$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: ArCm8HXnW2H4heU6Zb6VhwQLkclTPAFfzDFm69ii/KM= Subject key identifier: 62:14:6E:54:C7:C4:06:EE:D4:BE:B2:5C:1B:1A:8B:9D:F4:9F:EF:12 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 03C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 03C3 Signing time: Wed 13 Aug 2025 01:10:38 +0000 Manifest this update: Wed 13 Aug 2025 01:10:38 +0000 Manifest next update: Wed 20 Aug 2025 01:10:38 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: AtxU0oFidN5ERPc9ZLa3Y3yi6KiBdOMFy6V91lA89OE=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 967 (0x3c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Aug 13 01:10:38 2025 GMT Not After : Aug 20 01:10:38 2025 GMT Subject: CN=689be60e-2198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:01:c4:56:34:da:41:30:e2:af:b5:03:b9: c5:6c:c3:a9:ee:c9:89:83:08:2f:7d:df:da:9b:23: cd:c3:83:ab:ec:b1:68:6d:cc:eb:c1:f0:9c:b5:55: b5:87:a2:f6:0b:03:b5:90:dc:0c:3d:f8:50:bf:9c: b9:f8:ad:54:16:a0:73:65:e5:4e:f0:df:f2:97:c7: f4:a1:a3:c7:88:9f:e1:be:2a:ac:88:00:71:af:b4: 48:63:ad:7e:4b:7a:5e:9e:fc:a1:27:ec:e2:dd:ed: 9a:e8:28:37:83:1c:97:28:03:2d:2c:92:93:72:36: 99:92:a4:80:74:8a:7f:00:f8:99:43:9c:a8:85:d7: 1f:0e:57:ab:f3:76:d3:97:2c:f6:f3:81:1e:13:0e: 9b:4e:e6:a9:fc:02:3d:a9:a2:71:71:2c:04:db:e9: 77:7b:a7:e3:10:a5:49:da:8a:21:17:96:c4:55:8f: 8f:02:d0:c0:7e:a8:0c:43:8c:6d:42:f1:ac:87:ff: 42:d0:f6:00:c7:00:42:16:76:5c:64:7b:b9:4b:7c: e4:f5:d7:92:79:8f:d5:b3:a9:45:78:1a:d2:73:3d: 51:6d:89:21:e8:6e:f6:b7:8d:d3:02:84:28:67:5a: 25:51:20:75:24:1e:d9:92:e1:54:4e:13:5e:0f:28: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:14:6E:54:C7:C4:06:EE:D4:BE:B2:5C:1B:1A:8B:9D:F4:9F:EF:12 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:bb:20:32:11:0a:14:15:75:b1:6c:16:c2:b6:a8:aa:5d:ee: 2c:ac:ee:cd:9f:fc:eb:e2:27:0d:55:0e:e5:9d:22:b3:e8:e2: ab:e9:5e:ca:85:ae:e4:71:6a:e5:b1:49:ef:8f:71:38:9b:d1: ea:3f:c5:81:19:66:36:35:67:7a:d0:1e:8a:fe:f9:d5:db:8e: a5:4f:d4:49:97:e9:1b:6a:a1:83:6e:53:b9:6c:fd:79:a7:f1: 31:a6:d7:ec:4e:7c:48:21:66:b4:d9:18:15:65:18:09:97:96: 47:58:75:2c:81:10:ab:e9:76:1d:04:1d:af:bf:ec:94:aa:fd: 60:b3:36:75:69:31:54:8d:3b:af:c8:f6:9f:8b:8c:2d:1a:a6: d9:48:7c:e2:4e:b2:f0:0f:97:7b:53:11:25:f4:27:83:48:c6: 30:6e:4f:99:8a:52:94:80:82:37:07:88:c3:63:00:ab:ce:93: 80:95:97:b6:e8:7c:c9:42:0f:f1:8b:9d:0c:9f:3f:89:5c:41: 2c:39:e8:86:e8:a8:8d:5c:27:fa:9a:81:cc:b0:90:d8:9e:9a: bd:17:e2:df:9a:c2:d2:c6:97:ab:0d:23:dd:de:01:89:b8:86: 8f:f7:10:85:38:84:29:b1:1d:d2:87:75:62:46:9e:c8:a3:5b: ec:36:11:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUwODEzMDExMDM4WhcNMjUwODIwMDExMDM4WjAYMRYwFAYD VQQDEw02ODliZTYwZS0yMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PQBxFY02kEw4q+1A7nFbMOp7smJgwgvfd/amyPNw4Or7LFobczrwfCctVW1 h6L2CwO1kNwMPfhQv5y5+K1UFqBzZeVO8N/yl8f0oaPHiJ/hviqsiABxr7RIY61+ S3penvyhJ+zi3e2a6Cg3gxyXKAMtLJKTcjaZkqSAdIp/APiZQ5yohdcfDler83bT lyz284EeEw6bTuap/AI9qaJxcSwE2+l3e6fjEKVJ2oohF5bEVY+PAtDAfqgMQ4xt QvGsh/9C0PYAxwBCFnZcZHu5S3zk9deSeY/Vs6lFeBrScz1RbYkh6G72t43TAoQo Z1olUSB1JB7ZkuFUThNeDyhMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIUblTH xAbu1L6yXBsai530n+8SMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBuyAyEQoUFXWxbBbCtqiqXe4srO7Nn/zr4icNVQ7lnSKz6OKr6V7K ha7kcWrlsUnvj3E4m9HqP8WBGWY2NWd60B6K/vnV246lT9RJl+kbaqGDblO5bP15 p/ExptfsTnxIIWa02RgVZRgJl5ZHWHUsgRCr6XYdBB2vv+yUqv1gszZ1aTFUjTuv yPafi4wtGqbZSHziTrLwD5d7UxEl9CeDSMYwbk+ZilKUgII3B4jDYwCrzpOAlZe2 6HzJQg/xi50Mnz+JXEEsOeiG6KiNXCf6moHMsJDYnpq9F+LfmsLSxperDSPd3gGJ uIaP9xCFOIQpsR3Sh3ViRp7Io1vsNhGM -----END CERTIFICATE-----Generated at Wed Aug 13 05:36:05 2025 by rpki-client