$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft File: HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json) Hash identifier: jBmrc9wr0h9ArKe36UXnKSQBmHMcUv8zt/pMdvC0srk= Subject key identifier: ED:27:8C:BE:11:F1:E8:F6:55:B5:BC:EF:4E:A3:68:F5:A9:6F:45:98 Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft Manifest number: 01F5 Signing time: Mon 11 Aug 2025 02:35:43 +0000 Manifest this update: Mon 11 Aug 2025 02:35:42 +0000 Manifest next update: Mon 18 Aug 2025 02:35:42 +0000 Files and hashes: 1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: QQNbRyDD5fvZ6qsVGaEtdVxP8nG0Mz+YCT4KiJStZxY=) 2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=) 3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A Validity Not Before: Aug 11 02:35:42 2025 GMT Not After : Aug 18 02:35:42 2025 GMT Subject: CN=689956fe-4236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:56:74:67:7d:85:04:74:bb:d4:2e:2d:6a: 3a:af:f0:f3:47:22:f8:ff:3a:36:0f:c1:a1:d8:af: 7a:49:a6:cd:e6:56:0c:b4:4f:23:74:d0:65:f3:96: f0:68:14:34:bc:25:7f:38:ce:3f:7f:46:a3:d7:05: 57:db:98:40:cf:be:11:06:46:6f:99:27:4d:e7:0b: ce:75:b0:d3:92:af:36:6a:e5:28:66:68:1b:ba:2e: 3b:9e:84:b5:73:14:f2:79:59:bd:21:de:dd:59:ba: 02:5e:bd:79:6f:d4:b1:1c:45:49:cc:fd:90:da:da: a9:aa:c2:6b:cf:b1:bc:12:e4:9a:28:d0:5e:d6:f2: 7c:8a:59:f6:04:cc:e1:13:20:ec:3c:e9:8d:13:f8: a2:33:38:c1:47:c5:9f:ff:fd:6b:d2:18:f1:15:11: 3e:c2:16:25:6a:96:f2:4d:a5:64:28:bf:da:d3:5d: e3:e3:32:43:fe:a6:57:26:52:70:b1:90:62:6d:95: a5:7c:7c:f1:a3:65:3d:f3:d5:72:b0:5b:b8:3d:2a: 0f:94:35:9c:e1:f8:85:11:f1:3a:22:c4:4d:b7:68: 01:53:72:00:fc:30:5d:08:9e:64:49:dc:49:a0:e7: da:54:07:93:44:5b:35:d2:5f:de:6d:a2:6b:5e:c2: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:27:8C:BE:11:F1:E8:F6:55:B5:BC:EF:4E:A3:68:F5:A9:6F:45:98 X509v3 Authority Key Identifier: keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:6f:c4:fa:ec:e8:49:dc:69:94:cd:1e:1d:39:70:61:b6:cf: 70:17:67:e9:e0:52:c1:5b:b8:c7:69:2f:ce:65:d9:cf:bd:43: e3:9d:17:01:94:5d:35:54:09:20:89:0e:a4:bf:23:38:52:24: 42:00:ea:a0:ac:28:b2:77:7d:96:67:4d:39:7b:4c:14:18:16: 1f:81:6c:cd:c1:05:41:21:ce:69:ef:0b:2c:f7:a7:c7:97:b1: 89:f4:ee:51:8b:a9:9f:ba:f4:c6:bb:ef:d4:f7:3d:5e:bf:b5: 5d:98:2e:31:8b:e5:16:ae:38:20:83:12:f3:d0:4a:d6:23:fa: 32:6f:87:d4:af:10:c7:ba:ef:d3:08:25:67:4d:73:5c:f8:1a: d0:74:8e:92:e3:cd:e3:47:85:6b:62:00:c9:46:c5:eb:93:1a: bf:fe:7f:ac:64:f5:e0:c4:2b:dd:4e:e6:7d:c9:3a:cf:8b:52: f0:2b:30:c0:19:58:65:b8:b1:c4:24:1d:1c:e5:05:45:d9:eb: 68:0e:0d:23:54:bb:58:b6:3d:6b:f1:05:cd:4b:36:79:a9:bb: dd:76:6d:53:fa:df:a1:cc:e4:ee:2b:9e:19:ed:af:73:c0:0f: a1:d2:4d:7f:83:c3:08:43:78:f5:d8:61:04:0a:bb:6e:a0:1f: aa:c5:f5:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1 OUE3QzU3NUEwHhcNMjUwODExMDIzNTQyWhcNMjUwODE4MDIzNTQyWjAYMRYwFAYD VQQDEw02ODk5NTZmZS00MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAun5WdGd9hQR0u9QuLWo6r/DzRyL4/zo2D8Gh2K96SabN5lYMtE8jdNBl85bw aBQ0vCV/OM4/f0aj1wVX25hAz74RBkZvmSdN5wvOdbDTkq82auUoZmgbui47noS1 cxTyeVm9Id7dWboCXr15b9SxHEVJzP2Q2tqpqsJrz7G8EuSaKNBe1vJ8iln2BMzh EyDsPOmNE/iiMzjBR8Wf//1r0hjxFRE+whYlapbyTaVkKL/a013j4zJD/qZXJlJw sZBibZWlfHzxo2U989VysFu4PSoPlDWc4fiFEfE6IsRNt2gBU3IA/DBdCJ5kSdxJ oOfaVAeTRFs10l/ebaJrXsLm/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0njL4R 8ej2VbW8706jaPWpb0WYMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4 NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR OVRGQjZLTUlsRGxacDhWMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmb8T67OhJ3GmUzR4dOXBhts9wF2fp4FLBW7jHaS/OZdnPvUPjnRcB lF01VAkgiQ6kvyM4UiRCAOqgrCiyd32WZ005e0wUGBYfgWzNwQVBIc5p7wss96fH l7GJ9O5Ri6mfuvTGu+/U9z1ev7VdmC4xi+UWrjgggxLz0ErWI/oyb4fUrxDHuu/T CCVnTXNc+BrQdI6S483jR4VrYgDJRsXrkxq//n+sZPXgxCvdTuZ9yTrPi1LwKzDA GVhluLHEJB0c5QVF2etoDg0jVLtYtj1r8QXNSzZ5qbvddm1T+t+hzOTuK54Z7a9z wA+h0k1/g8MIQ3j12GEECrtuoB+qxfXL -----END CERTIFICATE-----Generated at Mon Aug 11 14:49:51 2025 by rpki-client