$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json) Hash identifier: HbzGTO7Z7kVhvhIVoXIpNmFD2B1qdxA2bJ+4agTHmWg= Subject key identifier: F2:4E:F8:A0:BB:51:28:73:C1:90:44:1F:52:91:50:9E:98:71:F7:0A Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft Manifest number: 07B6 Signing time: Fri 08 Aug 2025 21:37:59 +0000 Manifest this update: Fri 08 Aug 2025 21:37:58 +0000 Manifest next update: Fri 15 Aug 2025 21:37:58 +0000 Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: bloa90cBcSmjeNj7IXI4874JVPaet3/vHdtfof7U/Y8=) 2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Validity Not Before: Aug 8 21:37:58 2025 GMT Not After : Aug 15 21:37:58 2025 GMT Subject: CN=68966e36-294c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:09:ca:fc:80:3e:31:cb:9f:a9:d6:14:93: ee:7b:c2:e5:84:35:76:95:35:b3:c0:34:98:32:01: c6:a4:ab:6e:6c:bc:2c:3b:39:85:a8:b3:df:87:8c: f4:f2:03:c5:0d:bc:8f:32:d6:45:ff:1e:20:8c:f1: 30:6a:34:08:d5:76:45:b5:f1:6b:0e:ab:fd:c1:fe: 9e:77:84:fb:15:03:25:53:c2:31:a3:02:43:3a:98: 1c:00:ec:de:23:54:3c:91:8d:ab:e7:fc:65:29:31: de:ef:37:b7:17:7b:3f:5a:05:24:73:47:47:48:69: 8d:84:b3:e3:b7:54:98:81:4e:d5:44:05:1f:0a:dd: 52:b6:85:58:64:1d:a5:80:dd:d4:af:c0:48:2f:37: d6:2d:a2:c7:ad:b4:56:ae:42:07:60:0a:19:76:94: 4d:95:c2:dc:60:81:9f:90:4c:6d:ef:b7:1d:f3:13: 7d:27:d0:3d:5c:cb:9e:26:96:d0:9d:6f:2d:86:b4: 48:5f:61:04:1b:32:c1:b8:b5:11:a5:51:ba:da:8a: 38:3f:b3:57:af:5d:12:c7:33:b5:7d:85:f1:80:0a: 7a:d5:51:48:2e:21:ef:b2:63:99:e6:01:98:00:86: ab:0e:11:9e:ac:4c:c9:43:cc:c9:ea:e3:5a:4f:6a: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4E:F8:A0:BB:51:28:73:C1:90:44:1F:52:91:50:9E:98:71:F7:0A X509v3 Authority Key Identifier: keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7a:8f:69:2c:d6:b4:6f:76:8f:14:8a:50:d9:58:a3:b5:7d: 75:92:b6:29:fb:b1:32:50:30:d7:3c:e2:20:b7:9f:25:7b:43: f5:51:4f:ad:c9:63:55:39:25:f9:d8:e3:50:32:32:9c:2e:d5: f3:4a:4e:32:0e:3e:f8:22:9b:96:62:6b:2e:b0:d3:67:7c:0c: e3:87:c7:cb:51:64:bc:20:ec:5d:51:e7:95:05:80:e4:2e:1f: b8:cc:87:a9:f2:e4:71:3e:1b:c9:26:5b:aa:d1:69:81:9f:63: f3:71:c2:d2:dc:cf:dc:f0:a8:b4:2e:df:d1:b3:66:3a:d4:19: 0f:b0:d8:48:63:d5:a0:54:74:79:b1:64:ff:fa:22:0f:cc:6b: 4d:1f:cb:70:bd:79:42:ee:8c:02:3c:8c:11:b1:23:1e:f9:7e: 3a:46:14:fe:bf:10:b6:f5:54:70:f2:03:ff:64:e3:6c:7e:a6: 13:85:2c:b7:47:17:bf:4e:f1:38:36:c3:2b:ed:d3:89:62:56: a3:a2:58:c2:24:c4:85:17:6a:cf:90:04:78:5c:e6:c6:35:42: b4:25:09:89:cb:54:95:e1:48:de:28:65:5f:dc:e5:8f:90:1a: 7c:23:fe:c3:d2:22:28:a0:f6:ab:e0:4a:c7:4d:df:47:fa:fd: a9:15:30:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5 MDM4NTU4NkUwHhcNMjUwODA4MjEzNzU4WhcNMjUwODE1MjEzNzU4WjAYMRYwFAYD VQQDEw02ODk2NmUzNi0yOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaAJyvyAPjHLn6nWFJPue8LlhDV2lTWzwDSYMgHGpKtubLwsOzmFqLPfh4z0 8gPFDbyPMtZF/x4gjPEwajQI1XZFtfFrDqv9wf6ed4T7FQMlU8IxowJDOpgcAOze I1Q8kY2r5/xlKTHe7ze3F3s/WgUkc0dHSGmNhLPjt1SYgU7VRAUfCt1StoVYZB2l gN3Ur8BILzfWLaLHrbRWrkIHYAoZdpRNlcLcYIGfkExt77cd8xN9J9A9XMueJpbQ nW8thrRIX2EEGzLBuLURpVG62oo4P7NXr10SxzO1fYXxgAp61VFILiHvsmOZ5gGY AIarDhGerEzJQ8zJ6uNaT2oI2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJO+KC7 UShzwZBEH1KRUJ6YcfcKMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2 UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEeo9pLNa0b3aPFIpQ2VijtX11krYp+7EyUDDXPOIgt58le0P1UU+t yWNVOSX52ONQMjKcLtXzSk4yDj74IpuWYmsusNNnfAzjh8fLUWS8IOxdUeeVBYDk Lh+4zIep8uRxPhvJJluq0WmBn2PzccLS3M/c8Ki0Lt/Rs2Y61BkPsNhIY9WgVHR5 sWT/+iIPzGtNH8twvXlC7owCPIwRsSMe+X46RhT+vxC29VRw8gP/ZONsfqYThSy3 Rxe/TvE4NsMr7dOJYlajoljCJMSFF2rPkAR4XObGNUK0JQmJy1SV4UjeKGVf3OWP kBp8I/7D0iIooPar4ErHTd9H+v2pFTAL -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:32 2025 by rpki-client