$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft File: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft (raw, json) Hash identifier: 8U0YF9KtGkDd70y1chbvpjYy6JfaewrxbM3f4rP62Fc= Subject key identifier: FF:6D:5F:CF:47:82:D6:4E:30:58:6B:D0:4A:48:CD:29:D2:05:F5:9D Authority key identifier: 85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 Certificate issuer: /CN=A91AAC4B/serialNumber=852046915185F855E09EB344788139430E740F07 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft Manifest number: 6C Signing time: Tue 05 Aug 2025 07:30:21 +0000 Manifest this update: Tue 05 Aug 2025 07:30:21 +0000 Manifest next update: Tue 12 Aug 2025 07:30:21 +0000 Files and hashes: 1: hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl (hash: 1RHaRM3WwO0A9mY0VE+LxkvqucSZ9/efKdYaOXrIh5A=) 2: B710956ACD7E11EFBBAE2137C4F9AE02.roa (hash: JjAbZf5k619HY4BxA5a3XYqwkE4mZ8Dpr0cRyMIFTZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=852046915185F855E09EB344788139430E740F07 Validity Not Before: Aug 5 07:30:21 2025 GMT Not After : Aug 12 07:30:21 2025 GMT Subject: CN=6891b30d-f9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:d8:34:ea:78:03:54:26:a5:95:70:87:73: b6:10:ad:54:c5:5e:b0:c0:07:9b:77:2c:3a:a1:3c: 35:03:8c:f3:f3:c6:3e:c4:45:32:6a:9f:c7:a3:02: 36:6e:04:76:7e:79:4a:45:8c:d4:84:78:85:d6:ba: af:5a:76:fc:60:f2:59:b6:65:49:de:05:71:65:f3: 78:1b:6c:8d:05:03:24:ca:44:19:1e:c9:a1:ce:77: a8:30:ff:dd:f2:cc:59:cc:6b:51:f4:7d:2b:33:ea: 83:dc:fa:41:0b:a4:05:f1:94:61:98:0f:c8:1f:cf: 5c:f9:49:b3:2d:88:67:90:38:f2:8e:46:4d:29:4c: 90:66:0c:e4:75:5b:88:b4:07:cc:72:3c:9a:f5:c1: 3a:37:bd:68:69:58:5d:cc:ae:b0:2d:d6:56:de:5b: c1:f3:58:14:e9:8e:82:b7:36:8a:66:c6:30:50:48: 17:5c:53:e3:f5:d2:51:27:fc:a5:2c:f9:47:f9:6d: c6:55:53:bf:30:8b:15:88:c6:45:8e:99:1e:11:4e: 00:4b:fd:2e:61:ee:a4:a1:34:40:61:66:a9:81:3e: 78:57:2f:b4:08:69:4c:ab:94:e7:d2:53:57:cf:ae: ca:30:d4:15:3a:88:54:ea:c6:06:11:e5:d3:3a:3d: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6D:5F:CF:47:82:D6:4E:30:58:6B:D0:4A:48:CD:29:D2:05:F5:9D X509v3 Authority Key Identifier: keyid:85:20:46:91:51:85:F8:55:E0:9E:B3:44:78:81:39:43:0E:74:0F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/E635F796CD7D11EFAA07230AC4F9AE02/hSBGkVGF-FXgnrNEeIE5Qw50Dwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:b5:dd:a0:29:1c:83:2c:31:25:be:f3:a8:88:1d:fe:f6:a8: