$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: IDh+/hbWaU35Is0r08tmZVsuTSuTSr+xa6UQM5FaS+Y= Subject key identifier: E7:A1:03:0E:9F:44:74:3E:9B:F2:C2:B6:40:9C:72:62:40:0D:B6:01 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 01B8 Signing time: Sat 09 Aug 2025 03:25:42 +0000 Manifest this update: Sat 09 Aug 2025 03:25:42 +0000 Manifest next update: Sat 16 Aug 2025 03:25:42 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: fKtg4rN3jOisk8L5PNbzKgFVa5yPzR91PbsRTLToY8k=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: qsnpQrMFH1PY3Ac5AGcGsg4fbvmr0wt6eeqt7tZf76E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Aug 9 03:25:42 2025 GMT Not After : Aug 16 03:25:42 2025 GMT Subject: CN=6896bfb6-717c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:2b:6c:15:76:ea:ce:65:e3:c4:8f:7e:76: 3e:69:5e:54:c3:8e:71:25:61:ca:0c:ed:cd:93:d6: 2f:3a:01:6d:6d:11:8a:c9:42:20:d3:25:69:96:81: c3:c2:06:14:39:8b:57:de:d3:17:48:d6:f6:0a:e4: cc:7b:b9:33:02:e5:97:55:e3:0e:ee:52:14:eb:82: 34:02:42:e3:87:3a:5e:68:be:41:0d:50:8b:51:84: 00:bd:91:36:c8:af:65:32:dd:f7:e3:3d:64:25:c1: b8:89:19:88:79:43:b5:3c:62:fe:cc:2d:77:cb:b9: f3:fc:de:7c:8c:66:dc:0d:e1:39:56:ec:b5:8a:bf: 64:17:d5:03:de:8f:ce:2b:46:f9:92:e1:38:0c:c1: 12:15:52:35:8b:68:e2:42:6c:07:06:45:c4:f5:7b: 6e:79:85:53:ef:dc:82:27:79:18:24:68:f0:b4:37: 89:ef:3d:50:d6:1f:97:7b:03:c7:81:01:eb:95:a8: 4e:25:8a:31:24:c9:e6:23:6d:e9:3e:b9:b1:98:b0: 5c:ef:6a:11:c3:03:7c:eb:fa:c3:d8:25:bf:74:d4: 9c:7f:28:3e:3d:cf:c3:7f:ae:3a:c4:28:16:54:6e: d5:93:6e:66:63:f6:85:d1:55:2d:d9:7c:b2:1a:70: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:03:0E:9F:44:74:3E:9B:F2:C2:B6:40:9C:72:62:40:0D:B6:01 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:88:76:12:c8:a0:52:73:fa:cc:f4:da:04:d6:fa:4e:af:14: b6:c1:3c:31:7e:0a:c4:53:f5:14:6e:98:f1:67:da:61:c2:02: a1:ca:30:8e:32:bc:a8:46:e6:58:fb:f9:28:bb:39:a4:25:9f: 50:d6:4c:60:3d:6c:92:65:ed:53:e1:1c:8c:1a:25:22:c4:2f: fe:1c:a7:fc:8f:96:20:bd:8f:7a:9c:6f:75:40:b9:56:7b:41: e7:70:b3:f9:54:d1:60:17:48:46:1e:3b:2c:1e:c0:02:8e:2e: 50:ca:d3:e9:98:4f:1f:a9:aa:c2:8b:ac:b0:1b:d2:a3:7e:f3: dc:12:cc:c0:4a:3c:21:6e:83:9f:dc:ba:ff:bb:80:99:a1:44: 42:f3:e5:0f:58:d6:99:f6:e0:be:ef:a3:d2:55:3b:50:d5:6b: ea:da:a2:0a:66:70:1a:e3:3c:27:6e:78:95:ac:2d:06:b1:7f: ed:fb:78:3f:f6:e7:47:c2:96:f5:40:8d:26:fd:4a:9f:b3:69: c8:e5:66:50:f1:75:19:8e:0a:1b:e0:91:8b:4b:a3:f7:77:a3: d9:97:4f:1c:89:e4:21:b9:d4:e7:6e:54:89:42:d7:64:03:36: ce:fc:e9:5d:08:0b:90:74:aa:b0:b5:3b:bf:ab:b2:e9:cf:0a: 47:be:98:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUwODA5MDMyNTQyWhcNMjUwODE2MDMyNTQyWjAYMRYwFAYD VQQDEw02ODk2YmZiNi03MTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q4rbBV26s5l48SPfnY+aV5Uw45xJWHKDO3Nk9YvOgFtbRGKyUIg0yVploHD wgYUOYtX3tMXSNb2CuTMe7kzAuWXVeMO7lIU64I0AkLjhzpeaL5BDVCLUYQAvZE2 yK9lMt334z1kJcG4iRmIeUO1PGL+zC13y7nz/N58jGbcDeE5Vuy1ir9kF9UD3o/O K0b5kuE4DMESFVI1i2jiQmwHBkXE9XtueYVT79yCJ3kYJGjwtDeJ7z1Q1h+XewPH gQHrlahOJYoxJMnmI23pPrmxmLBc72oRwwN86/rD2CW/dNScfyg+Pc/Df646xCgW VG7Vk25mY/aF0VUt2XyyGnCg8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOehAw6f RHQ+m/LCtkCccmJADbYBMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbiHYSyKBSc/rM9NoE1vpOrxS2wTwxfgrEU/UUbpjxZ9phwgKhyjCO MryoRuZY+/kouzmkJZ9Q1kxgPWySZe1T4RyMGiUixC/+HKf8j5YgvY96nG91QLlW e0HncLP5VNFgF0hGHjssHsACji5QytPpmE8fqarCi6ywG9KjfvPcEszASjwhboOf 3Lr/u4CZoURC8+UPWNaZ9uC+76PSVTtQ1Wvq2qIKZnAa4zwnbniVrC0GsX/t+3g/ 9udHwpb1QI0m/Uqfs2nI5WZQ8XUZjgob4JGLS6P3d6PZl08cieQhudTnblSJQtdk AzbO/OldCAuQdKqwtTu/q7LpzwpHvpg6 -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:39 2025 by rpki-client