$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft File: hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json) Hash identifier: XMeU4qV55jWfjsRzXHR7mAUq1xTrd/eUGTXOl7WHnVk= Subject key identifier: 89:45:CB:EF:C2:94:FC:0A:03:4F:DD:E4:F8:BC:86:B3:02:AD:50:3E Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C Certificate issuer: /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft Manifest number: 7B Signing time: Tue 05 Aug 2025 07:22:24 +0000 Manifest this update: Tue 05 Aug 2025 07:22:24 +0000 Manifest next update: Tue 12 Aug 2025 07:22:24 +0000 Files and hashes: 1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: xKjnNaMNvNTxE253DWT2SXZlS0pMWpzVvixAMxM0A6Y=) 2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: nKrpei7NHXS/yvzIer9NaLALl/Q2sUCsHstVjHOpR2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C Validity Not Before: Aug 5 07:22:24 2025 GMT Not After : Aug 12 07:22:24 2025 GMT Subject: CN=6891b130-cf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:cb:78:8c:dc:c1:fc:2e:86:67:1b:7c:33: 42:fd:f2:7f:16:2c:5f:da:2c:91:2f:6c:3d:b7:6c: ae:96:a9:99:b1:43:33:31:5a:f5:12:b9:e4:cd:de: 44:2d:19:c0:54:02:45:4f:a8:b2:bc:17:8a:31:c2: 30:a0:4c:18:5b:44:ba:24:c1:7e:73:ee:f6:65:41: f4:c6:67:3a:94:59:f6:7c:86:2e:8f:57:a4:a9:22: 35:ef:3f:70:ca:e1:f8:92:e4:8a:2a:89:20:00:53: 45:a9:16:2c:ec:8e:52:0f:61:6a:02:9d:a6:62:be: 65:ad:21:ef:80:bd:e3:42:f9:c1:0a:72:2f:1a:85: 8d:40:5d:70:2b:a1:c8:26:58:db:4f:47:40:ba:34: 41:a7:96:1e:e6:5e:f7:66:b3:30:5f:a2:1c:08:69: c6:49:2c:70:77:6e:65:03:34:72:b4:f9:e5:42:d6: ac:1c:db:71:d7:58:f6:6a:60:50:23:19:ae:8a:3d: 55:03:e2:e1:63:8a:07:8f:37:6e:c0:c8:f2:89:7b: 9d:32:1b:f0:26:85:5e:28:2a:20:5e:06:02:df:7a: 1c:78:0a:58:69:6e:b6:8f:68:c3:b1:14:1d:00:4a: 87:a0:a5:30:d1:63:2f:0c:a9:40:2c:3c:c9:8c:8a: a6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:CB:EF:C2:94:FC:0A:03:4F:DD:E4:F8:BC:86:B3:02:AD:50:3E X509v3 Authority Key Identifier: keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e0:d9:ab:e3:f8:8d:ff:34:f9:01:d0:23:43:63:c8:10:be: 1c:d4:77:44:5d:68:da:0c:5e:18:70:37:54:3c:41:70:f0:b8: 8d:f9:27:0b:5b:7a:47:8b:a2:32:56:5a:41:12:62:2f:d8:39: 28:40:e3:32:59:6f:e2:90:e7:63:bf:9c:4d:98:94:85:2a:fe: 4c:d4:62:58:cf:77:de:b2:03:4e:71:02:7d:f0:af:30:9b:08: 45:62:2d:84:d2:90:a3:25:ef:8b:1e:72:d5:6a:9a:af:cf:2e: 42:64:84:65:6a:75:01:f7:6e:61:a3:dd:00:86:8d:71:7c:ab: d4:9b:ba:6f:c8:aa:99:2f:0d:87:d3:6b:0e:d2:80:dd:83:fa: fe:a5:65:25:6c:6d:c4:d9:a1:ee:83:1c:e3:40:57:db:d7:93: cb:72:0b:fc:45:36:6f:31:30:7a:7e:1f:73:d3:83:66:9d:bb: e2:54:97:29:f0:0f:fc:ca:cb:be:9a:9e:41:80:53:2d:4f:a9: 4c:a3:ec:20:3d:e9:e0:64:e9:23:6f:e1:e8:d1:50:ee:5a:8a: be:47:ee:cb:02:14:41:53:8a:2b:2b:2e:fe:e1:c4:24:a0:53: 39:5f:c8:e4:73:ca:d1:68:84:09:8a:9e:50:d9:95:2c:3a:bb: 58:b4:27:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzEzMjExMC8GA1UEBRMoODVFOTk5QzIyQkVFMDFDMzI2NEQzRDIyNjc1ODIxMDky RkZGRDAyQzAeFw0yNTA4MDUwNzIyMjRaFw0yNTA4MTIwNzIyMjRaMBgxFjAUBgNV BAMTDTY4OTFiMTMwLWNmNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4UMt4jNzB/C6GZxt8M0L98n8WLF/aLJEvbD23bK6WqZmxQzMxWvUSueTN3kQt GcBUAkVPqLK8F4oxwjCgTBhbRLokwX5z7vZlQfTGZzqUWfZ8hi6PV6SpIjXvP3DK 4fiS5IoqiSAAU0WpFizsjlIPYWoCnaZivmWtIe+AveNC+cEKci8ahY1AXXArocgm WNtPR0C6NEGnlh7mXvdmszBfohwIacZJLHB3bmUDNHK0+eVC1qwc23HXWPZqYFAj Ga6KPVUD4uFjigePN27AyPKJe50yG/AmhV4oKiBeBgLfehx4ClhpbraPaMOxFB0A SoegpTDRYy8MqUAsPMmMiqaTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiUXL78KU /AoDT93k+LyGswKtUD4wHwYDVR0jBBgwFoAUhemZwivuAcMmTT0iZ1ghCS//0Cww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMTMyL0M0RkExNEY4Qjgw QzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNNbVRUMGlaMWdoQ1NfXzBD dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGVtWndpdnVBY01tVFQwaVoxZ2hDU19fMEN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MTMyL0M0RkExNEY4QjgwQzExRUY4NEZBM0UzNUM0RjlBRTAyL2hlbVp3aXZ1QWNN bVRUMGlaMWdoQ1NfXzBDdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrg2avj+I3/NPkB0CNDY8gQvhzUd0RdaNoMXhhwN1Q8QXDwuI35Jwtb ekeLojJWWkESYi/YOShA4zJZb+KQ52O/nE2YlIUq/kzUYljPd96yA05xAn3wrzCb CEViLYTSkKMl74sectVqmq/PLkJkhGVqdQH3bmGj3QCGjXF8q9Sbum/IqpkvDYfT aw7SgN2D+v6lZSVsbcTZoe6DHONAV9vXk8tyC/xFNm8xMHp+H3PTg2adu+JUlynw D/zKy76ankGAUy1PqUyj7CA96eBk6SNv4ejRUO5air5H7ssCFEFTiisrLv7hxCSg UzlfyORzytFohAmKnlDZlSw6u1i0J8A= -----END CERTIFICATE-----Generated at Wed Aug 6 19:35:31 2025 by rpki-client