySWxBKsD/0E/Iwn4UGRGbD6QmLH8/83C42/qVLzR 94dA8b+9ksfhBKynx5udJnXFNm8IdxANCXBv3ffMGZq9iUHMpydzZTWwlisWbLUI DVMyx5cOThb9RVs5N1E5zDMbxANRTMMoXQSDcGmgNKRMB42kzv2H2+Ra3zClw8v7 zEGNdO9dP1Jk9E8Zyk2B3icFDHBkNmWaDX4UdbsupUkF6sEgCU/uOw5TpcUhPef8 TaUFHKgyA7UT1ChB9LE/LoVyiaBCA6VpYFpMNDGyCrtEqqp3AeTZILGYZ+QgRiIY siuFoaicpKirtNlcsObzlcAO40dfqUHc -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:45 2025 by rpki-client