$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: j4t1j+g8q57qL+f7mJXhH0yH9u9m60SuTz9Hb2ebWEc= Subject key identifier: AB:BE:22:D1:81:32:61:80:10:15:25:40:AD:15:CB:46:B7:02:EE:2D Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0647 Signing time: Thu 18 Sep 2025 22:57:42 +0000 Manifest this update: Thu 18 Sep 2025 22:57:41 +0000 Manifest next update: Thu 25 Sep 2025 22:57:41 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: eMLiCSk9dmluC4oVebLRx4hP+dGbYRCBE/sGUs5tBJQ=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Sep 18 22:57:41 2025 GMT Not After : Sep 25 22:57:41 2025 GMT Subject: CN=68cc8e65-46c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:00:c8:8b:a0:a4:63:5e:06:01:e7:98:6b:d9: 26:9c:24:45:f9:ce:d6:14:b6:3d:bb:16:c4:bc:dc: 12:64:7f:34:e5:67:9b:ec:0c:ef:c8:15:4a:72:a1: 9c:63:e8:f5:bd:b8:87:29:45:60:63:e1:dd:ae:36: e0:ba:c1:b8:86:69:67:14:30:30:bc:cd:6e:04:24: aa:6e:be:92:29:35:a6:87:df:ab:06:a8:af:4f:7d: c2:aa:f1:d6:8c:ee:00:85:e9:e3:82:e6:89:eb:6b: 0a:a9:05:dd:e4:8d:df:66:9a:aa:95:35:18:b8:1f: 6a:30:7f:bf:46:75:61:55:e9:74:c8:b9:b9:7a:07: a0:85:6a:32:e7:92:f8:03:21:e3:3d:06:cc:6f:db: a1:2d:1a:bd:15:ab:cb:d3:9f:8f:ea:66:73:df:5b: 38:e5:ac:1b:82:df:bd:02:87:d7:3d:3c:38:1f:57: 6d:e4:1a:84:ac:b9:f4:bd:bb:21:ec:dc:2f:bb:b7: 95:23:b7:8f:c5:c3:16:2e:1a:06:3c:a6:5d:db:2c: ff:b6:1e:5a:7e:26:71:f5:b7:ef:a9:b5:8d:9e:d3: 16:a2:55:d2:c1:24:bd:76:41:98:8b:4f:ec:a1:6d: a1:24:92:4a:e0:5c:f2:07:a1:f5:8e:c8:ae:57:99: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BE:22:D1:81:32:61:80:10:15:25:40:AD:15:CB:46:B7:02:EE:2D X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:20:c4:b5:28:14:2d:47:e1:8b:ad:12:b2:de:9b:37:57:ea: d0:18:63:56:15:5d:b3:cb:d1:3b:75:a3:24:5f:b8:60:e5:61: 8d:c9:77:8f:63:a9:d8:90:b8:9a:11:5f:95:d9:6f:3a:e5:28: 85:9d:fd:9e:35:56:a0:de:b4:81:ed:ef:25:f4:32:b6:f5:60: f7:96:e1:47:2e:f0:ac:a8:2e:44:0b:f7:23:71:54:d2:0e:bd: cb:d2:ec:f2:15:e1:59:58:a3:0a:07:3a:6f:3b:ab:39:ec:cf: 13:56:3d:1a:16:8f:e4:51:41:c9:a8:d4:f7:46:20:ee:66:65: be:37:a4:b6:9a:0a:a8:9e:8d:46:2d:57:c6:c6:55:9c:70:dc: bb:e8:0d:b5:68:c5:cc:31:16:b1:27:49:e3:57:27:c7:58:db: 95:9e:b2:9a:82:55:53:a9:1b:1e:b5:14:8e:19:8f:24:48:90: 32:96:7f:96:b8:c9:dd:24:b8:63:6f:98:6a:8e:6c:84:1e:09: ae:48:ed:5d:0a:b3:9f:bc:6f:2f:77:e3:4e:9f:fb:ac:77:85: da:b2:a8:9b:ec:98:30:cf:fc:e0:40:62:7d:b2:0e:7d:74:ae: 67:b3:11:1b:18:22:41:8c:4e:50:01:5b:bd:73:10:86:ad:c7: 1e:26:a7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwOTE4MjI1NzQxWhcNMjUwOTI1MjI1NzQxWjAYMRYwFAYD VQQDEw02OGNjOGU2NS00NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzADIi6CkY14GAeeYa9kmnCRF+c7WFLY9uxbEvNwSZH805Web7AzvyBVKcqGc Y+j1vbiHKUVgY+HdrjbgusG4hmlnFDAwvM1uBCSqbr6SKTWmh9+rBqivT33CqvHW jO4AhenjguaJ62sKqQXd5I3fZpqqlTUYuB9qMH+/RnVhVel0yLm5egeghWoy55L4 AyHjPQbMb9uhLRq9FavL05+P6mZz31s45awbgt+9AofXPTw4H1dt5BqErLn0vbsh 7Nwvu7eVI7ePxcMWLhoGPKZd2yz/th5afiZx9bfvqbWNntMWolXSwSS9dkGYi0/s oW2hJJJK4FzyB6H1jsiuV5ksfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu+ItGB MmGAEBUlQK0Vy0a3Au4tMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaIMS1KBQtR+GLrRKy3ps3V+rQGGNWFV2zy9E7daMkX7hg5WGNyXeP Y6nYkLiaEV+V2W865SiFnf2eNVag3rSB7e8l9DK29WD3luFHLvCsqC5EC/cjcVTS Dr3L0uzyFeFZWKMKBzpvO6s57M8TVj0aFo/kUUHJqNT3RiDuZmW+N6S2mgqono1G LVfGxlWccNy76A21aMXMMRaxJ0njVyfHWNuVnrKaglVTqRsetRSOGY8kSJAyln+W uMndJLhjb5hqjmyEHgmuSO1dCrOfvG8vd+NOn/usd4Xasqib7Jgwz/zgQGJ9sg59 dK5nsxEbGCJBjE5QAVu9cxCGrcceJqc1 -----END CERTIFICATE-----Generated at Fri Sep 19 05:28:47 2025 by rpki-client