$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: gBLnbCL+rRQptZfNAAK22BJf3QhmwoiL5xWzztROwIA= Subject key identifier: DB:50:1E:D5:44:AE:47:FD:5A:CC:FF:BB:DA:13:72:C3:2C:DD:76:D4 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 06FA Signing time: Sat 06 Sep 2025 22:17:22 +0000 Manifest this update: Sat 06 Sep 2025 22:17:22 +0000 Manifest next update: Sat 13 Sep 2025 22:17:22 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: qJjnzy6FzBttgw8neDp4/Vg0pTIzUkC/UOhI6notRvo=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: oCqXqO2+2B2y23GtVqHDvlPPKEZ12v6qNM3L54KcM68=) 3: 457C2AF8210811F092050034C4F9AE02.roa (hash: OjVTFs0VsRJxE3nsbT8pc64Ppj8ueIQpuGe0jj3NYdw=) 4: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: yklEZhBevYrGub8wKzCUI7Nu4x7RpinOoVY5WtDLrAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Sep 6 22:17:22 2025 GMT Not After : Sep 13 22:17:22 2025 GMT Subject: CN=68bcb2f2-c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:d7:68:6a:99:a4:8e:66:56:92:38:7d:12: 1d:4a:9f:20:ec:22:a1:f1:fb:53:d7:70:91:7e:d2: d1:27:a3:76:f1:5c:6b:95:f0:d0:29:e9:de:b2:5b: 36:32:a5:15:fc:69:89:03:c7:29:2c:b1:2f:06:39: 50:4a:b9:66:c7:7a:9d:a7:ef:8b:aa:a3:b6:ce:81: 42:f9:84:a0:3c:11:43:93:8f:95:80:9c:21:b8:6b: cc:80:f4:62:87:37:7c:39:fe:33:6c:e7:be:20:87: dc:20:3c:46:03:d1:27:08:af:17:c7:4d:78:1a:2a: 79:a2:e1:bc:45:a1:88:88:82:0b:7b:84:c7:93:74: 7f:21:e3:23:26:2a:47:ed:c0:0c:df:02:0b:2e:33: 21:45:1e:bc:6a:4c:32:1b:90:45:75:df:ea:7c:94: 97:d8:f0:76:a3:00:41:18:0e:dc:d4:7f:94:63:6c: 83:e9:e0:19:14:73:7f:f8:2c:ab:a2:01:3c:10:22: 68:1d:c4:61:e3:f8:5e:80:be:a8:98:9a:98:f3:97: 35:fb:d3:22:1d:2c:00:1c:6c:b9:57:f2:73:c3:f9: 05:fc:c3:fe:e8:76:4a:ff:36:f0:f6:ea:14:02:60: 6b:25:ab:23:fb:d8:44:d4:6a:e6:bb:b8:89:65:16: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:50:1E:D5:44:AE:47:FD:5A:CC:FF:BB:DA:13:72:C3:2C:DD:76:D4 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:93:52:92:e1:32:a6:06:e7:98:d6:09:76:68:11:85:c9: 42:3f:c3:be:4c:6c:2f:d7:fa:1d:a8:1d:1d:9c:b9:13:e2:7e: c3:02:68:6f:af:a2:78:6d:b4:52:bd:1c:5e:ca:d3:e1:07:3f: 15:4d:5c:9a:74:48:9b:95:8b:3f:ea:6c:61:34:4d:87:c2:99: 22:ec:44:31:9f:fe:c4:98:ed:03:91:1f:4f:75:73:f7:67:96: 94:59:85:2c:c9:73:33:91:1e:19:55:45:85:89:f6:6f:7a:07: ef:49:6e:34:81:53:37:91:d0:3c:1d:c0:a6:1b:50:0a:4d:cf: 2b:8c:84:3a:31:61:d6:00:68:07:f5:ee:a7:ae:98:16:df:87: b9:7b:99:62:0e:a8:0a:55:83:30:14:55:55:cf:17:2c:84:68: ed:6f:59:5b:d4:5b:10:33:56:0f:1f:82:db:2f:b8:7e:17:a6: ae:b5:df:8f:a2:48:87:08:9d:ae:36:45:8a:55:12:ee:8d:06: 00:20:27:fd:b8:a7:40:8f:d8:9b:bd:d5:5a:9b:1b:d2:04:b5: 3b:ab:41:8c:31:4a:26:77:4d:c3:e4:74:42:21:fd:71:a5:5a: 6c:a2:67:70:9f:5f:6c:57:47:49:91:67:1f:f6:3f:de:e5:41: b1:5f:73:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjUwOTA2MjIxNzIyWhcNMjUwOTEzMjIxNzIyWjAYMRYwFAYD VQQDEw02OGJjYjJmMi1jMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sfXaGqZpI5mVpI4fRIdSp8g7CKh8ftT13CRftLRJ6N28VxrlfDQKenesls2 MqUV/GmJA8cpLLEvBjlQSrlmx3qdp++LqqO2zoFC+YSgPBFDk4+VgJwhuGvMgPRi hzd8Of4zbOe+IIfcIDxGA9EnCK8Xx014Gip5ouG8RaGIiIILe4THk3R/IeMjJipH 7cAM3wILLjMhRR68akwyG5BFdd/qfJSX2PB2owBBGA7c1H+UY2yD6eAZFHN/+Cyr ogE8ECJoHcRh4/hegL6omJqY85c1+9MiHSwAHGy5V/Jzw/kF/MP+6HZK/zbw9uoU AmBrJasj+9hE1Grmu7iJZRbq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtQHtVE rkf9Wsz/u9oTcsMs3XbUMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8pNSkuEypgbnmNYJdmgRhclCP8O+TGwv1/odqB0dnLkT4n7DAmhv r6J4bbRSvRxeytPhBz8VTVyadEiblYs/6mxhNE2Hwpki7EQxn/7EmO0DkR9PdXP3 Z5aUWYUsyXMzkR4ZVUWFifZvegfvSW40gVM3kdA8HcCmG1AKTc8rjIQ6MWHWAGgH 9e6nrpgW34e5e5liDqgKVYMwFFVVzxcshGjtb1lb1FsQM1YPH4LbL7h+F6autd+P okiHCJ2uNkWKVRLujQYAICf9uKdAj9ibvdVamxvSBLU7q0GMMUomd03D5HRCIf1x pVpsomdwn19sV0dJkWcf9j/e5UGxX3O0 -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:27 2025 by rpki-client