$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: Rhmaus/liKlji/mhi05denX9Uf+6EemKRIeVcQDI3pM= Subject key identifier: EE:7D:AE:19:47:02:8A:BC:D6:C1:84:A9:EC:23:4E:76:10:97:07:E6 Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: D0 Signing time: Sat 09 Aug 2025 06:06:00 +0000 Manifest this update: Sat 09 Aug 2025 06:06:00 +0000 Manifest next update: Sat 16 Aug 2025 06:06:00 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 6meYIHo60YEnNYLNtuqccGN9D2twmf80PtTSVp4//gs=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Aug 9 06:06:00 2025 GMT Not After : Aug 16 06:06:00 2025 GMT Subject: CN=6896e548-0189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:01:37:6b:97:02:d1:f1:69:5b:64:99:b3: b1:90:a1:8b:28:b3:e7:82:b6:3c:9b:39:94:b8:3d: 31:9e:fc:33:e0:2e:e3:4a:fd:b6:b4:8f:69:82:57: 59:49:ad:4f:09:07:f3:d0:31:c6:8f:81:56:12:6d: 27:86:d4:3f:42:58:2d:d8:29:85:0c:63:43:70:3d: 35:fa:a7:ab:a3:ea:e7:91:a3:b1:11:44:68:04:74: e1:26:be:fc:71:e5:e6:c6:a2:af:cc:10:17:42:29: b1:15:20:65:fa:25:05:da:ca:18:90:85:a4:30:19: 6a:bd:93:a6:40:6b:ea:54:bc:e1:1d:a7:35:d3:42: 60:3e:5d:aa:9e:b8:2b:fc:5a:83:18:9e:03:a8:6b: d7:80:b0:0e:06:70:5f:34:ae:23:aa:d1:ab:6a:56: 63:7a:f6:8d:80:39:f0:ee:1a:49:ac:69:13:84:a2: 02:5b:07:39:f7:4a:02:65:86:5c:7e:70:aa:bb:c2: 03:4a:7e:08:57:50:21:a4:86:ff:83:09:79:1f:3f: 5e:7f:56:88:9b:96:d1:29:83:e5:aa:7e:51:01:58: ed:c8:35:7c:18:c7:79:51:05:c4:73:ab:b3:89:6b: 64:8f:4a:7b:13:c9:ed:a2:cd:f7:2c:b8:5e:1b:a9: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7D:AE:19:47:02:8A:BC:D6:C1:84:A9:EC:23:4E:76:10:97:07:E6 X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:f7:33:59:1b:ea:1e:55:f2:d7:dc:d8:9b:7a:d8:fc:ca:17: 77:65:34:12:e8:98:f1:54:18:0c:0c:c7:95:59:85:81:db:3d: e3:fc:25:97:93:3f:c0:ea:da:97:0c:63:46:7a:09:52:55:7e: 62:cf:03:3a:44:e9:2e:28:88:53:a3:f4:26:6a:be:42:cb:6f: 7c:dd:b5:5d:2b:6e:dc:e7:ef:20:08:ef:bf:00:ee:3c:80:69: 6a:58:d0:42:e5:21:22:b5:07:b1:78:76:48:c2:22:8e:22:e8: a5:75:b8:eb:4e:b6:3b:94:69:75:68:02:a2:bf:fb:81:9d:77: c8:e3:eb:98:07:03:1c:9e:6e:b0:b1:81:8f:1e:63:36:fe:51: b2:00:25:1a:aa:fd:01:52:27:15:7d:21:1a:89:f6:03:4c:38: 36:f0:14:6f:32:3e:db:d1:0f:3b:cc:c5:33:9b:77:8d:1c:52: 43:f8:d2:81:30:5c:ad:5e:3e:9f:fe:00:f0:64:08:7b:a0:1d: fd:3b:b7:4a:48:be:a9:1f:15:f7:7b:1f:19:11:44:03:e6:c9: 41:14:16:71:d8:fb:13:30:d9:fa:f2:3b:63:d2:35:0f:3d:a1: a7:8f:86:89:69:d8:b1:17:a3:cf:2c:55:25:09:58:c1:50:57: b3:a3:1f:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF RThFQjRDMkQwHhcNMjUwODA5MDYwNjAwWhcNMjUwODE2MDYwNjAwWjAYMRYwFAYD VQQDEw02ODk2ZTU0OC0wMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvwBN2uXAtHxaVtkmbOxkKGLKLPngrY8mzmUuD0xnvwz4C7jSv22tI9pgldZ Sa1PCQfz0DHGj4FWEm0nhtQ/Qlgt2CmFDGNDcD01+qero+rnkaOxEURoBHThJr78 ceXmxqKvzBAXQimxFSBl+iUF2soYkIWkMBlqvZOmQGvqVLzhHac100JgPl2qnrgr /FqDGJ4DqGvXgLAOBnBfNK4jqtGralZjevaNgDnw7hpJrGkThKICWwc590oCZYZc fnCqu8IDSn4IV1AhpIb/gwl5Hz9ef1aIm5bRKYPlqn5RAVjtyDV8GMd5UQXEc6uz iWtkj0p7E8ntos33LLheG6mTGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO59rhlH Aoq81sGEqewjTnYQlwfmMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG ODJmWk1Fdno5eHJ1anJUQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ9zNZG+oeVfLX3Nibetj8yhd3ZTQS6JjxVBgMDMeVWYWB2z3j/CWX kz/A6tqXDGNGeglSVX5izwM6ROkuKIhTo/Qmar5Cy2983bVdK27c5+8gCO+/AO48 gGlqWNBC5SEitQexeHZIwiKOIuildbjrTrY7lGl1aAKiv/uBnXfI4+uYBwMcnm6w sYGPHmM2/lGyACUaqv0BUicVfSEaifYDTDg28BRvMj7b0Q87zMUzm3eNHFJD+NKB MFytXj6f/gDwZAh7oB39O7dKSL6pHxX3ex8ZEUQD5slBFBZx2PsTMNn68jtj0jUP PaGnj4aJadixF6PPLFUlCVjBUFezox8m -----END CERTIFICATE-----Generated at Sun Aug 10 19:52:02 2025 by rpki-client