$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: nQTB5oIgXLw+GPJmR76fd0vRqniY047ZBkVs0SjxI7o= Subject key identifier: 96:93:97:EE:CD:D1:C1:A6:E1:83:EE:96:FC:C0:51:91:D6:6D:E1:5C Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0D38 Signing time: Sun 24 Aug 2025 17:58:59 +0000 Manifest this update: Sun 24 Aug 2025 17:58:59 +0000 Manifest next update: Sun 31 Aug 2025 17:58:59 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: 4UDJCq0XOhkbrZaYCGn8C6yN+9bZvIc/kjUkXx+sGEA=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: iNF26PQV2QDxZAqXThwlTn9eA9VPYLTtDdkUTHz7O7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: Aug 24 17:58:59 2025 GMT Not After : Aug 31 17:58:59 2025 GMT Subject: CN=68ab52e3-4a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:7d:dd:e1:d9:9c:8e:98:4e:69:ca:42:9c: f9:d3:13:5c:7c:b3:03:6d:bf:92:25:d3:0c:76:b5: 4f:29:60:33:65:16:a0:d0:2f:34:11:76:3e:e5:79: 28:70:32:4e:43:94:f7:9f:4e:7d:9a:3e:59:8d:04: 71:9f:1e:1a:a0:09:d9:d3:40:c2:b3:73:17:a3:a2: d4:f6:32:61:c0:d0:e2:12:3a:eb:93:44:c9:ff:1f: a5:5f:71:59:87:3f:51:53:2e:a3:f4:5f:bc:9e:a4: fc:f2:8c:54:42:1f:e0:d3:5d:3a:dc:88:fb:af:a4: 78:41:8b:f1:d0:7a:e3:07:17:79:b7:df:1c:92:0a: 8f:a9:64:76:3c:8d:97:9c:38:5d:e0:c3:03:8f:29: c9:0f:f5:32:58:ac:da:0e:87:0d:a0:cf:79:6e:77: 03:e1:16:04:b8:1d:58:1b:18:53:14:e2:d6:10:16: b8:ab:40:78:a4:44:d7:7d:5f:ae:0d:42:06:0e:e3: 38:44:71:b8:b4:d9:fb:76:01:b8:ba:dd:f4:bc:4b: a0:75:19:6d:be:da:ad:3d:e5:d8:9e:00:f6:e0:a9: 03:78:77:17:18:61:6a:8e:66:b1:0a:5b:55:7c:e2: 38:8a:38:b6:3a:7c:e0:e8:c2:84:91:ff:26:da:b7: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:93:97:EE:CD:D1:C1:A6:E1:83:EE:96:FC:C0:51:91:D6:6D:E1:5C X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bd:af:90:12:84:af:4e:bf:5f:7b:b3:aa:a1:15:0a:b2:fb: 87:99:5f:e9:3c:4e:6f:4b:a7:1a:f6:01:6b:b4:dc:80:ff:1a: bf:93:d4:ea:34:64:4d:64:01:57:78:e6:d7:3b:03:45:f5:5c: 53:0d:02:a7:f0:ce:a6:48:97:f1:c9:e4:9e:36:45:f9:e4:ff: dd:ce:a1:6d:f6:f9:53:5f:98:1c:f3:dc:3b:ce:e8:71:12:55: 9a:ac:70:c3:47:95:c2:85:e5:61:dd:bc:9a:f4:8a:04:26:8b: 41:f9:43:cb:31:3c:f8:b8:53:cd:72:b5:51:b4:c9:ed:c8:16: 88:ab:79:29:ab:b6:a6:5c:ef:0f:9c:f4:d3:e2:a2:5b:25:92: 48:b1:5c:55:16:e3:13:5e:a6:58:8f:93:8e:99:f8:a3:1a:b3: 7a:11:a6:5f:b0:5b:0b:17:20:a2:91:88:fd:fb:2d:7a:71:ec: b6:2a:f2:74:d6:79:ae:0d:4b:ae:81:61:4e:2f:ea:a0:c6:8a: 5c:4b:44:5b:47:df:29:8d:ac:ba:1a:96:b2:92:4a:c3:f8:14: ce:a9:e7:16:82:6d:65:0c:42:c8:0b:b9:db:de:f2:ba:e1:0b: 80:a3:f9:5b:5d:18:19:eb:37:a7:bd:f6:88:89:a4:59:fb:22: b0:e3:95:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjUwODI0MTc1ODU5WhcNMjUwODMxMTc1ODU5WjAYMRYwFAYD VQQDEw02OGFiNTJlMy00YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/t93eHZnI6YTmnKQpz50xNcfLMDbb+SJdMMdrVPKWAzZRag0C80EXY+5Xko cDJOQ5T3n059mj5ZjQRxnx4aoAnZ00DCs3MXo6LU9jJhwNDiEjrrk0TJ/x+lX3FZ hz9RUy6j9F+8nqT88oxUQh/g01063Ij7r6R4QYvx0HrjBxd5t98ckgqPqWR2PI2X nDhd4MMDjynJD/UyWKzaDocNoM95bncD4RYEuB1YGxhTFOLWEBa4q0B4pETXfV+u DUIGDuM4RHG4tNn7dgG4ut30vEugdRltvtqtPeXYngD24KkDeHcXGGFqjmaxCltV fOI4iji2Onzg6MKEkf8m2rdFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaTl+7N 0cGm4YPulvzAUZHWbeFcMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOva+QEoSvTr9fe7OqoRUKsvuHmV/pPE5vS6ca9gFrtNyA/xq/k9Tq NGRNZAFXeObXOwNF9VxTDQKn8M6mSJfxyeSeNkX55P/dzqFt9vlTX5gc89w7zuhx ElWarHDDR5XCheVh3bya9IoEJotB+UPLMTz4uFPNcrVRtMntyBaIq3kpq7amXO8P nPTT4qJbJZJIsVxVFuMTXqZYj5OOmfijGrN6EaZfsFsLFyCikYj9+y16cey2KvJ0 1nmuDUuugWFOL+qgxopcS0RbR98pjay6GpaykkrD+BTOqecWgm1lDELIC7nb3vK6 4QuAo/lbXRgZ6zenvfaIiaRZ+yKw45U3 -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:31 2025 by rpki-client