$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: q0vpRu3dOz0WjDY4/IPW4coycm0/YMI0cJkZRW3oLJE= Subject key identifier: E7:D3:87:40:FA:3C:5A:F0:13:2F:BF:EC:EE:39:4F:A1:E5:36:2A:40 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C6A Signing time: Fri 08 Aug 2025 18:40:14 +0000 Manifest this update: Fri 08 Aug 2025 18:40:13 +0000 Manifest next update: Fri 15 Aug 2025 18:40:13 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: vzO6/6aRbPyO8mo53AKme+6BuT01yzMX2E5neq9Etz0=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: Vnlm09BUO+chX1tlq21ZLuGHNsKf+Ef7LVuHWoX7u+4=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: 0ddkZi9qTO49z6ZuAoCOMoJP1tbejU/oVWG5cp39xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Aug 8 18:40:13 2025 GMT Not After : Aug 15 18:40:13 2025 GMT Subject: CN=6896448d-a454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:bf:27:78:b5:ba:5f:b0:03:ad:88:f0:d5: 7d:2f:de:18:aa:ce:55:4c:ae:07:92:83:21:11:3a: 04:73:c4:8f:d5:77:98:c9:3a:57:ce:59:d1:8c:80: 8e:b9:3f:3c:64:4c:fe:c0:8c:df:cf:ba:46:c4:e5: 73:f5:d4:5d:73:45:bc:af:72:1f:89:a8:6d:04:ab: 4b:fe:76:32:9c:73:d0:97:60:b3:97:9c:db:1b:bf: c8:21:f1:50:1d:7c:ce:c1:5f:e4:2d:59:96:03:b4: 39:03:4e:af:e5:41:f2:c3:cc:2b:a1:ca:49:6e:97: 9e:65:c8:fd:6f:ba:9f:8c:75:27:65:50:38:96:98: 12:e3:02:fe:a0:fb:fb:a8:81:48:3f:91:21:81:c2: cb:96:51:7e:fb:fc:c3:a0:b9:64:b2:ed:f9:09:17: c9:68:09:a2:d5:61:50:61:22:34:e2:c5:f9:20:78: 7c:e6:d5:18:72:07:08:66:0e:87:8c:2b:d6:6c:98: 2a:73:76:5e:76:ff:6c:6b:0d:90:c2:75:3e:99:c8: 9b:c6:ff:be:a2:22:3e:cf:88:b8:0c:85:69:77:1d: c0:58:f9:f9:03:54:1e:64:e3:46:eb:90:b8:cd:59: 9b:6b:50:65:44:a9:5c:96:84:7f:20:da:70:7b:34: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:87:40:FA:3C:5A:F0:13:2F:BF:EC:EE:39:4F:A1:E5:36:2A:40 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f4:38:01:a4:ca:2f:e9:41:87:fe:74:cc:d4:35:4a:19:d0: 43:cb:78:c7:0b:03:f3:90:9e:29:81:de:0e:b8:4e:f5:d8:be: 5d:34:33:03:72:72:e2:a2:ae:0d:26:f0:9b:68:6e:c8:22:93: ab:5f:6d:03:39:97:22:df:05:d9:4c:c5:dd:0a:5c:b2:ad:87: c0:8d:a4:d0:d4:f0:e3:b9:a3:a7:76:7a:65:90:a5:82:e7:61: e3:e8:fc:0c:40:cd:c1:96:eb:ea:a3:85:86:11:0d:6e:99:14: 9c:93:2f:de:52:9f:79:47:b7:e1:55:3a:2d:62:4a:7e:68:06: 72:e2:48:ce:ce:1a:2d:4f:7c:6a:fd:47:15:1b:86:30:e9:19: aa:4d:f9:f2:d8:d0:59:bb:78:25:c7:12:aa:56:12:6b:e3:34: e6:75:f6:66:59:f1:96:fb:ae:58:a3:b9:2c:84:fd:fc:27:c9: 91:2b:27:94:5f:ed:c2:c3:89:74:fe:8c:a7:08:a5:8d:7c:9c: c5:25:02:ce:15:51:8f:64:30:74:2b:27:14:52:e1:73:96:d7: 69:f8:e5:ed:50:a4:40:fa:72:ef:4e:94:c6:86:f0:38:ad:d4: a0:e0:e3:6d:76:5f:3b:24:8a:a6:ef:77:3b:94:b5:1c:c1:93: ac:2f:90:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUwODA4MTg0MDEzWhcNMjUwODE1MTg0MDEzWjAYMRYwFAYD VQQDEw02ODk2NDQ4ZC1hNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B+/J3i1ul+wA62I8NV9L94Yqs5VTK4HkoMhEToEc8SP1XeYyTpXzlnRjICO uT88ZEz+wIzfz7pGxOVz9dRdc0W8r3IfiahtBKtL/nYynHPQl2Czl5zbG7/IIfFQ HXzOwV/kLVmWA7Q5A06v5UHyw8wrocpJbpeeZcj9b7qfjHUnZVA4lpgS4wL+oPv7 qIFIP5EhgcLLllF++/zDoLlksu35CRfJaAmi1WFQYSI04sX5IHh85tUYcgcIZg6H jCvWbJgqc3Zedv9saw2QwnU+mcibxv++oiI+z4i4DIVpdx3AWPn5A1QeZONG65C4 zVmba1BlRKlcloR/INpwezRKPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfTh0D6 PFrwEy+/7O45T6HlNipAMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp9DgBpMov6UGH/nTM1DVKGdBDy3jHCwPzkJ4pgd4OuE712L5dNDMD cnLioq4NJvCbaG7IIpOrX20DOZci3wXZTMXdClyyrYfAjaTQ1PDjuaOndnplkKWC 52Hj6PwMQM3Bluvqo4WGEQ1umRScky/eUp95R7fhVTotYkp+aAZy4kjOzhotT3xq /UcVG4Yw6RmqTfny2NBZu3glxxKqVhJr4zTmdfZmWfGW+65Yo7kshP38J8mRKyeU X+3Cw4l0/oynCKWNfJzFJQLOFVGPZDB0KycUUuFzltdp+OXtUKRA+nLvTpTGhvA4 rdSg4ONtdl87JIqm73c7lLUcwZOsL5Bd -----END CERTIFICATE-----Generated at Sun Aug 10 04:45:15 2025 by rpki-client