$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: Ux/9NdU3nVRlMD4X/qZ2yXkfEIbQCCG3ETlKinT5Zn8= Subject key identifier: 94:41:9A:30:F5:46:D7:B0:8F:83:AA:A1:B7:E3:03:E5:A1:44:9B:3D Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 0385 Signing time: Sat 09 Aug 2025 01:22:42 +0000 Manifest this update: Sat 09 Aug 2025 01:22:41 +0000 Manifest next update: Sat 16 Aug 2025 01:22:41 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: keYwgT6TYyk3Q6TUO9YoTYYhjDN4elq1uTeMkrTNVsM=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: fxFlUsOaGScQkl9QgTozAWohlmX4iM9s7uV5Ua++ETg=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Aug 9 01:22:41 2025 GMT Not After : Aug 16 01:22:41 2025 GMT Subject: CN=6896a2e2-1d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:53:b3:f7:52:c0:d2:73:2d:1c:0a:0c:47: 2d:ba:8b:bc:f1:78:de:29:f8:42:1b:95:3e:0e:8f: ea:9a:69:84:db:ad:15:c2:eb:96:cf:d8:3a:6a:da: 8a:42:f3:64:1c:c6:09:f9:a7:0f:cd:e7:a1:57:e6: de:b1:49:5d:33:e1:fb:46:53:38:30:2e:de:e0:e2: a1:7a:ef:d3:ed:2b:86:7b:01:2b:43:e5:39:0c:40: e1:cb:1e:d0:eb:3a:7e:ec:1f:db:99:f2:b2:17:09: d6:e2:68:6c:c6:1e:14:e1:57:c6:d5:11:37:75:25: a3:1d:0c:47:8e:9b:e3:f9:b5:97:7d:3e:5b:44:51: 69:32:d3:10:d4:0a:f1:28:b8:a4:03:10:94:90:8c: ce:26:ab:b9:c3:aa:40:ca:1d:d2:0c:a1:a4:8e:11: 64:82:7c:a5:d1:b0:27:9b:63:ea:cb:61:49:73:9d: 2d:15:64:11:00:98:ad:18:f9:77:91:c3:d9:0d:6d: 90:31:ed:84:99:ce:97:3f:c4:c5:37:14:69:aa:23: d7:db:b4:21:be:cf:6d:b2:66:4b:da:5c:c1:65:3e: 30:fc:c3:e8:b2:b3:38:de:78:05:6e:0e:69:d2:ea: 98:fc:c0:72:45:a2:33:6a:69:ac:11:fc:94:89:9b: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:41:9A:30:F5:46:D7:B0:8F:83:AA:A1:B7:E3:03:E5:A1:44:9B:3D X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1c:71:b8:ea:ee:54:6f:ae:e5:be:cd:03:aa:d3:14:8d:6a: 22:dc:cf:21:12:23:3a:71:b9:73:5d:e8:d4:3b:0b:9d:28:dd: 76:56:15:01:89:48:a9:5a:4f:70:fa:3d:5c:89:c8:37:47:22: 40:27:82:b0:b6:7c:4c:2c:52:b2:87:a0:69:a0:3d:53:2f:71: e7:1e:05:b6:03:5f:91:9f:7b:97:5c:00:75:f1:2f:85:e8:fb: 32:9d:2c:de:ee:67:05:df:c3:96:41:33:47:4e:47:24:08:72: 51:99:d6:43:ad:ab:99:93:29:5b:32:14:ae:80:ec:6f:fc:f4: 7b:ad:ae:f6:de:6d:64:f8:f9:09:9b:b9:d0:b1:4f:95:a7:86: 67:53:63:d0:8a:dd:f7:b9:19:60:28:da:8c:48:25:f7:c5:7e: b7:e0:7b:60:95:a9:66:22:26:ab:4b:ec:b1:a2:d4:27:5f:a4: 69:3f:77:62:d5:72:e5:26:df:61:53:95:6a:b3:ea:68:d0:15: 6f:42:bb:d4:d6:8e:2c:e7:d3:fe:18:2f:f2:a7:a1:65:64:a1: 6f:3e:1c:bc:87:e7:1a:59:0b:46:43:7c:47:72:bd:c1:a4:4a: 36:85:8f:bc:7c:67:2a:08:76:e3:bd:40:e1:5c:61:ab:77:76: 84:31:1a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUwODA5MDEyMjQxWhcNMjUwODE2MDEyMjQxWjAYMRYwFAYD VQQDEw02ODk2YTJlMi0xZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSRTs/dSwNJzLRwKDEctuou88XjeKfhCG5U+Do/qmmmE260VwuuWz9g6atqK QvNkHMYJ+acPzeehV+besUldM+H7RlM4MC7e4OKheu/T7SuGewErQ+U5DEDhyx7Q 6zp+7B/bmfKyFwnW4mhsxh4U4VfG1RE3dSWjHQxHjpvj+bWXfT5bRFFpMtMQ1Arx KLikAxCUkIzOJqu5w6pAyh3SDKGkjhFkgnyl0bAnm2Pqy2FJc50tFWQRAJitGPl3 kcPZDW2QMe2Emc6XP8TFNxRpqiPX27Qhvs9tsmZL2lzBZT4w/MPosrM43ngFbg5p 0uqY/MByRaIzammsEfyUiZtDswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRBmjD1 Rtewj4OqobfjA+WhRJs9MB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdHHG46u5Ub67lvs0DqtMUjWoi3M8hEiM6cblzXejUOwudKN12VhUB iUipWk9w+j1cicg3RyJAJ4KwtnxMLFKyh6BpoD1TL3HnHgW2A1+Rn3uXXAB18S+F 6PsynSze7mcF38OWQTNHTkckCHJRmdZDrauZkylbMhSugOxv/PR7ra723m1k+PkJ m7nQsU+Vp4ZnU2PQit33uRlgKNqMSCX3xX634HtglalmIiarS+yxotQnX6RpP3di 1XLlJt9hU5Vqs+po0BVvQrvU1o4s59P+GC/yp6FlZKFvPhy8h+caWQtGQ3xHcr3B pEo2hY+8fGcqCHbjvUDhXGGrd3aEMRqA -----END CERTIFICATE-----Generated at Mon Aug 11 02:04:57 2025 by rpki-client