$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: ffOUvu51VpFwFtQo/RDuMMtC6H93iY+FUj66YGdXzCo= Subject key identifier: 9E:F5:3A:8E:7F:8A:C6:88:21:2C:EB:8F:8C:C0:83:C1:E7:12:92:FE Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0A9C Signing time: Fri 08 Aug 2025 19:51:23 +0000 Manifest this update: Fri 08 Aug 2025 19:51:22 +0000 Manifest next update: Fri 15 Aug 2025 19:51:22 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: mDZ7nIbYIgBCD+L6/ITuHR8HG5+jTQerOZPwMyE1K9s=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2729 (0xaa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Aug 8 19:51:22 2025 GMT Not After : Aug 15 19:51:22 2025 GMT Subject: CN=6896553a-75e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:82:15:e6:de:49:2e:c1:2f:1a:86:f2:53: 95:1e:dd:23:84:54:62:99:25:3f:58:69:2e:fd:54: bf:11:a4:f5:ae:70:51:01:b7:f2:2b:77:9b:da:c2: 47:d8:2b:e9:fa:fa:79:15:7f:f0:85:a5:fb:d4:25: c3:c8:e1:23:a7:d5:b5:06:ab:64:b2:6c:e9:ff:7c: cb:c0:4e:ee:7e:4a:5f:7f:b2:b6:84:2f:de:9e:1d: 3e:8d:c9:66:3e:53:27:5f:e6:8e:53:25:26:63:e0: 81:b1:0d:a5:fd:27:cd:1d:45:43:6c:30:6d:43:0a: b3:09:5e:a3:83:0b:5a:a8:22:c2:8b:1c:65:85:0f: ee:f5:b2:62:c7:e9:d9:00:90:57:13:78:82:a7:4b: 40:67:43:bd:fc:7d:d1:05:36:65:bf:7a:ee:af:8a: a6:d0:02:01:8a:75:a2:74:15:58:e2:ab:79:3b:e6: ba:36:26:9e:b1:79:a9:a3:2e:72:87:4c:8a:3f:fa: 44:aa:a4:f7:c4:06:3e:a9:ec:1a:63:b5:b3:52:10: 24:c5:51:25:4a:54:4c:c9:02:c9:a2:95:98:9a:0f: 99:e3:80:5e:be:c9:8d:2f:f8:1e:90:b3:32:95:1e: 0c:81:09:2c:e9:d0:db:97:e9:4c:fd:dc:96:29:db: 7c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F5:3A:8E:7F:8A:C6:88:21:2C:EB:8F:8C:C0:83:C1:E7:12:92:FE X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3d:67:57:17:f6:6e:28:97:23:50:cc:93:07:2e:7c:c4:f6: 1d:d3:77:14:70:89:db:b5:11:77:25:fe:21:4d:b5:99:fe:98: c6:30:7b:9a:b5:48:05:0f:87:d3:1d:77:73:72:91:14:94:52: 64:4e:aa:c9:dd:7a:da:05:9a:49:38:ed:f5:5b:fc:b2:1f:d0: 71:65:60:14:e8:24:70:5b:d9:6a:4a:7a:ef:a3:01:00:ac:6e: 3d:7e:eb:a3:8d:b6:4e:32:4f:55:39:6f:55:18:78:ca:0e:87: 67:06:26:73:d0:24:f9:24:07:50:06:bc:8d:d6:3e:14:c8:f2: 11:5f:d3:59:8e:f6:cf:b4:3c:50:15:40:ea:81:34:02:8e:88: 48:64:e3:2d:33:a9:dd:19:bf:73:e7:d2:1b:d1:75:5c:30:f7: ef:8a:8a:f3:03:ae:b2:d1:dd:34:5b:a5:02:03:34:6d:e2:94: 49:f4:79:56:15:b1:ec:5e:98:fa:c9:f5:6e:53:b1:b2:2a:dd: f3:14:82:17:82:de:b5:99:d1:ef:f7:25:fb:f9:cc:9a:2f:96: ee:74:f5:20:4b:81:f5:ca:14:4c:fc:1c:ab:d9:f9:4d:18:99: a9:5d:28:6e:d4:4c:72:21:3b:68:c8:1c:a3:73:ce:21:8e:f7: cf:98:99:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUwODA4MTk1MTIyWhcNMjUwODE1MTk1MTIyWjAYMRYwFAYD VQQDEw02ODk2NTUzYS03NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPyCFebeSS7BLxqG8lOVHt0jhFRimSU/WGku/VS/EaT1rnBRAbfyK3eb2sJH 2Cvp+vp5FX/whaX71CXDyOEjp9W1Bqtksmzp/3zLwE7ufkpff7K2hC/enh0+jclm PlMnX+aOUyUmY+CBsQ2l/SfNHUVDbDBtQwqzCV6jgwtaqCLCixxlhQ/u9bJix+nZ AJBXE3iCp0tAZ0O9/H3RBTZlv3rur4qm0AIBinWidBVY4qt5O+a6NiaesXmpoy5y h0yKP/pEqqT3xAY+qewaY7WzUhAkxVElSlRMyQLJopWYmg+Z44BevsmNL/gekLMy lR4MgQks6dDbl+lM/dyWKdt8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ71Oo5/ isaIISzrj4zAg8HnEpL+MB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPPWdXF/ZuKJcjUMyTBy58xPYd03cUcInbtRF3Jf4hTbWZ/pjGMHua tUgFD4fTHXdzcpEUlFJkTqrJ3XraBZpJOO31W/yyH9BxZWAU6CRwW9lqSnrvowEA rG49fuujjbZOMk9VOW9VGHjKDodnBiZz0CT5JAdQBryN1j4UyPIRX9NZjvbPtDxQ FUDqgTQCjohIZOMtM6ndGb9z59Ib0XVcMPfviorzA66y0d00W6UCAzRt4pRJ9HlW FbHsXpj6yfVuU7GyKt3zFIIXgt61mdHv9yX7+cyaL5budPUgS4H1yhRM/Byr2flN GJmpXShu1ExyITtoyByjc84hjvfPmJnG -----END CERTIFICATE-----Generated at Sun Aug 10 18:32:37 2025 by rpki-client