$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: dIMVkRTVsq3vjBmefzPvylvM3ZauhLM2HZIjVsJZrWE= Subject key identifier: 10:DE:33:77:86:CB:67:F9:76:44:6E:1D:62:F9:CC:B3:A2:2C:F3:C6 Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: 71 Signing time: Sat 09 Aug 2025 07:19:31 +0000 Manifest this update: Sat 09 Aug 2025 07:19:31 +0000 Manifest next update: Sat 16 Aug 2025 07:19:31 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: /epKcy6D0809WAUpIDSwkH0vQr71bfUIAb1o0AgryA8=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: Aug 9 07:19:31 2025 GMT Not After : Aug 16 07:19:31 2025 GMT Subject: CN=6896f683-1546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:01:8f:81:6f:f1:06:a2:03:cd:c2:e4:c6: 37:0b:8f:95:2f:4b:78:7c:42:27:93:12:6d:39:55: 6e:9e:ab:18:8a:73:88:d2:c5:36:fb:30:85:7f:e9: a3:92:5f:ec:9b:2e:2d:7c:ba:17:b7:51:a3:d3:dc: a7:c5:9c:bf:98:3b:d6:dc:ba:dc:f2:df:e7:5c:69: 5c:1d:e3:5c:aa:9d:d8:73:41:29:af:6d:b3:11:b9: 4a:b5:65:11:7a:17:89:3b:a5:bd:d8:a3:3b:fb:17: 0a:75:dd:b4:e4:b9:f5:2c:59:cd:a7:db:63:38:80: cd:1c:97:25:d9:57:86:c9:7c:51:db:14:c6:d2:6e: 4a:2c:d4:3e:35:cd:fa:b6:71:81:cc:c1:d1:d5:33: 48:50:64:a7:63:f0:b4:76:d5:84:94:30:eb:92:58: 1e:42:1a:b1:42:60:d1:bc:06:a3:19:31:0b:3a:19: 4d:ee:ea:db:71:6b:59:a2:f7:be:aa:21:43:26:25: 37:8f:a0:a8:c9:47:bc:e5:e7:01:d5:d8:cb:9a:b9: f3:46:f2:af:dd:d5:68:a3:a7:34:95:d8:de:be:7d: 04:e6:36:39:37:ee:ae:4c:0c:8b:7b:a0:da:4c:54: e2:74:7e:93:65:3c:98:8e:c6:bd:be:6c:fb:b0:53: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:33:77:86:CB:67:F9:76:44:6E:1D:62:F9:CC:B3:A2:2C:F3:C6 X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:96:1f:51:22:44:7d:ed:c0:88:b4:71:a1:e4:3a:e2:14:24: d7:00:ee:a0:47:38:40:0e:f9:f7:d5:00:8a:47:c7:27:b8:10: 93:54:ad:87:9b:19:20:f4:8c:cc:28:d4:f9:b1:0e:9d:eb:f7: 96:17:2b:69:5a:45:07:e3:d1:03:c5:d0:e0:fe:48:f4:69:9b: b8:a3:4f:74:a8:52:f7:c8:85:15:ca:ce:a8:e4:4a:7c:43:33: 4f:21:ed:8b:8e:40:2a:72:d1:d2:8c:11:a0:04:9e:88:33:45: 1d:28:ed:60:23:6c:d3:8d:20:5b:54:6a:c5:b1:69:09:f2:0a: 96:31:51:6d:6e:8b:18:d5:f1:a9:78:cd:89:06:2c:cb:52:54: 48:8d:1c:b8:98:05:42:af:68:4c:2a:01:4a:23:26:46:ef:b7: 29:05:f5:25:97:42:18:cf:ec:bf:6e:57:79:27:66:74:81:26: 32:ce:19:3c:a7:ff:ce:c0:1e:9d:87:02:3f:86:9e:bf:07:ee: 3a:98:ec:73:a9:fb:e5:69:70:96:e7:41:46:18:e2:02:b1:12: 78:e4:02:8e:02:18:20:bc:58:30:5a:08:41:de:b5:8e:92:ae: e3:d7:5a:82:08:9b:cf:f9:b1:7f:22:86:31:7b:f0:8e:f6:63: 83:5c:b9:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoQkU4QjQ3MzNCMUFFOEE0NzM2QjdFOTEzMjczM0Q2NTQw OTFFM0QyQjAeFw0yNTA4MDkwNzE5MzFaFw0yNTA4MTYwNzE5MzFaMBgxFjAUBgNV BAMTDTY4OTZmNjgzLTE1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnzAGPgW/xBqIDzcLkxjcLj5UvS3h8QieTEm05VW6eqxiKc4jSxTb7MIV/6aOS X+ybLi18uhe3UaPT3KfFnL+YO9bcutzy3+dcaVwd41yqndhzQSmvbbMRuUq1ZRF6 F4k7pb3Yozv7Fwp13bTkufUsWc2n22M4gM0clyXZV4bJfFHbFMbSbkos1D41zfq2 cYHMwdHVM0hQZKdj8LR21YSUMOuSWB5CGrFCYNG8BqMZMQs6GU3u6ttxa1mi976q IUMmJTePoKjJR7zl5wHV2MuaufNG8q/d1WijpzSV2N6+fQTmNjk37q5MDIt7oNpM VOJ0fpNlPJiOxr2+bPuwU+EBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEN4zd4bL Z/l2RG4dYvnMs6Is88YwHwYDVR0jBBgwFoAUvotHM7Guikc2t+kTJzPWVAkePSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzdCOEJENkNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdm90SE03R3Vpa2MydC1rVEp6UFdWQWtlUFNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzdCOEJENkNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL3ZvdEhNN0d1aWtj MnQta1RKelBXVkFrZVBTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAKWH1EiRH3twIi0caHkOuIUJNcA7qBHOEAO+ffVAIpHxye4EJNUrYeb GSD0jMwo1PmxDp3r95YXK2laRQfj0QPF0OD+SPRpm7ijT3SoUvfIhRXKzqjkSnxD M08h7YuOQCpy0dKMEaAEnogzRR0o7WAjbNONIFtUasWxaQnyCpYxUW1uixjV8al4 zYkGLMtSVEiNHLiYBUKvaEwqAUojJkbvtykF9SWXQhjP7L9uV3knZnSBJjLOGTyn /87AHp2HAj+Gnr8H7jqY7HOp++VpcJbnQUYY4gKxEnjkAo4CGCC8WDBaCEHetY6S ruPXWoIIm8/5sX8ihjF78I72Y4Ncuac= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:25 2025 by rpki-client