$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft File: _rhjYz3rcT99klaMcXmFhLC61mY.mft (raw, json) Hash identifier: qKdLuW3YG14viSGXyP4420NmwazMG7u9rseGlJG8Y+U= Subject key identifier: E0:69:A5:34:18:C0:4D:E9:35:C1:F2:6E:A8:18:14:BE:5D:45:69:25 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft Manifest number: 0108 Signing time: Sat 19 Jul 2025 05:14:44 +0000 Manifest this update: Sat 19 Jul 2025 05:14:43 +0000 Manifest next update: Sat 26 Jul 2025 05:14:43 +0000 Files and hashes: 1: _rhjYz3rcT99klaMcXmFhLC61mY.crl (hash: 4cuHQSSGAZxb+y4cFRYhmGQuAhw8FdFajpnMrekNirE=) 2: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (hash: SAKcVkUSU/ZcJXpgMJhIHN2SX2uP3Z2m9YsmC8MIfhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: Jul 19 05:14:43 2025 GMT Not After : Jul 26 05:14:43 2025 GMT Subject: CN=687b29c3-455f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:1b:a9:23:a8:13:ef:b8:4a:06:4c:60:58: 9f:f1:b3:f0:7e:32:df:b3:e4:27:ca:16:46:4d:91: 41:d9:0b:a7:a0:38:48:87:ac:93:b6:5a:8c:cf:05: 73:15:f1:06:31:8f:4f:cf:e9:37:6d:83:ef:85:31: dd:39:24:bd:f4:cd:bd:51:5e:53:7d:9c:9c:17:84: 3b:b2:38:8b:2f:2e:b5:4c:da:3f:4a:e6:6d:0e:7b: ea:fa:6b:02:5f:4a:65:d2:99:8e:b7:85:d3:e3:5f: c6:7a:de:5b:18:fc:d8:86:69:b7:e3:75:a8:6a:7f: 88:bf:16:0c:f6:29:2f:a4:80:b2:25:11:6e:d1:72: 0f:c6:d0:fd:43:0d:43:af:2a:8d:65:5c:9d:a1:dd: f1:80:04:5b:e4:d4:7d:9a:40:e9:bc:ef:9b:9d:e9: a6:cf:b1:fc:43:64:a1:59:4b:66:68:56:f1:35:fc: 8c:18:ae:d0:23:7d:73:1c:a2:a3:16:c3:29:89:c6: 4e:d6:ec:5a:7d:3c:e8:71:00:3d:8a:5f:a2:08:e4: 70:c1:2d:35:af:83:c5:6e:31:35:a0:5a:76:d3:cd: 26:7f:42:b8:eb:eb:0b:8c:e6:d9:28:86:96:5c:18: 12:ae:64:64:b8:3f:d8:bc:ad:f7:ed:49:31:3d:83: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:69:A5:34:18:C0:4D:E9:35:C1:F2:6E:A8:18:14:BE:5D:45:69:25 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fa:86:ad:0c:0d:38:0b:fb:ae:3a:a4:86:56:de:cb:48:07: 4f:78:7c:a3:fe:3d:c2:ae:d3:57:d8:32:75:f4:37:fa:da:60: b6:47:30:63:48:dd:30:03:bf:17:da:15:ca:90:a6:13:2f:8c: 5a:09:ac:c9:28:77:84:d8:8d:3b:91:06:23:e3:dc:ce:c4:0b: a4:1b:40:c0:52:51:e1:b9:06:9e:e6:53:3d:1a:74:b9:ce:b7: 84:be:d6:0c:b6:49:b7:2c:c5:a2:d7:9e:81:e9:4d:45:72:61: bf:b8:72:00:8d:8e:52:c0:4c:90:5c:29:97:b8:34:9a:50:fb: b3:c9:63:46:6a:41:a6:75:b8:4b:4c:56:a6:d7:27:49:d6:14: 72:22:5a:4f:36:aa:2d:68:dc:3d:6e:4b:e2:24:20:05:c3:42: 45:c6:3d:63:71:42:8a:bf:20:8a:2f:3c:a2:c0:0d:5d:59:a7: 72:32:73:c9:9f:5c:ee:bb:0d:e0:97:03:65:d4:ef:b4:f2:88: 45:8c:64:de:24:a3:ef:02:47:bd:8c:7e:11:a4:0d:9f:83:8a: 02:d1:56:bf:9e:d9:b9:24:7c:f6:2e:ae:d8:5e:da:66:e3:ca: c6:95:0e:ff:33:82:26:63:28:ea:8c:04:79:1d:0d:b6:e5:3b: fb:d0:1d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwNzE5MDUxNDQzWhcNMjUwNzI2MDUxNDQzWjAYMRYwFAYD VQQDEw02ODdiMjljMy00NTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuE0bqSOoE++4SgZMYFif8bPwfjLfs+QnyhZGTZFB2QunoDhIh6yTtlqMzwVz FfEGMY9Pz+k3bYPvhTHdOSS99M29UV5TfZycF4Q7sjiLLy61TNo/SuZtDnvq+msC X0pl0pmOt4XT41/Get5bGPzYhmm343Woan+IvxYM9ikvpICyJRFu0XIPxtD9Qw1D ryqNZVydod3xgARb5NR9mkDpvO+bnemmz7H8Q2ShWUtmaFbxNfyMGK7QI31zHKKj FsMpicZO1uxafTzocQA9il+iCORwwS01r4PFbjE1oFp2080mf0K46+sLjObZKIaW XBgSrmRkuD/YvK337UkxPYPhwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBppTQY wE3pNcHybqgYFL5dRWklMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBBMi9FNEM4ODUxMkQwMjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNU OTlrbGFNY1htRmhMQzYxbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY+oatDA04C/uuOqSGVt7LSAdPeHyj/j3CrtNX2DJ19Df62mC2RzBj SN0wA78X2hXKkKYTL4xaCazJKHeE2I07kQYj49zOxAukG0DAUlHhuQae5lM9GnS5 zreEvtYMtkm3LMWi156B6U1FcmG/uHIAjY5SwEyQXCmXuDSaUPuzyWNGakGmdbhL TFam1ydJ1hRyIlpPNqotaNw9bkviJCAFw0JFxj1jcUKKvyCKLzyiwA1dWadyMnPJ n1zuuw3glwNl1O+08ohFjGTeJKPvAke9jH4RpA2fg4oC0Va/ntm5JHz2Lq7YXtpm 48rGlQ7/M4ImYyjqjAR5HQ225Tv70B3w -----END CERTIFICATE-----Generated at Sun Jul 20 20:42:58 2025 by rpki-client