$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft File: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json) Hash identifier: lydUdNJyMjqFhMBlRDH/FfOkg8tzH/TZfW0PG2kKuuc= Subject key identifier: 56:70:3A:7A:6A:71:A5:29:D9:30:C8:27:AB:23:0B:8E:46:CC:90:86 Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 Certificate issuer: /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Certificate serial: 077B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft Manifest number: 0772 Signing time: Fri 08 Aug 2025 21:56:59 +0000 Manifest this update: Fri 08 Aug 2025 21:56:58 +0000 Manifest next update: Fri 15 Aug 2025 21:56:58 +0000 Files and hashes: 1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: G895tcoLLJY6Hkzc4GRx/KnqiUqOmiEQA7h7u5EXr+c=) 2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: 1GNNxU4cZHFHnGQGEpAVPZfliXXhk8CqSgKLDVtEJBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5 Validity Not Before: Aug 8 21:56:58 2025 GMT Not After : Aug 15 21:56:58 2025 GMT Subject: CN=689672aa-507d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:a6:c9:cd:c7:76:64:17:37:9c:b2:7d:1b: 18:13:89:07:61:aa:7f:a7:b6:c9:b2:88:3b:40:93: d5:53:68:be:86:39:46:16:d2:3b:86:7b:3f:16:98: 7f:40:66:af:39:14:05:d2:b0:96:64:bc:a6:82:de: 0b:9d:56:3a:98:81:1b:10:0a:f5:6a:b6:8b:1a:3d: a7:6f:b5:31:05:ce:13:b5:9f:92:41:f4:16:a0:5d: 89:45:38:8b:f6:f8:36:d8:54:7d:2a:71:a9:1a:3e: 34:b8:e0:53:f5:69:d7:e5:42:0f:7a:7f:38:c8:83: c6:00:33:f4:fd:56:94:6d:ee:a9:3e:22:9f:0b:1a: 50:4c:56:ad:0f:6a:07:38:45:c3:b8:3f:1b:47:af: f5:45:b3:f2:e8:17:9a:d1:92:df:f1:2a:e5:cc:b9: aa:ce:80:ed:20:54:5c:98:6f:02:ff:2e:23:13:e8: 2a:ea:5c:5d:b2:12:d2:85:6e:6b:b4:bc:97:8b:27: 90:d7:d5:e9:8e:d8:f0:ca:1f:15:87:e8:2e:51:0b: 1a:52:80:f1:56:cd:24:33:8b:87:53:85:41:54:e8: 87:af:69:f4:2a:19:8c:a3:a7:3d:2b:76:0b:18:12: a6:a5:98:b6:68:82:b1:b4:7b:ce:f2:e0:40:aa:55: 07:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:3A:7A:6A:71:A5:29:D9:30:C8:27:AB:23:0B:8E:46:CC:90:86 X509v3 Authority Key Identifier: keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:b6:5e:d5:4b:91:a0:45:b5:65:31:19:36:78:cb:9a:88: 97:f0:76:d0:9e:e2:19:2c:2e:c0:66:87:76:60:27:36:3f:34: 25:f0:91:43:9f:07:1a:eb:f1:36:76:27:23:e5:0a:ec:ca:1e: b8:8c:df:78:33:26:9f:08:88:f4:c0:45:3c:49:8d:9d:7c:f3: 38:9f:1c:95:12:6f:62:88:da:76:b7:0f:98:7a:ac:da:a0:bb: fe:7c:09:95:6a:3b:ec:de:03:7a:51:0f:4f:3b:d2:e2:bf:69: 11:fb:3c:f9:30:a0:91:fa:5a:a3:25:36:71:bf:da:1c:2d:af: 58:94:2d:04:50:a9:5c:db:05:ec:38:57:9b:db:37:9d:d0:24: 36:f5:16:f1:da:07:32:74:ac:2d:3e:74:20:b2:7f:05:d2:ae: bc:44:0d:7e:c9:f0:c3:c1:62:11:77:b2:63:7b:fb:3d:e1:22: 7a:fe:b5:c9:5e:34:0f:50:87:de:ab:c4:c9:99:ad:27:4c:8e: e0:2b:c1:6b:f0:84:ff:01:24:23:e6:21:18:59:73:9b:a2:f2: d4:b5:a9:5f:47:2e:49:1c:42:4e:6a:f5:78:af:35:bf:b0:f3: be:53:18:b8:14:55:35:e0:71:63:ab:08:81:90:fd:13:58:f1: 1a:38:d2:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD RTM5N0FGQjUwHhcNMjUwODA4MjE1NjU4WhcNMjUwODE1MjE1NjU4WjAYMRYwFAYD VQQDEw02ODk2NzJhYS01MDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27qmyc3HdmQXN5yyfRsYE4kHYap/p7bJsog7QJPVU2i+hjlGFtI7hns/Fph/ QGavORQF0rCWZLymgt4LnVY6mIEbEAr1araLGj2nb7UxBc4TtZ+SQfQWoF2JRTiL 9vg22FR9KnGpGj40uOBT9WnX5UIPen84yIPGADP0/VaUbe6pPiKfCxpQTFatD2oH OEXDuD8bR6/1RbPy6Bea0ZLf8SrlzLmqzoDtIFRcmG8C/y4jE+gq6lxdshLShW5r tLyXiyeQ19Xpjtjwyh8Vh+guUQsaUoDxVs0kM4uHU4VBVOiHr2n0KhmMo6c9K3YL GBKmpZi2aIKxtHvO8uBAqlUHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZwOnpq caUp2TDIJ6sjC45GzJCGMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3 RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1 UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXKrZe1UuRoEW1ZTEZNnjLmoiX8HbQnuIZLC7AZod2YCc2PzQl8JFD nwca6/E2dicj5Qrsyh64jN94MyafCIj0wEU8SY2dfPM4nxyVEm9iiNp2tw+Yeqza oLv+fAmVajvs3gN6UQ9PO9Liv2kR+zz5MKCR+lqjJTZxv9ocLa9YlC0EUKlc2wXs OFeb2zed0CQ29Rbx2gcydKwtPnQgsn8F0q68RA1+yfDDwWIRd7Jje/s94SJ6/rXJ XjQPUIfeq8TJma0nTI7gK8Fr8IT/ASQj5iEYWXObovLUtalfRy5JHEJOavV4rzW/ sPO+Uxi4FFU14HFjqwiBkP0TWPEaONJF -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:29 2025 by rpki-client