$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: ydTsVmBZmsRmFgRrPd/Ntymgk57Hm04Oo23UJ1aiAwU= Subject key identifier: D9:B0:A0:05:4F:80:27:E5:25:DF:00:44:3E:85:6B:30:D3:4E:38:0B Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 08CA Signing time: Thu 04 Sep 2025 20:41:13 +0000 Manifest this update: Thu 04 Sep 2025 20:41:13 +0000 Manifest next update: Thu 11 Sep 2025 20:41:13 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: VSqDSWbgCbclyNxUJMz99ssBIZG+VwpjPDXi9zKzAYk=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: +c2DPE0WaPr48QApZCLfEPaMsExO+TZ/BLuuQJmn+Mg=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: /qSqUUquW8P34EzhMbBxrdao9SE8qOtCjPceo9nPsLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Sep 4 20:41:13 2025 GMT Not After : Sep 11 20:41:13 2025 GMT Subject: CN=68b9f969-7ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c5:82:f0:d6:1b:65:d7:75:67:3c:dc:6e:90: 82:3e:e2:ea:85:46:c3:a8:84:66:23:42:f2:87:c6: 2b:98:5b:60:87:dc:4d:7a:b6:5b:0e:2d:69:3b:fa: bf:53:c6:38:f5:a3:bf:79:93:ee:d7:d6:39:77:72: a4:39:77:9f:29:20:64:da:92:f7:31:8f:c9:1d:e2: 6e:8e:9a:3a:9b:a5:f3:75:91:b5:75:c8:93:12:e6: 3a:d0:a9:c5:19:b8:6f:ec:ea:fb:01:cd:73:d1:df: f0:79:72:98:65:98:7d:a3:79:f8:4e:c6:57:a0:47: b6:4b:77:3f:86:34:99:c2:97:25:f3:c0:a2:35:6a: b8:40:95:93:73:e9:53:df:56:59:3b:6f:15:71:05: dd:e6:e8:c6:f3:be:f3:41:f8:3b:49:54:b5:bd:c5: eb:c8:9b:f4:8b:d9:00:7c:4e:66:bc:ec:98:78:2a: 48:61:35:69:49:6e:a5:fe:0d:ee:a8:d3:94:00:69: 00:da:c6:d2:e3:fa:ea:6e:3f:81:88:4c:8d:e4:03: 19:09:11:5d:59:03:d8:ca:5c:57:02:39:c4:98:08: 5d:a6:20:7c:31:31:94:b2:42:a6:b3:5c:53:33:0c: 42:9f:88:1a:09:a5:09:75:4f:27:9e:37:d3:56:9f: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:A0:05:4F:80:27:E5:25:DF:00:44:3E:85:6B:30:D3:4E:38:0B X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:29:e2:f3:d0:22:f5:b1:fd:01:b1:49:18:7b:95:3e:d2:e0: 0c:34:8f:c6:2d:1b:6d:8d:4e:ad:a6:08:3e:2d:eb:aa:30:bb: 78:d9:d3:ba:84:e5:21:66:6b:e7:68:be:e3:a1:af:58:f5:4d: c0:17:56:8b:5c:38:c2:88:be:0d:d7:f0:0b:53:d2:cf:37:a2: 50:cc:2b:d5:1a:f9:53:63:df:b1:4b:fe:f3:2c:b4:fe:2d:48: 98:9b:01:85:85:a0:99:c5:17:e4:b5:ae:13:f0:11:4f:77:61: b0:5c:d8:cc:e8:1d:89:5b:68:f8:74:a8:b2:76:ac:56:be:87: 0d:97:6d:12:0e:89:95:c0:dc:85:09:96:9f:ae:fa:48:24:95: 68:43:9d:fe:75:ef:bf:db:da:b9:1e:3c:a2:db:ae:c2:6f:53: 13:78:57:8d:fc:22:2c:10:75:89:56:7f:a1:33:2a:d5:0d:98: d6:73:5d:76:90:4c:8f:9b:04:39:30:f4:ed:a4:f0:eb:cd:44: 1f:39:e0:e4:07:f9:5b:24:11:3b:07:b3:fe:ec:0e:1a:c7:4a: 0f:3f:99:a4:c8:ae:10:e6:c0:bd:44:d1:47:7a:d3:74:fd:5a: 20:ce:46:55:2e:99:56:a6:06:6b:14:8d:1b:8e:e0:b9:c1:62: af:80:de:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUwOTA0MjA0MTEzWhcNMjUwOTExMjA0MTEzWjAYMRYwFAYD VQQDEw02OGI5Zjk2OS03ZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sWC8NYbZdd1ZzzcbpCCPuLqhUbDqIRmI0Lyh8YrmFtgh9xNerZbDi1pO/q/ U8Y49aO/eZPu19Y5d3KkOXefKSBk2pL3MY/JHeJujpo6m6XzdZG1dciTEuY60KnF Gbhv7Or7Ac1z0d/weXKYZZh9o3n4TsZXoEe2S3c/hjSZwpcl88CiNWq4QJWTc+lT 31ZZO28VcQXd5ujG877zQfg7SVS1vcXryJv0i9kAfE5mvOyYeCpIYTVpSW6l/g3u qNOUAGkA2sbS4/rqbj+BiEyN5AMZCRFdWQPYylxXAjnEmAhdpiB8MTGUskKms1xT MwxCn4gaCaUJdU8nnjfTVp8HYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmwoAVP gCflJd8ARD6FazDTTjgLMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIKeLz0CL1sf0BsUkYe5U+0uAMNI/GLRttjU6tpgg+LeuqMLt42dO6 hOUhZmvnaL7joa9Y9U3AF1aLXDjCiL4N1/ALU9LPN6JQzCvVGvlTY9+xS/7zLLT+ LUiYmwGFhaCZxRfkta4T8BFPd2GwXNjM6B2JW2j4dKiydqxWvocNl20SDomVwNyF CZafrvpIJJVoQ53+de+/29q5Hjyi267Cb1MTeFeN/CIsEHWJVn+hMyrVDZjWc112 kEyPmwQ5MPTtpPDrzUQfOeDkB/lbJBE7B7P+7A4ax0oPP5mkyK4Q5sC9RNFHetN0 /VogzkZVLplWpgZrFI0bjuC5wWKvgN46 -----END CERTIFICATE-----Generated at Sat Sep 6 16:01:13 2025 by rpki-client