$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft File: hnTXe0A3MAGG04EEg47spLgYMsI.mft (raw, json) Hash identifier: SRPBpDvCPVz1Glf5Hno3i6na+YF7ttPzcYV36fb/rFQ= Subject key identifier: E7:8D:75:C7:42:47:64:AF:98:08:A9:6B:65:17:E3:96:64:77:13:77 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft Manifest number: 033E Signing time: Sat 09 Aug 2025 01:35:23 +0000 Manifest this update: Sat 09 Aug 2025 01:35:22 +0000 Manifest next update: Sat 16 Aug 2025 01:35:22 +0000 Files and hashes: 1: hnTXe0A3MAGG04EEg47spLgYMsI.crl (hash: 562F1nAWM3rKsJDrZVzyVxOWYpeewSzC9c7Hf/ivCXw=) 2: E5708A82CD0E11EC8038C333C4F9AE02.roa (hash: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Aug 9 01:35:22 2025 GMT Not After : Aug 16 01:35:22 2025 GMT Subject: CN=6896a5da-a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:76:82:7c:0e:3b:41:f5:a2:45:9a:8d:a0: af:07:9d:3c:65:e4:ff:27:49:14:54:d4:70:f5:a7: 6a:1b:e0:07:4b:d9:9e:f5:9b:81:9c:6e:a8:2c:74: 42:df:69:27:a9:f6:4a:77:7e:25:92:14:45:91:d6: b6:a2:ca:68:1e:04:d0:6a:91:ea:74:33:b8:e5:b6: 3c:98:20:0b:d8:f1:9b:8b:7f:af:34:24:ec:2f:a9: 94:65:5d:ba:f9:d9:95:43:11:5f:2b:1e:53:ae:e6: 5c:b7:d4:d9:03:92:11:05:bc:55:b9:03:3e:6d:9c: 79:1f:91:06:7e:85:a0:d6:49:49:ac:85:74:fb:58: 49:18:b2:87:55:e7:ca:71:66:85:30:2f:05:6b:2b: 00:67:9c:85:32:d0:08:7b:a1:6c:1f:1f:32:14:91: 1b:6e:a4:33:24:a7:26:49:89:b4:ad:31:2f:97:4a: f6:26:33:ea:87:3c:db:c4:ec:5e:7e:87:a8:3b:42: 9a:7a:af:63:ca:d7:c9:88:60:eb:4c:26:07:c9:90: 34:dc:3c:aa:e6:ce:4d:f3:ab:7c:b0:6c:6d:45:49: e4:77:a6:28:d0:ce:24:6d:01:9f:7b:77:60:1c:ab: 13:33:1b:fe:0d:e9:ed:c9:3d:ec:e7:a9:f9:52:81: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8D:75:C7:42:47:64:AF:98:08:A9:6B:65:17:E3:96:64:77:13:77 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:05:85:ae:d7:dc:c3:c6:99:06:61:98:57:8f:97:2e:e4:1d: 52:15:f6:68:3c:73:20:a6:93:38:08:52:01:2a:a4:01:44:fc: 15:44:9e:1b:97:df:59:74:4a:5d:0f:99:35:28:bc:d1:99:7b: d9:0e:f9:27:f6:03:38:23:6b:0c:7c:dd:db:c9:4f:23:79:df: 45:fb:20:12:5e:9f:89:92:cd:92:4a:cf:40:75:c3:67:d8:27: 0b:b4:7a:fb:9d:aa:ac:7a:b7:f7:e5:c6:79:8a:92:0d:81:05: 15:02:f0:75:66:f7:77:9d:b1:39:b7:82:81:1a:cc:81:5b:42: db:6b:b4:ba:61:75:e7:90:50:20:e9:ce:89:26:63:ed:c9:86: 2a:12:41:ed:ed:64:80:2d:da:cc:41:b4:97:cf:db:4b:1f:6f: 06:eb:5a:85:b5:02:be:d5:90:b4:3b:8c:69:dc:aa:03:0f:d1: 2d:71:34:ee:09:40:fb:8e:fa:29:36:a9:e2:f0:39:f8:43:eb: 93:c0:1e:73:de:57:be:97:64:ec:51:a4:9c:67:6d:aa:ad:cd: 81:2d:9a:89:ad:d5:cd:5a:36:8f:89:18:bd:fb:02:3d:25:8c: ed:a9:db:69:75:3c:0f:b4:8d:c6:d3:20:fb:46:6c:00:48:41: 36:bd:c7:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjUwODA5MDEzNTIyWhcNMjUwODE2MDEzNTIyWjAYMRYwFAYD VQQDEw02ODk2YTVkYS1hMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYx2gnwOO0H1okWajaCvB508ZeT/J0kUVNRw9adqG+AHS9me9ZuBnG6oLHRC 32knqfZKd34lkhRFkda2ospoHgTQapHqdDO45bY8mCAL2PGbi3+vNCTsL6mUZV26 +dmVQxFfKx5TruZct9TZA5IRBbxVuQM+bZx5H5EGfoWg1klJrIV0+1hJGLKHVefK cWaFMC8FaysAZ5yFMtAIe6FsHx8yFJEbbqQzJKcmSYm0rTEvl0r2JjPqhzzbxOxe foeoO0Kaeq9jytfJiGDrTCYHyZA03Dyq5s5N86t8sGxtRUnkd6Yo0M4kbQGfe3dg HKsTMxv+DentyT3s56n5UoFlVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeNdcdC R2SvmAipa2UX45ZkdxN3MB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDhGMi9FNUYyQzdEQUNEMEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01B R0cwNEVFZzQ3c3BMZ1lNc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFBYWu19zDxpkGYZhXj5cu5B1SFfZoPHMgppM4CFIBKqQBRPwVRJ4b l99ZdEpdD5k1KLzRmXvZDvkn9gM4I2sMfN3byU8jed9F+yASXp+Jks2SSs9AdcNn 2CcLtHr7naqserf35cZ5ipINgQUVAvB1Zvd3nbE5t4KBGsyBW0Lba7S6YXXnkFAg 6c6JJmPtyYYqEkHt7WSALdrMQbSXz9tLH28G61qFtQK+1ZC0O4xp3KoDD9EtcTTu CUD7jvopNqni8Dn4Q+uTwB5z3le+l2TsUaScZ22qrc2BLZqJrdXNWjaPiRi9+wI9 JYztqdtpdTwPtI3G0yD7RmwASEE2vcfP -----END CERTIFICATE-----Generated at Sat Aug 9 14:29:05 2025 by rpki-client