$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: JhsdyjUiWvb14dOz+FNVuuSLbepTXv1d8FyC1Uq+SPg= Subject key identifier: F7:97:FD:24:8D:CD:C4:D2:5F:81:F3:9D:4C:53:7C:3C:4B:39:E4:9B Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: 013D Signing time: Tue 05 Aug 2025 04:53:42 +0000 Manifest this update: Tue 05 Aug 2025 04:53:42 +0000 Manifest next update: Tue 12 Aug 2025 04:53:42 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: pdoEaPndeExUd1KEqUKLbIuUaSgVspkcNwm92bm9fqo=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Aug 5 04:53:42 2025 GMT Not After : Aug 12 04:53:42 2025 GMT Subject: CN=68918e56-5c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:17:77:44:d4:e8:70:e8:68:5e:36:93:d6:af: 14:4c:54:64:af:5b:20:52:ed:c6:9e:d8:3b:63:51: f5:69:27:79:f5:f6:a3:4d:32:c3:9a:b5:fb:aa:fe: 6b:dd:c7:70:60:ab:80:c3:e3:d0:df:e6:54:11:67: fa:a0:4b:27:02:aa:64:42:59:65:30:cf:1c:d9:4f: 4b:45:e1:7f:47:83:2e:b0:61:b8:9b:0d:5b:fb:86: 4a:46:98:d7:ef:d4:e1:77:ec:3b:bf:6d:ee:ea:16: 6c:13:dc:4a:74:94:46:69:59:68:d1:1f:8e:47:cc: eb:8d:b5:18:a2:5f:1a:44:17:86:8e:d0:b5:df:52: 9c:74:2e:19:97:b1:7c:ce:8b:42:3e:e7:ef:ad:9c: 65:aa:71:79:9c:05:78:4c:5d:91:08:dd:4f:df:a6: b5:a9:ae:b7:0b:b2:47:06:0d:f0:0a:b4:39:20:51: 70:05:e1:14:0c:f8:6d:da:33:3c:75:1e:ba:11:3b: 5c:35:37:9d:b1:e7:b0:c1:86:96:8d:21:ba:1c:24: 15:89:2e:f8:09:57:cc:54:b6:1e:69:88:8a:60:21: 19:33:39:bf:58:8a:cd:77:70:72:a0:04:9c:33:64: 01:9b:f9:9b:66:e7:f5:b7:fa:b8:44:b1:62:f0:fe: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:FD:24:8D:CD:C4:D2:5F:81:F3:9D:4C:53:7C:3C:4B:39:E4:9B X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:a8:57:f5:35:91:97:e1:9f:aa:a2:8f:e5:02:75:9a:35:8c: b6:b2:54:3e:0a:a0:e4:c7:63:fa:36:b8:43:ab:96:2e:73:07: b5:22:ba:02:9a:c0:fd:a3:f6:d8:a2:70:5d:d2:ef:1f:c9:e9: 60:e7:de:2a:bb:a1:ec:4d:7b:50:55:bb:fd:e4:b1:e7:6d:db: 6a:f9:35:a5:7a:f7:6b:55:86:02:35:f0:9b:4a:9d:24:0f:9e: 25:29:67:29:4f:de:d9:3e:df:33:9d:a1:27:a0:87:94:8c:89: 92:bf:49:a3:10:6f:f9:a5:26:d4:ed:f0:46:68:61:d7:1c:c5: 24:47:62:11:89:93:13:e1:28:c8:33:34:e6:a5:36:77:46:93: f3:6f:55:0a:e7:c4:75:93:2d:d6:02:f8:91:95:33:3a:ff:6a: 6c:2d:de:35:85:8d:5e:06:89:cd:58:02:38:cb:ef:71:00:34: 2b:2b:05:d2:12:81:16:1e:ee:cf:3b:71:e3:88:0f:8e:e7:d9: 56:0e:d8:fa:db:3a:fb:4e:65:cc:1b:95:0a:d0:6b:81:ea:c4: 27:18:77:15:31:96:9d:df:58:ff:ae:15:aa:ef:35:78:6f:be: c7:a9:7b:c6:3c:75:b4:db:72:98:11:89:75:79:c3:35:0f:7d: e8:c7:ca:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjUwODA1MDQ1MzQyWhcNMjUwODEyMDQ1MzQyWjAYMRYwFAYD VQQDEw02ODkxOGU1Ni01YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hd3RNTocOhoXjaT1q8UTFRkr1sgUu3Gntg7Y1H1aSd59fajTTLDmrX7qv5r 3cdwYKuAw+PQ3+ZUEWf6oEsnAqpkQlllMM8c2U9LReF/R4MusGG4mw1b+4ZKRpjX 79Thd+w7v23u6hZsE9xKdJRGaVlo0R+OR8zrjbUYol8aRBeGjtC131KcdC4Zl7F8 zotCPufvrZxlqnF5nAV4TF2RCN1P36a1qa63C7JHBg3wCrQ5IFFwBeEUDPht2jM8 dR66ETtcNTedseewwYaWjSG6HCQViS74CVfMVLYeaYiKYCEZMzm/WIrNd3ByoASc M2QBm/mbZuf1t/q4RLFi8P6GHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeX/SSN zcTSX4HznUxTfDxLOeSbMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmqFf1NZGX4Z+qoo/lAnWaNYy2slQ+CqDkx2P6NrhDq5Yucwe1IroC msD9o/bYonBd0u8fyelg594qu6HsTXtQVbv95LHnbdtq+TWlevdrVYYCNfCbSp0k D54lKWcpT97ZPt8znaEnoIeUjImSv0mjEG/5pSbU7fBGaGHXHMUkR2IRiZMT4SjI MzTmpTZ3RpPzb1UK58R1ky3WAviRlTM6/2psLd41hY1eBonNWAI4y+9xADQrKwXS EoEWHu7PO3HjiA+O59lWDtj62zr7TmXMG5UK0GuB6sQnGHcVMZad31j/rhWq7zV4 b77HqXvGPHW023KYEYl1ecM1D33ox8r7 -----END CERTIFICATE-----Generated at Thu Aug 7 01:23:10 2025 by rpki-client