$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: cTK/+uT8Um5rPyKfFCTp6tSCYn6IwjU9RgXOA2+w58s= Subject key identifier: 68:9D:30:55:F9:8D:85:FA:B2:6F:15:F8:43:A8:1E:8D:99:8A:D2:C2 Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0809 Signing time: Fri 08 Aug 2025 21:15:41 +0000 Manifest this update: Fri 08 Aug 2025 21:15:41 +0000 Manifest next update: Fri 15 Aug 2025 21:15:41 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: q2yb+DcXL7NdlTHJKYLcf8/cQsKJZAo87uVvDElgM/s=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: ygZtjL1bFA8A+sTwqChq0qOveU0/d5/4OX+UBo9P2Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Aug 8 21:15:41 2025 GMT Not After : Aug 15 21:15:41 2025 GMT Subject: CN=689668fd-695c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e9:e6:11:7d:93:60:de:24:6b:81:8d:52:1f: ed:a5:3c:b8:57:71:ee:85:a6:53:76:0a:ca:15:94: 53:67:a0:1a:22:be:02:ba:9e:cf:d9:a8:da:40:42: 21:1d:bb:c1:f3:b8:49:f4:82:de:c9:a3:b6:bb:c1: 50:45:a4:75:62:94:be:12:de:91:be:de:ed:41:e8: 61:0e:7a:1d:1b:ef:53:1c:57:7e:11:59:6a:8f:c9: 51:78:47:45:ca:f5:d9:f0:62:bf:64:7f:82:8f:e4: c1:04:0a:eb:7f:25:58:d7:23:50:87:a1:9a:b1:b2: 49:9c:7d:70:3d:79:7d:45:4e:17:58:e1:ea:d1:e5: 87:7e:99:a8:c1:4b:3c:c9:4d:ad:3d:b3:bc:39:30: 7e:3a:cf:b1:dc:dc:a1:49:3a:6d:f5:59:28:08:ec: 52:03:ac:2a:9e:07:de:70:1e:a5:0f:0d:1c:26:f9: 0e:ce:9d:fc:67:70:49:0a:f5:c8:c9:43:ff:e7:ba: ad:9a:c7:01:e4:0e:0e:ca:9d:9c:62:80:46:d4:1b: 56:01:0d:bb:4f:76:08:58:7e:76:ce:54:6f:6e:9f: 98:28:ac:42:28:56:d0:b3:dd:53:88:3d:7d:9f:47: 78:03:75:90:8a:6c:77:ca:e0:bd:85:09:aa:25:fd: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:30:55:F9:8D:85:FA:B2:6F:15:F8:43:A8:1E:8D:99:8A:D2:C2 X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:e2:59:3d:a0:9f:3a:3a:21:ea:52:2c:9f:3a:3f:80:12:af: 71:9b:6a:05:9e:98:c7:19:81:40:14:49:6f:3a:09:35:ec:1e: 5a:38:ba:a2:c3:f7:07:94:ac:09:68:8f:c0:68:29:22:84:5c: fd:0c:28:1f:3f:73:96:37:ae:14:8d:cd:12:1d:e4:70:c4:19: b5:08:08:71:2f:f2:80:64:eb:cf:cb:fa:68:86:23:37:c0:42: 7b:5d:4e:48:a8:64:06:83:23:a0:51:f0:be:50:dc:a6:14:39: b7:76:d7:79:28:d5:1b:12:ef:1a:64:ae:33:9d:ba:66:5f:b2: c1:a5:67:4c:15:e9:ef:44:80:ad:1b:05:6a:c4:b1:a6:52:f0: da:fb:a0:d3:d3:16:c9:71:f6:0b:18:58:0f:2f:13:15:6b:51: ce:e9:2f:15:ee:60:21:dd:8b:3b:8a:11:d9:be:24:55:97:36: 1b:bf:66:de:a9:b5:3d:64:17:a0:fb:67:7a:91:c4:1a:a6:fe: 09:b9:7e:86:24:cc:d4:f2:a0:eb:b2:58:e4:59:a6:6c:8c:2a: ad:a6:53:60:6c:4b:cb:54:02:a2:12:2c:82:58:9b:d8:06:80: bb:c3:0a:9e:9b:4c:5b:ac:da:4c:80:2c:f5:6a:81:42:14:f9: 9e:cc:a4:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjUwODA4MjExNTQxWhcNMjUwODE1MjExNTQxWjAYMRYwFAYD VQQDEw02ODk2NjhmZC02OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+nmEX2TYN4ka4GNUh/tpTy4V3HuhaZTdgrKFZRTZ6AaIr4Cup7P2ajaQEIh HbvB87hJ9ILeyaO2u8FQRaR1YpS+Et6Rvt7tQehhDnodG+9THFd+EVlqj8lReEdF yvXZ8GK/ZH+Cj+TBBArrfyVY1yNQh6GasbJJnH1wPXl9RU4XWOHq0eWHfpmowUs8 yU2tPbO8OTB+Os+x3NyhSTpt9VkoCOxSA6wqngfecB6lDw0cJvkOzp38Z3BJCvXI yUP/57qtmscB5A4Oyp2cYoBG1BtWAQ27T3YIWH52zlRvbp+YKKxCKFbQs91TiD19 n0d4A3WQimx3yuC9hQmqJf1fzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGidMFX5 jYX6sm8V+EOoHo2ZitLCMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf4lk9oJ86OiHqUiyfOj+AEq9xm2oFnpjHGYFAFElvOgk17B5aOLqi w/cHlKwJaI/AaCkihFz9DCgfP3OWN64Ujc0SHeRwxBm1CAhxL/KAZOvPy/pohiM3 wEJ7XU5IqGQGgyOgUfC+UNymFDm3dtd5KNUbEu8aZK4znbpmX7LBpWdMFenvRICt GwVqxLGmUvDa+6DT0xbJcfYLGFgPLxMVa1HO6S8V7mAh3Ys7ihHZviRVlzYbv2be qbU9ZBeg+2d6kcQapv4JuX6GJMzU8qDrsljkWaZsjCqtplNgbEvLVAKiEiyCWJvY BoC7wwqem0xbrNpMgCz1aoFCFPmezKTV -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:02 2025 by rpki-client