$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: 7xubGlXRBGlD1vqXn/3HQEtgA3o0fU/5n1iV4l6w1ro= Subject key identifier: 88:66:2C:24:43:CD:97:B5:C6:AA:BF:CC:89:A4:90:6E:A3:B4:DB:B9 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 38 Signing time: Fri 05 Sep 2025 08:05:29 +0000 Manifest this update: Fri 05 Sep 2025 08:05:29 +0000 Manifest next update: Fri 12 Sep 2025 08:05:29 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: d8u2qWpTN29QhawngThlFF+tpiMtQcC3zU26WpQTdII=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Sep 5 08:05:29 2025 GMT Not After : Sep 12 08:05:29 2025 GMT Subject: CN=68ba99c9-27c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:be:0c:c0:d6:11:3e:96:f8:76:aa:98:46: 36:c2:42:a0:66:1b:f9:eb:8a:e9:de:5f:72:61:fe: 85:0c:aa:12:9e:b9:dc:33:08:c0:59:2f:31:46:e3: 95:4f:a6:eb:6d:d1:83:38:01:32:f4:e3:28:1e:c4: 0c:30:4b:48:e8:9f:16:3f:94:fb:03:37:e2:2e:f5: 77:0f:25:57:ec:cb:90:b6:fe:68:fd:0d:f7:ac:04: 33:26:d9:4f:51:33:e9:38:d9:50:d7:93:78:38:fb: af:86:5f:f3:fa:de:c5:20:e3:45:7d:70:de:1c:19: 7b:b8:00:73:ea:f6:b1:73:be:b6:73:2b:65:85:eb: 4f:a0:72:0f:c5:7f:71:dc:7b:93:88:c1:75:91:61: 02:65:97:4d:f8:72:0c:dd:16:8b:90:ed:b2:19:11: 44:72:98:85:e2:72:48:fc:93:49:13:7c:14:aa:47: a2:ee:b4:73:38:cc:79:a3:7f:3d:db:c9:f2:e9:f2: 8c:48:2b:bd:6d:7e:02:41:29:bd:75:71:55:4b:07: 9c:a2:7a:94:c7:0e:7e:e8:56:93:5e:a6:ac:d8:2d: 1a:a3:fd:34:6b:89:37:e2:3c:e3:dc:27:91:7a:98: bd:88:d4:06:75:bd:22:41:a0:34:06:db:b7:32:c5: 6f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:2C:24:43:CD:97:B5:C6:AA:BF:CC:89:A4:90:6E:A3:B4:DB:B9 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c6:45:52:6d:43:bd:29:70:f2:c7:e8:52:95:9b:da:96:0f: 46:db:f2:bd:92:95:df:f7:fc:94:a6:17:f1:c6:b1:6b:99:39: 18:4c:63:cc:1d:12:14:2e:92:dd:4a:0b:30:32:9b:8c:c7:27: 50:94:22:94:d5:2f:ee:8e:40:16:da:36:8d:59:fe:a8:a7:72: b3:16:c7:be:97:bb:45:3b:ac:f0:66:20:49:a6:a4:e4:36:6e: 17:4c:25:a5:c0:e6:26:30:6e:49:2c:b0:db:51:f3:37:0f:2a: e6:ce:f0:cb:a8:b9:61:c6:a8:40:80:35:4e:0d:12:27:9d:64: c0:b0:19:14:b8:01:74:6d:fd:20:aa:16:4b:a4:28:8f:99:b7: 99:5b:0e:40:70:0e:38:54:e2:f9:44:15:84:7a:09:23:54:24: f4:51:f8:58:4c:e0:cd:60:17:42:ca:18:3f:74:da:00:50:4b: b9:2f:21:b5:d5:b7:6d:3e:57:99:d0:db:e7:87:f9:fe:ed:2b: 1c:33:5a:71:f7:2d:d6:f8:1f:6f:e9:a8:a6:89:b4:84:f5:97: a1:ba:45:e1:40:b2:df:c2:35:1a:45:fc:7a:c2:45:cf:ed:96: bf:5b:c4:33:93:e9:99:19:f4:2c:68:9f:d0:bb:64:8e:33:8b: 77:9c:06:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA5MDUwODA1MjlaFw0yNTA5MTIwODA1MjlaMBgxFjAUBgNV BAMTDTY4YmE5OWM5LTI3YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC45L4MwNYRPpb4dqqYRjbCQqBmG/nriuneX3Jh/oUMqhKeudwzCMBZLzFG45VP putt0YM4ATL04ygexAwwS0jonxY/lPsDN+Iu9XcPJVfsy5C2/mj9DfesBDMm2U9R M+k42VDXk3g4+6+GX/P63sUg40V9cN4cGXu4AHPq9rFzvrZzK2WF60+gcg/Ff3Hc e5OIwXWRYQJll034cgzdFouQ7bIZEURymIXickj8k0kTfBSqR6LutHM4zHmjfz3b yfLp8oxIK71tfgJBKb11cVVLB5yiepTHDn7oVpNepqzYLRqj/TRriTfiPOPcJ5F6 mL2I1AZ1vSJBoDQG27cyxW8/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiGYsJEPN l7XGqr/MiaSQbqO027kwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILGRVJtQ70pcPLH6FKVm9qWD0bb8r2Sld/3/JSmF/HGsWuZORhMY8wd EhQukt1KCzAym4zHJ1CUIpTVL+6OQBbaNo1Z/qincrMWx76Xu0U7rPBmIEmmpOQ2 bhdMJaXA5iYwbkkssNtR8zcPKubO8MuouWHGqECANU4NEiedZMCwGRS4AXRt/SCq FkukKI+Zt5lbDkBwDjhU4vlEFYR6CSNUJPRR+FhM4M1gF0LKGD902gBQS7kvIbXV t20+V5nQ2+eH+f7tKxwzWnH3Ldb4H2/pqKaJtIT1l6G6ReFAst/CNRpF/HrCRc/t lr9bxDOT6ZkZ9Cxon9C7ZI4zi3ecBmw= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:18 2025 by rpki-client