$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: V3r2N7bd6/3CzMEfUxAMas+nmX8oAJ0nrvsNKz/a/d4= Subject key identifier: 5D:F3:11:0A:28:DC:48:41:DF:08:AE:36:DD:B3:F1:32:A4:21:D3:42 Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 01BF Signing time: Sun 07 Sep 2025 03:32:06 +0000 Manifest this update: Sun 07 Sep 2025 03:32:06 +0000 Manifest next update: Sun 14 Sep 2025 03:32:06 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: aJD/Ea8kmTAVXtbY4oQIGFR8ocovnITUHbeHI3zUKlc=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Sep 7 03:32:06 2025 GMT Not After : Sep 14 03:32:06 2025 GMT Subject: CN=68bcfcb6-6d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:3e:d7:c0:f5:89:72:66:f7:a5:03:9d:32: 24:20:3f:b7:00:29:fa:6d:2e:52:82:53:06:1a:18: 3d:cc:10:ff:ed:6d:6d:a8:48:2f:74:69:da:14:9b: 98:b5:75:48:fe:85:de:19:4d:3e:04:83:4f:e0:e4: 72:66:08:71:67:13:e6:2d:43:64:40:2c:2d:f0:47: ca:8e:33:c1:5e:36:48:54:c1:f2:85:94:13:fe:a6: 89:43:a0:7a:45:2b:af:c7:54:d4:99:99:e5:82:50: 11:7e:64:98:8d:40:db:a9:48:00:ca:f7:3a:8a:7b: 71:a1:84:32:00:c7:6f:7e:25:58:86:b9:ca:48:c4: b7:2b:25:70:4c:29:5d:42:ed:25:40:99:9c:96:e8: a5:17:02:77:77:9d:b9:77:e0:87:ec:94:23:cd:9b: 92:7f:42:e1:df:e0:b3:ca:b0:ed:25:3b:15:16:53: 18:d2:b4:78:39:53:f2:b3:22:e2:3c:33:b5:7d:6d: eb:90:ac:41:5b:f8:05:6f:40:ec:f3:03:4f:57:e0: 91:fa:c5:50:32:2b:cd:de:ec:b6:7f:82:db:6b:90: 89:55:05:a4:32:3d:96:d3:60:38:85:f8:f4:74:5b: 35:6f:94:82:25:a4:0c:cc:a1:cb:ea:4e:75:6c:03: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F3:11:0A:28:DC:48:41:DF:08:AE:36:DD:B3:F1:32:A4:21:D3:42 X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1a:63:d9:ff:9e:51:80:3e:7e:46:55:22:7c:b6:6c:10:12: e2:46:34:69:41:00:dc:97:3f:12:ce:96:af:d3:fa:38:cc:06: c1:9a:f4:f7:b1:f1:65:15:86:10:0f:aa:99:45:72:aa:a1:16: 51:ee:0b:b0:bb:ad:0e:70:d0:8f:61:ed:66:65:d5:13:04:5a: c3:09:f9:9f:3b:29:23:fe:1f:1c:97:de:af:dc:c3:2d:3a:c5: 20:4a:03:91:a8:97:97:e8:42:90:9b:a8:38:a5:dd:46:b3:30: 6f:ca:9f:16:23:27:74:6b:98:49:d9:04:78:f4:b7:da:2f:89: 26:aa:c3:bb:77:14:df:d0:ac:ca:cd:ae:08:7f:28:f2:25:b5: d5:b3:e2:8e:ca:4d:88:b5:d3:7a:c3:71:bb:76:50:9a:9d:4c: d6:a9:1b:c6:de:fe:ce:ae:6b:59:55:2b:09:bf:af:1d:f9:b2: c0:15:9d:74:d7:82:23:4e:78:c1:29:97:6a:5f:a0:89:6d:e0: 7b:44:51:77:61:9b:f5:7b:0e:3d:f9:a8:3a:87:65:0d:da:2a: b8:5c:87:7b:02:10:75:e7:87:cf:40:a2:a2:85:d7:a8:7d:bd: 77:6f:33:8c:00:0c:b7:b2:7c:cb:e8:3c:20:28:a5:e8:38:c6: 6c:30:e9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUwOTA3MDMzMjA2WhcNMjUwOTE0MDMzMjA2WjAYMRYwFAYD VQQDEw02OGJjZmNiNi02ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUs+18D1iXJm96UDnTIkID+3ACn6bS5SglMGGhg9zBD/7W1tqEgvdGnaFJuY tXVI/oXeGU0+BINP4ORyZghxZxPmLUNkQCwt8EfKjjPBXjZIVMHyhZQT/qaJQ6B6 RSuvx1TUmZnlglARfmSYjUDbqUgAyvc6intxoYQyAMdvfiVYhrnKSMS3KyVwTCld Qu0lQJmcluilFwJ3d525d+CH7JQjzZuSf0Lh3+CzyrDtJTsVFlMY0rR4OVPysyLi PDO1fW3rkKxBW/gFb0Ds8wNPV+CR+sVQMivN3uy2f4Lba5CJVQWkMj2W02A4hfj0 dFs1b5SCJaQMzKHL6k51bAPJSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3zEQoo 3EhB3wiuNt2z8TKkIdNCMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfGmPZ/55RgD5+RlUifLZsEBLiRjRpQQDclz8Szpav0/o4zAbBmvT3 sfFlFYYQD6qZRXKqoRZR7guwu60OcNCPYe1mZdUTBFrDCfmfOykj/h8cl96v3MMt OsUgSgORqJeX6EKQm6g4pd1GszBvyp8WIyd0a5hJ2QR49LfaL4kmqsO7dxTf0KzK za4IfyjyJbXVs+KOyk2ItdN6w3G7dlCanUzWqRvG3v7OrmtZVSsJv68d+bLAFZ10 14IjTnjBKZdqX6CJbeB7RFF3YZv1ew49+ag6h2UN2iq4XId7AhB154fPQKKihdeo fb13bzOMAAy3snzL6DwgKKXoOMZsMOlZ -----END CERTIFICATE-----Generated at Mon Sep 8 06:16:20 2025 by rpki-client