$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: FdhTMKXRiDx9/5UyfGM3ptKTTetdH6XF66Ktdx55KKo= Subject key identifier: 4C:B8:B5:BC:78:AC:5D:56:03:FD:52:9B:07:56:8A:70:83:00:05:C3 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A42 Signing time: Tue 12 Aug 2025 16:26:11 +0000 Manifest this update: Tue 12 Aug 2025 16:26:10 +0000 Manifest next update: Tue 19 Aug 2025 16:26:10 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: DEa5m81BNseskiWZBdjEmQnVNrsAuVvBUaFkHBAilMQ=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6731 (0x1a4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Aug 12 16:26:10 2025 GMT Not After : Aug 19 16:26:10 2025 GMT Subject: CN=689b6b22-1c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:c2:b8:9d:42:9d:22:43:ee:83:15:0b:ab: 4d:62:18:3c:19:8d:b3:cf:e4:6f:e6:35:91:c3:83: 38:b0:1d:3d:76:c3:1b:eb:ef:14:0d:cb:77:c9:d7: aa:30:e8:22:e0:47:14:db:85:ca:18:5b:c4:5e:62: b4:bc:bd:f4:23:9d:f2:6c:68:9e:65:4b:19:f8:c2: 24:5a:4a:4c:5c:a6:44:43:bb:a8:e2:d8:ae:e4:61: d2:40:a5:55:fc:39:4b:59:45:06:97:29:c5:8d:bf: bf:37:68:f7:31:41:f6:4c:0f:9c:eb:89:4f:17:c4: 23:36:8a:d3:52:32:a0:e0:b6:8b:99:f7:bf:68:94: c2:2a:50:a6:bf:b2:7f:7e:c1:75:28:68:2a:05:c7: 78:d1:09:b4:08:47:fa:89:a7:36:53:4d:3f:80:cc: e7:5a:aa:27:b5:54:43:c5:be:2c:e9:1c:1f:d8:ec: a6:99:c3:92:54:bc:43:27:ac:dc:6c:93:61:40:cd: b5:d9:32:7b:a9:57:89:60:fb:52:32:48:43:32:e1: 2a:28:da:c7:7e:3b:35:e7:80:31:91:e1:51:d3:5e: 9b:cd:dc:e7:62:d0:30:af:c1:54:fb:2c:50:de:5a: 28:52:69:f4:92:74:7a:df:9a:53:da:3d:e9:29:92: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B8:B5:BC:78:AC:5D:56:03:FD:52:9B:07:56:8A:70:83:00:05:C3 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:15:e4:9f:b8:18:ef:ab:27:96:cc:05:63:d7:18:3a:93:48: ff:73:7f:d1:5d:0f:f9:8d:12:ad:da:8c:81:c3:2c:e3:af:1c: 83:62:b9:52:89:05:72:a7:5e:72:f1:18:f0:f7:46:07:95:04: e5:6b:d6:fa:74:66:19:d3:f6:7e:56:d6:ad:bf:18:24:b0:a8: 87:75:98:ef:14:a4:fb:a4:c7:ee:b5:e5:17:0b:f2:0f:69:d1: d0:f3:3f:ee:bf:f3:37:e6:af:ba:23:a3:be:f9:6d:b5:cb:a6: b8:00:8c:1d:0c:b2:6a:29:26:e2:ed:70:a6:c0:5f:91:6b:85: 62:43:81:b8:ab:dc:36:0a:f4:00:d9:58:3a:3f:9a:b7:d1:76: 20:ee:ce:3d:bc:e1:7e:29:29:14:0b:a0:d7:6a:40:11:39:b7: 0a:59:c9:2d:40:99:e9:7c:dc:b5:19:d8:b8:34:66:a1:19:b0: d3:7c:41:cd:de:1f:21:67:a0:f5:e0:39:89:d8:96:f5:8f:10: 8d:a1:a6:a2:f0:6e:ad:b5:b5:dc:12:04:78:b6:31:f4:53:64: 17:e9:2f:1b:f5:be:77:5b:5f:11:fb:45:a7:d1:77:e6:16:88: 18:57:88:f3:9a:c0:f8:70:15:6a:a6:ac:55:bd:ff:7c:88:67: 95:30:f9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwODEyMTYyNjEwWhcNMjUwODE5MTYyNjEwWjAYMRYwFAYD VQQDEw02ODliNmIyMi0xYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3jCuJ1CnSJD7oMVC6tNYhg8GY2zz+Rv5jWRw4M4sB09dsMb6+8UDct3ydeq MOgi4EcU24XKGFvEXmK0vL30I53ybGieZUsZ+MIkWkpMXKZEQ7uo4tiu5GHSQKVV /DlLWUUGlynFjb+/N2j3MUH2TA+c64lPF8QjNorTUjKg4LaLmfe/aJTCKlCmv7J/ fsF1KGgqBcd40Qm0CEf6iac2U00/gMznWqontVRDxb4s6Rwf2OymmcOSVLxDJ6zc bJNhQM212TJ7qVeJYPtSMkhDMuEqKNrHfjs154AxkeFR016bzdznYtAwr8FU+yxQ 3looUmn0knR635pT2j3pKZJstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy4tbx4 rF1WA/1SmwdWinCDAAXDMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGFeSfuBjvqyeWzAVj1xg6k0j/c3/RXQ/5jRKt2oyBwyzjrxyDYrlS iQVyp15y8Rjw90YHlQTla9b6dGYZ0/Z+VtatvxgksKiHdZjvFKT7pMfuteUXC/IP adHQ8z/uv/M35q+6I6O++W21y6a4AIwdDLJqKSbi7XCmwF+Ra4ViQ4G4q9w2CvQA 2Vg6P5q30XYg7s49vOF+KSkUC6DXakARObcKWcktQJnpfNy1Gdi4NGahGbDTfEHN 3h8hZ6D14DmJ2Jb1jxCNoaai8G6ttbXcEgR4tjH0U2QX6S8b9b53W18R+0Wn0Xfm FogYV4jzmsD4cBVqpqxVvf98iGeVMPmu -----END CERTIFICATE-----Generated at Wed Aug 13 09:48:30 2025 by rpki-client