$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: 6790QH9d45VqYp81th4I/xvVD2UexcluAqoRvJgn0W4= Subject key identifier: 98:31:DF:D1:9E:8E:9D:AB:D9:EC:2E:44:49:AF:EE:D1:80:80:27:45 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 7F Signing time: Fri 05 Sep 2025 07:13:21 +0000 Manifest this update: Fri 05 Sep 2025 07:13:20 +0000 Manifest next update: Fri 12 Sep 2025 07:13:20 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: jo1s4EE+Sr01upiY+mlEvlIgRQuXXcnlVfzMUd1v7/s=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Sep 5 07:13:20 2025 GMT Not After : Sep 12 07:13:20 2025 GMT Subject: CN=68ba8d91-e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:02:64:08:19:2d:6a:3b:ec:f2:77:b4:73: 4b:d9:be:ed:d5:dd:48:62:d4:e4:04:e9:24:33:27: 73:86:f8:63:51:43:53:a9:71:9c:8c:70:4f:c8:03: c4:0b:d6:22:da:b5:6c:32:b5:e1:4d:10:45:3e:d7: e1:c4:e0:eb:82:6b:d8:fc:52:85:34:fc:13:82:45: d6:0d:e0:01:4b:4b:af:2e:ed:3c:7f:ea:b7:8b:0c: f1:ea:f0:d9:53:0e:ad:fa:84:43:4c:55:40:de:b8: 78:6c:ac:b6:d4:93:91:ea:69:7b:8d:ba:c9:15:78: 25:8d:c8:99:5a:7a:34:c5:28:08:2e:ff:9e:e2:fb: 1d:ad:fb:ac:d7:e2:7c:a4:ef:90:db:84:90:28:0b: c5:1b:e7:5e:0c:c5:f6:f9:bd:98:35:34:56:86:64: 6a:9a:5d:9f:c7:d0:1e:17:0b:c9:18:81:84:09:a4: 74:91:e7:3a:02:5a:d8:79:2b:f8:c8:e4:c9:80:ee: ca:9b:8d:43:5a:06:14:3f:4d:60:ef:de:df:47:c4: d1:4d:30:26:0c:8b:77:f2:b5:d7:32:08:ed:02:ad: fa:0b:7f:f8:15:c4:be:33:f6:95:64:ac:09:be:92: 8c:cc:be:17:cd:f7:0b:20:d7:1a:8d:56:aa:c1:9b: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:31:DF:D1:9E:8E:9D:AB:D9:EC:2E:44:49:AF:EE:D1:80:80:27:45 X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b6:e7:f2:9e:1d:1f:5a:38:30:f0:4b:ab:7c:21:e0:19:69: d9:ce:e1:d7:b3:71:ad:af:52:13:f3:3f:0c:e3:c2:42:11:8f: 6a:f5:9f:4a:ab:5e:88:d1:94:4d:2f:72:88:53:73:f3:f8:00: da:3c:d2:15:de:fb:09:f5:b3:a4:db:40:90:3d:22:81:b1:35: bb:fe:fe:9e:b6:04:eb:98:b5:81:67:22:4f:05:d8:9a:22:a3: 0e:7f:8d:7d:ce:ee:ca:1a:f1:17:5a:a7:9f:be:7d:ec:ec:c1: d1:06:91:56:af:2c:2b:5f:34:bf:c2:5e:09:7f:5e:e5:77:82: a4:a8:c9:91:20:b7:92:42:43:4a:1a:42:7b:f5:9c:58:8e:10: 82:03:c2:c4:e9:28:cb:e2:2d:85:31:e5:c0:4c:ec:2f:5e:a8: 43:df:d2:e9:ef:39:21:ad:1d:c9:d8:d1:e7:69:65:95:1a:16: ea:9a:6f:8a:2a:1b:9e:5a:76:b8:27:53:aa:1a:c4:26:f2:bd: ac:1c:d9:04:68:04:83:f9:7b:e1:32:72:ad:24:3f:e8:20:a5: e3:7e:e3:62:34:50:4d:c4:bf:db:4a:7c:09:4d:bf:8d:23:95: c9:b5:00:a7:1b:8c:cc:a8:7a:36:38:27:9a:45:25:3b:cc:5b: 7a:31:e1:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjUwOTA1MDcxMzIwWhcNMjUwOTEyMDcxMzIwWjAYMRYwFAYD VQQDEw02OGJhOGQ5MS1lNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm4CZAgZLWo77PJ3tHNL2b7t1d1IYtTkBOkkMydzhvhjUUNTqXGcjHBPyAPE C9Yi2rVsMrXhTRBFPtfhxODrgmvY/FKFNPwTgkXWDeABS0uvLu08f+q3iwzx6vDZ Uw6t+oRDTFVA3rh4bKy21JOR6ml7jbrJFXgljciZWno0xSgILv+e4vsdrfus1+J8 pO+Q24SQKAvFG+deDMX2+b2YNTRWhmRqml2fx9AeFwvJGIGECaR0kec6AlrYeSv4 yOTJgO7Km41DWgYUP01g797fR8TRTTAmDIt38rXXMgjtAq36C3/4FcS+M/aVZKwJ vpKMzL4XzfcLINcajVaqwZsTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgx39Ge jp2r2ewuREmv7tGAgCdFMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/tufynh0fWjgw8EurfCHgGWnZzuHXs3Gtr1IT8z8M48JCEY9q9Z9K q16I0ZRNL3KIU3Pz+ADaPNIV3vsJ9bOk20CQPSKBsTW7/v6etgTrmLWBZyJPBdia IqMOf419zu7KGvEXWqefvn3s7MHRBpFWrywrXzS/wl4Jf17ld4KkqMmRILeSQkNK GkJ79ZxYjhCCA8LE6SjL4i2FMeXATOwvXqhD39Lp7zkhrR3J2NHnaWWVGhbqmm+K KhueWna4J1OqGsQm8r2sHNkEaASD+XvhMnKtJD/oIKXjfuNiNFBNxL/bSnwJTb+N I5XJtQCnG4zMqHo2OCeaRSU7zFt6MeGc -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:09 2025 by rpki-client