$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: yTrTMKTcfPT+cLYRr6w6z0I05O2Wyt3g0XdN4L2D5Uk= Subject key identifier: D3:00:BB:C7:03:C7:C2:C6:6A:11:CD:6E:48:3D:1D:30:94:AC:20:3C Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 66 Signing time: Sat 19 Jul 2025 07:17:08 +0000 Manifest this update: Sat 19 Jul 2025 07:17:08 +0000 Manifest next update: Sat 26 Jul 2025 07:17:08 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: rtXdnBsrhjQitIRqi90XRNxJGPUKFFbajz2ZtzOdzoc=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Jul 19 07:17:08 2025 GMT Not After : Jul 26 07:17:08 2025 GMT Subject: CN=687b4674-070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:9d:bc:45:ce:30:2e:2b:1b:77:63:c0:74: 0e:2d:bb:82:41:66:a3:13:ad:76:65:4a:8d:a8:60: 87:cf:0c:18:f9:ad:f7:45:13:8d:52:80:ef:a7:d5: 67:92:ff:c2:06:f0:0e:0e:6c:ba:9e:7a:58:a6:36: 10:3a:72:ff:67:a2:4c:e9:4e:e0:af:d0:3c:5c:7f: 5d:af:10:cf:3d:ba:af:51:ea:e2:eb:a1:9c:d4:5f: 49:20:34:a8:6e:44:cf:28:1a:2a:85:9c:c1:b2:75: e4:89:e4:36:99:f6:ea:ad:12:ba:d6:7b:03:f5:95: b3:aa:1d:cf:03:de:4a:98:48:10:78:fd:b7:8f:d2: b5:ba:46:74:cf:86:45:1f:29:8b:af:5b:97:93:b8: af:1f:d6:9b:4a:50:2a:74:38:fe:61:e6:92:9d:a1: bd:04:28:c7:09:df:fa:6c:80:a0:5b:e5:f2:25:06: 6d:26:30:de:4b:3b:2e:55:d9:56:04:d6:05:da:ba: 8a:99:9d:60:3b:86:5b:91:df:dc:ba:c0:79:e2:2c: 2f:55:9d:57:e3:e8:c0:33:cd:e1:18:16:cc:44:33: 72:b4:f1:26:fa:14:c0:10:27:3a:c5:ac:13:d8:05: 49:df:bf:45:ae:fc:a3:c3:c9:ff:5b:6c:9c:cf:85: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:00:BB:C7:03:C7:C2:C6:6A:11:CD:6E:48:3D:1D:30:94:AC:20:3C X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:09:27:5b:a8:22:0f:bc:ec:38:65:c5:44:0b:ab:70:39:79: 2a:03:47:0f:4f:de:ba:fe:24:ac:c8:a8:e9:2f:61:fc:0f:9b: 9c:94:29:2a:f7:d7:70:14:6b:25:45:e9:77:af:99:36:1e:0a: 7d:82:e6:5a:96:42:a1:4e:48:dc:0e:19:79:c9:87:43:92:cd: 1c:0d:6c:c3:74:ad:6b:66:2e:5e:a4:5c:a8:07:45:52:70:18: 05:c4:84:d4:25:88:a0:f7:2d:a4:11:f5:89:79:26:71:24:36: 35:e3:04:30:57:ed:6e:81:4f:26:50:cd:db:36:f8:8b:e8:72: fa:93:ed:34:2b:98:42:5a:a3:ad:d8:f6:e3:0f:4c:26:b1:bb: a6:61:bf:d2:58:03:b0:57:40:65:4d:74:7a:25:a5:8e:4b:9c: fd:ad:70:5e:d4:3b:36:50:86:c0:9e:a5:f0:78:e4:fb:07:2c: 47:aa:66:e6:4f:b1:da:28:2f:32:28:80:e6:37:03:d9:50:de: 09:51:f9:37:78:eb:51:9d:1b:86:51:7c:5a:25:6f:0c:2f:80: 91:3c:72:c9:e3:ab:03:1e:57:66:7e:76:fe:96:be:29:40:5f: 5b:62:ab:30:c1:39:6b:de:c2:5c:ed:c2:f2:b4:99:70:28:14: 4a:b3:3c:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUQzREFFRjdEMjc4ODM3M0VEREZDQjFBRDVDNEMyMzU2 QzU3QURFRDAeFw0yNTA3MTkwNzE3MDhaFw0yNTA3MjYwNzE3MDhaMBgxFjAUBgNV BAMTDTY4N2I0Njc0LTA3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16J28Rc4wLisbd2PAdA4tu4JBZqMTrXZlSo2oYIfPDBj5rfdFE41SgO+n1WeS /8IG8A4ObLqeelimNhA6cv9nokzpTuCv0Dxcf12vEM89uq9R6uLroZzUX0kgNKhu RM8oGiqFnMGydeSJ5DaZ9uqtErrWewP1lbOqHc8D3kqYSBB4/beP0rW6RnTPhkUf KYuvW5eTuK8f1ptKUCp0OP5h5pKdob0EKMcJ3/psgKBb5fIlBm0mMN5LOy5V2VYE 1gXauoqZnWA7hluR39y6wHniLC9VnVfj6MAzzeEYFsxEM3K08Sb6FMAQJzrFrBPY BUnfv0Wu/KPDyf9bbJzPhaL7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0wC7xwPH wsZqEc1uSD0dMJSsIDwwHwYDVR0jBBgwFoAUHT2u99J4g3Pt38sa1cTCNWxXre0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzAwM0E3OURBQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSFQydTk5SjRnM1B0MzhzYTFjVENOV3hYcmUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzAwM0E3OURBQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hUMnU5OUo0ZzNQ dDM4c2ExY1RDTld4WHJlMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACcJJ1uoIg+87DhlxUQLq3A5eSoDRw9P3rr+JKzIqOkvYfwPm5yUKSr3 13AUayVF6XevmTYeCn2C5lqWQqFOSNwOGXnJh0OSzRwNbMN0rWtmLl6kXKgHRVJw GAXEhNQliKD3LaQR9Yl5JnEkNjXjBDBX7W6BTyZQzds2+IvocvqT7TQrmEJao63Y 9uMPTCaxu6Zhv9JYA7BXQGVNdHolpY5LnP2tcF7UOzZQhsCepfB45PsHLEeqZuZP sdooLzIogOY3A9lQ3glR+Td461GdG4ZRfFolbwwvgJE8csnjqwMeV2Z+dv6WvilA X1tiqzDBOWvewlztwvK0mXAoFEqzPPw= -----END CERTIFICATE-----Generated at Mon Jul 21 02:48:45 2025 by rpki-client