$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: a0kRQXpsM6M4Q89JJ9HXAWCFsgmqmrii7bR6wjb4R+M= Subject key identifier: 9A:5D:D0:36:6E:BF:E4:41:E5:26:7B:83:92:01:F7:47:24:53:9B:A8 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 0324 Signing time: Sat 09 Aug 2025 01:40:35 +0000 Manifest this update: Sat 09 Aug 2025 01:40:35 +0000 Manifest next update: Sat 16 Aug 2025 01:40:35 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: jV0K3ehsO3KnQytmgWIQew9tSex8bvDfLtSZOGCwJDA=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Aug 9 01:40:35 2025 GMT Not After : Aug 16 01:40:35 2025 GMT Subject: CN=6896a713-cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:28:dd:0f:9c:a1:2e:fd:68:43:89:2a:11: b3:b7:00:eb:43:d9:5e:2f:a5:1e:08:b0:d9:87:4b: ed:88:98:cb:2a:7f:a6:97:fc:aa:ec:84:a8:a6:b6: 75:66:a9:86:17:03:10:3e:d1:c2:4e:4b:ed:65:a8: 91:dc:1a:7b:aa:de:85:1d:7a:9e:e2:0e:bc:38:be: c4:fd:4a:b0:a4:e9:83:90:57:00:ac:46:17:e9:8c: 3e:51:25:aa:6f:c6:f6:7d:d0:eb:ce:f3:4a:cb:ab: 44:a9:7a:df:df:84:4b:64:be:2c:8b:b2:d9:d0:4e: b4:1a:54:f1:e6:94:a4:88:d2:f7:f5:3f:7c:a8:6f: 35:64:c2:b7:86:08:33:14:54:c8:38:46:c5:fb:51: 65:3c:a7:2c:8e:94:8e:a1:ef:e0:4c:33:ec:9d:4e: f6:95:ce:48:fd:fe:50:01:5f:e5:e6:df:25:66:a0: ad:b5:bd:8d:db:ed:c5:4c:3d:de:17:f4:59:9c:14: 02:b6:a5:92:44:6d:c2:62:27:a8:93:db:4f:d4:bf: 40:fb:23:7b:12:ab:c7:17:55:7e:d8:a9:ef:a5:07: 9d:dd:4d:aa:de:80:eb:a9:4f:92:68:8b:6f:f7:a6: 58:0a:01:50:30:35:d0:b6:3a:55:ed:94:bd:5d:42: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:D0:36:6E:BF:E4:41:E5:26:7B:83:92:01:F7:47:24:53:9B:A8 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:79:63:f0:9e:42:4c:57:f4:f8:0e:6f:87:d4:8b:17:32:9e: 83:ed:4d:4a:ed:25:f6:7d:73:6b:13:bb:1c:16:b7:f8:a4:bc: 4d:2c:70:fd:36:a1:fd:d2:fc:85:42:a9:5c:25:bc:4b:7d:3d: 00:89:05:5f:33:52:38:09:4d:64:39:51:96:8b:ef:1f:bd:58: 87:b2:24:2a:6f:d8:7e:7d:50:a5:bd:4f:37:b1:cf:04:42:b9: 4e:bd:b7:af:9e:71:81:be:30:37:ee:28:68:09:57:cb:88:53: 98:ea:3d:a9:e5:a0:87:9c:1a:8d:34:40:b5:b6:b9:39:d3:11: f7:d0:3c:3a:23:cd:d3:0f:7e:8a:2a:32:61:d2:af:e8:db:11: b1:3b:0d:58:1c:85:81:db:25:b0:a3:71:96:74:83:b5:ab:5e: 7d:c0:50:34:95:44:73:72:cb:a8:68:8b:dd:f8:e1:77:9a:30: 24:de:07:bd:f5:81:3e:2b:ed:d2:93:9c:ee:4d:b5:1f:3f:5c: 89:80:a6:5a:de:90:66:db:64:ba:58:0f:6b:08:42:c8:8d:68: 24:6a:61:57:0f:d7:ec:3a:38:ab:4b:e2:6f:99:fc:99:b8:1a: ea:b8:f7:72:7a:57:e1:30:72:83:f4:84:19:fc:f4:ac:1b:62: ab:42:21:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUwODA5MDE0MDM1WhcNMjUwODE2MDE0MDM1WjAYMRYwFAYD VQQDEw02ODk2YTcxMy1jYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnIo3Q+coS79aEOJKhGztwDrQ9leL6UeCLDZh0vtiJjLKn+ml/yq7ISoprZ1 ZqmGFwMQPtHCTkvtZaiR3Bp7qt6FHXqe4g68OL7E/UqwpOmDkFcArEYX6Yw+USWq b8b2fdDrzvNKy6tEqXrf34RLZL4si7LZ0E60GlTx5pSkiNL39T98qG81ZMK3hggz FFTIOEbF+1FlPKcsjpSOoe/gTDPsnU72lc5I/f5QAV/l5t8lZqCttb2N2+3FTD3e F/RZnBQCtqWSRG3CYieok9tP1L9A+yN7EqvHF1V+2KnvpQed3U2q3oDrqU+SaItv 96ZYCgFQMDXQtjpV7ZS9XUKbZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpd0DZu v+RB5SZ7g5IB90ckU5uoMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0eWPwnkJMV/T4Dm+H1IsXMp6D7U1K7SX2fXNrE7scFrf4pLxNLHD9 NqH90vyFQqlcJbxLfT0AiQVfM1I4CU1kOVGWi+8fvViHsiQqb9h+fVClvU83sc8E QrlOvbevnnGBvjA37ihoCVfLiFOY6j2p5aCHnBqNNEC1trk50xH30Dw6I83TD36K KjJh0q/o2xGxOw1YHIWB2yWwo3GWdIO1q159wFA0lURzcsuoaIvd+OF3mjAk3ge9 9YE+K+3Sk5zuTbUfP1yJgKZa3pBm22S6WA9rCELIjWgkamFXD9fsOjirS+JvmfyZ uBrquPdyelfhMHKD9IQZ/PSsG2KrQiEF -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:12 2025 by rpki-client