$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: rM/TweBbZSGgkoHuavnNVzkJvH2h2I7fV661rauMb00= Subject key identifier: AE:58:92:29:DB:79:FB:42:85:4E:7F:0E:2B:F4:83:BA:9E:F8:03:A5 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 068C Signing time: Fri 08 Aug 2025 22:43:28 +0000 Manifest this update: Fri 08 Aug 2025 22:43:27 +0000 Manifest next update: Fri 15 Aug 2025 22:43:27 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: /IvDS7ky0R1R/Vfng5fHnKSTHuQ91PPWT5UNi5KwzE4=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: bzwAo1vTwZtUvpqV0SE31TfJe7tyOs8AEfKtkNJnl48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Aug 8 22:43:27 2025 GMT Not After : Aug 15 22:43:27 2025 GMT Subject: CN=68967d90-2e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:bf:e3:6b:20:8a:63:90:9e:f2:fb:fb:64: 16:68:96:cc:18:64:7d:d8:30:e7:ed:d3:a0:56:7a: fe:78:fa:cc:14:50:d8:bc:15:5a:3c:f5:56:f4:a6: 90:8a:e2:03:f1:31:81:f8:5b:31:50:87:18:e5:e3: 43:c3:97:da:cf:45:7e:af:e7:0e:9f:9d:1b:e4:01: 24:4a:15:ce:ee:3b:ac:88:90:30:11:98:e0:2c:4d: b7:d5:c3:33:25:0c:39:ed:68:87:6c:0e:43:aa:35: c5:6f:ee:9a:97:55:7d:b1:92:36:bf:bf:e8:3f:54: b8:db:2d:93:95:66:58:09:94:a7:87:bf:51:5b:54: e7:1a:31:7b:4d:2e:62:68:b1:6d:75:63:47:31:15: 0e:2c:1e:c9:b4:50:3c:51:7d:f8:a0:49:dc:3d:9b: 09:5b:d1:3e:d8:96:53:53:e1:6c:1c:bd:d5:e6:62: 2a:e4:91:49:f4:f3:57:00:fe:0a:3a:c7:1a:0d:69: 2b:f3:53:06:71:45:ef:44:f5:7d:fa:3c:ec:d7:5d: 1d:59:7e:22:0a:fa:02:66:47:24:62:98:0e:00:10: af:aa:ee:04:80:49:1b:56:f6:d9:35:8e:55:08:39: 53:13:40:30:f9:c6:b3:50:9e:1d:1b:7f:f3:37:22: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:92:29:DB:79:FB:42:85:4E:7F:0E:2B:F4:83:BA:9E:F8:03:A5 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e7:d4:0a:d6:33:d8:eb:ec:fa:12:25:19:c7:32:c5:8a:cf: d6:8e:bd:13:4b:39:87:d3:ee:72:fc:af:ef:38:23:e0:40:ef: c1:8e:06:4e:a7:fa:2c:24:49:28:83:0c:6d:dc:65:d3:d8:a8: ff:0e:3f:22:6e:61:59:ad:1b:64:54:42:18:92:45:f8:8f:89: 04:bf:46:f8:91:7a:e7:94:66:1f:52:d4:4a:83:48:7c:e3:2c: b2:04:fc:cb:15:27:1e:ae:37:3c:ac:8f:96:d4:2f:c5:80:a0: 06:84:5b:a8:7e:5d:2e:a9:92:a9:49:5d:a6:c9:43:3f:ed:8d: b4:e0:67:90:c1:fa:df:dc:64:28:5c:f6:94:a1:ee:65:d4:e7: f6:07:72:43:79:c1:5d:52:b5:9d:c2:76:1e:27:bf:87:40:11: c6:14:28:ff:3f:26:49:5e:5d:4e:a3:e9:59:2e:ab:02:7d:50: db:72:1a:82:60:3e:84:dd:09:f2:19:bf:ea:c1:9d:a6:09:eb: 35:42:98:cc:07:75:56:5e:08:1d:bb:e3:bf:8d:2a:96:33:f7: cc:e3:91:21:7a:66:40:5f:e1:83:c9:c6:9b:99:c1:fd:93:04: 59:2a:d8:b4:45:ce:1c:9b:f1:b7:26:ba:a4:7d:17:76:01:83: 96:5b:2b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjUwODA4MjI0MzI3WhcNMjUwODE1MjI0MzI3WjAYMRYwFAYD VQQDEw02ODk2N2Q5MC0yZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ii/42sgimOQnvL7+2QWaJbMGGR92DDn7dOgVnr+ePrMFFDYvBVaPPVW9KaQ iuID8TGB+FsxUIcY5eNDw5faz0V+r+cOn50b5AEkShXO7jusiJAwEZjgLE231cMz JQw57WiHbA5DqjXFb+6al1V9sZI2v7/oP1S42y2TlWZYCZSnh79RW1TnGjF7TS5i aLFtdWNHMRUOLB7JtFA8UX34oEncPZsJW9E+2JZTU+FsHL3V5mIq5JFJ9PNXAP4K OscaDWkr81MGcUXvRPV9+jzs110dWX4iCvoCZkckYpgOABCvqu4EgEkbVvbZNY5V CDlTE0Aw+cazUJ4dG3/zNyKhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5Ykinb eftChU5/Div0g7qe+AOlMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw59QK1jPY6+z6EiUZxzLFis/Wjr0TSzmH0+5y/K/vOCPgQO/BjgZO p/osJEkogwxt3GXT2Kj/Dj8ibmFZrRtkVEIYkkX4j4kEv0b4kXrnlGYfUtRKg0h8 4yyyBPzLFScerjc8rI+W1C/FgKAGhFuofl0uqZKpSV2myUM/7Y204GeQwfrf3GQo XPaUoe5l1Of2B3JDecFdUrWdwnYeJ7+HQBHGFCj/PyZJXl1Oo+lZLqsCfVDbchqC YD6E3QnyGb/qwZ2mCes1QpjMB3VWXggdu+O/jSqWM/fM45EhemZAX+GDycabmcH9 kwRZKti0Rc4cm/G3JrqkfRd2AYOWWyuR -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:30 2025 by rpki-client