cf:80:e4:0e:75:b9:63:d5:63:1d:46:0c:53:63:ae:8e:19:95: 56:57:3b:0a:e9:14:b7:8f:7a:54:a7:1f:2f:3e:43:a6:18:b3: 28:70:1c:68:5b:95:e0:ed:5c:8e:7e:61:a7:48:f1:9b:a4:f6: 3c:1c:bb:91:b1:76:be:c4:52:5e:8d:f3:3c:3c:5c:aa:5b:59: 97:2c:04:69:17:cf:50:f8:7b:b6:46:4b:51:fa:9a:f6:31:63: 6f:ca:61:b0:05:4f:76:a1:ee:d0:fc:5a:73:f0:9d:3f:44:58: 88:4a:43:1e:61:3c:e2:f3:91:73:5e:30:85:f7:2d:70:34:54: 82:b6:04:54:c4:6d:90:71:0f:a2:62:bb:9f:1b:23:8b:45:e5: e5:ed:fe:1f:5a:78:f5:95:0d:04:5c:02:14:19:07:e6:3a:1b: b8:0f:56:78:d5:3a:43:17:11:bd:ab:59:06:d6:da:b3:f4:2f: 8a:b9:d9:d1:2e:b4:d0:77:03:36:2c:e5:03:a3:a8:4f:e7:74: 20:bd:44:ef:64:73:25:5e:98:b1:00:ff:3d:e1:1d:30:e6:d7: e4:2b:be:8a:f9:a4:2a:87:5e:5b:80:fe:fd:ad:74:bc:30:70: 78:62:0c:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QUM0QjExMC8GA1UEBRMoODUyMDQ2OTE1MTg1Rjg1NUUwOUVCMzQ0Nzg4MTM5NDMw RTc0MEYwNzAeFw0yNTA4MDUwNzMwMjFaFw0yNTA4MTIwNzMwMjFaMBgxFjAUBgNV BAMTDTY4OTFiMzBkLWY5ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9vtg06ngDVCallXCHc7YQrVTFXrDAB5t3LDqhPDUDjPPzxj7ERTJqn8ejAjZu BHZ+eUpFjNSEeIXWuq9advxg8lm2ZUneBXFl83gbbI0FAyTKRBkeyaHOd6gw/93y zFnMa1H0fSsz6oPc+kELpAXxlGGYD8gfz1z5SbMtiGeQOPKORk0pTJBmDOR1W4i0 B8xyPJr1wTo3vWhpWF3MrrAt1lbeW8HzWBTpjoK3NopmxjBQSBdcU+P10lEn/KUs +Uf5bcZVU78wixWIxkWOmR4RTgBL/S5h7qShNEBhZqmBPnhXL7QIaUyrlOfSU1fP rsow1BU6iFTqxgYR5dM6PRB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/21fz0eC 1k4wWGvQSkjNKdIF9Z0wHwYDVR0jBBgwFoAUhSBGkVGF+FXgnrNEeIE5Qw50Dwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBQzRCL0U2MzVGNzk2Q0Q3 RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZYZ25yTkVlSUU1UXc1MER3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFNCR2tWR0YtRlhnbnJORWVJRTVRdzUwRHdjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB QzRCL0U2MzVGNzk2Q0Q3RDExRUZBQTA3MjMwQUM0RjlBRTAyL2hTQkdrVkdGLUZY Z25yTkVlSUU1UXc1MER3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOK13aApHIMsMSW+86iIHf72qM+A5A51uWPVYx1GDFNjro4ZlVZXOwrp FLePelSnHy8+Q6YYsyhwHGhbleDtXI5+YadI8Zuk9jwcu5Gxdr7EUl6N8zw8XKpb WZcsBGkXz1D4e7ZGS1H6mvYxY2/KYbAFT3ah7tD8WnPwnT9EWIhKQx5hPOLzkXNe MIX3LXA0VIK2BFTEbZBxD6Jiu58bI4tF5eXt/h9aePWVDQRcAhQZB+Y6G7gPVnjV OkMXEb2rWQbW2rP0L4q52dEutNB3AzYs5QOjqE/ndCC9RO9kcyVemLEA/z3hHTDm 1+Qrvor5pCqHXluA/v2tdLwwcHhiDEI= -----END CERTIFICATE-----Generated at Wed Aug 6 09:37:10 2025 by rpki-client