$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: 8BUPLFzaD6N85EGoisflHWwqPWxpYRRWMw+xx//YyYM= Subject key identifier: 9A:3A:F8:14:48:7E:AE:43:AC:16:6E:51:5A:14:7E:0E:4C:8A:3E:7C Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08CA Signing time: Sun 10 Aug 2025 20:27:51 +0000 Manifest this update: Sun 10 Aug 2025 20:27:51 +0000 Manifest next update: Sun 17 Aug 2025 20:27:50 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: aUvGp4fjbRK2iT52pROsnu+3uRbi5Tk4RlUEfg+7vZs=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Aug 10 20:27:51 2025 GMT Not After : Aug 17 20:27:50 2025 GMT Subject: CN=689900c7-bf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:5b:f9:62:e1:7d:43:1b:ca:ac:b6:84:7f: 06:6a:24:1c:ea:86:89:7d:d2:e0:6e:cb:44:f5:5f: 07:2f:15:ef:6d:44:30:1a:59:f9:4f:74:db:cb:59: c1:e2:fc:2b:63:8c:ae:ec:fc:b2:ee:8a:89:33:f9: a2:26:ea:3e:84:6d:22:5a:1c:8e:f2:f5:7c:97:d5: 62:31:1c:88:12:44:72:5a:68:0a:15:8f:2e:fe:87: 6d:cb:15:bc:e8:2a:69:cb:3c:26:ef:e4:c3:92:56: 06:cb:2b:19:c3:51:40:9e:64:ba:69:fc:1e:ac:a7: e2:e3:4e:2f:f3:22:c7:d3:fb:6d:17:9e:34:76:d2: 71:46:3e:00:57:85:7f:f7:a0:09:75:71:1d:af:b4: 62:04:53:34:87:a4:6b:c9:be:ba:57:3e:2b:1f:0e: 45:f7:14:42:6d:76:ae:57:0e:8d:e1:a2:32:43:ee: 05:dd:bb:f2:3f:be:99:d5:4e:09:67:d4:09:12:8a: b0:16:b3:3f:36:9e:98:d8:25:82:91:41:27:3a:2a: e9:0f:7c:42:c9:08:5d:b5:b2:93:66:29:5f:bc:fc: bf:05:a7:b1:00:38:25:cb:60:cb:69:fc:d4:a5:04: a5:b3:ee:5d:be:9e:06:99:e6:ae:19:17:5c:e9:6f: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3A:F8:14:48:7E:AE:43:AC:16:6E:51:5A:14:7E:0E:4C:8A:3E:7C X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2c:63:c6:e4:90:e6:27:11:9a:d5:fd:50:1b:94:0e:f5:16: 4f:49:3e:b6:23:c0:e1:60:22:e1:1b:13:18:55:b3:57:8e:ee: 4e:ec:66:33:99:e4:26:b9:ab:cc:a4:47:a0:8d:5b:41:bb:7d: 40:7d:d9:05:8e:20:fe:dd:dc:e3:20:63:06:df:cb:cf:cc:45: e9:67:23:02:29:67:96:25:c4:18:0a:ee:ae:d7:ea:11:29:4c: 43:87:88:d3:09:cb:b1:f9:d8:a1:29:8b:6e:6f:f2:0d:a9:b6: ce:c6:5c:05:4a:3f:77:38:7c:94:09:d9:12:ed:65:1f:6d:b2: 3d:a4:94:66:d9:35:62:a4:d2:dd:10:02:94:b1:fe:54:5b:ad: 46:81:09:ca:9f:cb:39:fe:0b:1b:bf:6a:d1:61:42:78:78:3f: d4:24:fe:90:6d:a7:b6:80:50:d8:72:49:c1:63:bb:92:d1:6c: c8:b4:fd:2d:c1:6b:b3:e3:63:fc:73:5f:e4:6f:3c:f9:ca:d6: 7e:b8:1d:90:dc:b8:6b:b7:df:d2:98:56:83:93:c5:e7:2b:c3: d9:a4:0b:7a:50:a4:9b:2a:af:c1:f9:7f:a8:1d:73:d6:28:9d: ca:c2:0e:00:97:e2:36:2f:f3:10:8a:f0:85:22:f4:81:04:57: 33:af:26:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwODEwMjAyNzUxWhcNMjUwODE3MjAyNzUwWjAYMRYwFAYD VQQDEw02ODk5MDBjNy1iZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Bb+WLhfUMbyqy2hH8GaiQc6oaJfdLgbstE9V8HLxXvbUQwGln5T3Tby1nB 4vwrY4yu7Pyy7oqJM/miJuo+hG0iWhyO8vV8l9ViMRyIEkRyWmgKFY8u/odtyxW8 6Cppyzwm7+TDklYGyysZw1FAnmS6afwerKfi404v8yLH0/ttF540dtJxRj4AV4V/ 96AJdXEdr7RiBFM0h6Rryb66Vz4rHw5F9xRCbXauVw6N4aIyQ+4F3bvyP76Z1U4J Z9QJEoqwFrM/Np6Y2CWCkUEnOirpD3xCyQhdtbKTZilfvPy/BaexADgly2DLafzU pQSls+5dvp4GmeauGRdc6W9EBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo6+BRI fq5DrBZuUVoUfg5Mij58MB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCULGPG5JDmJxGa1f1QG5QO9RZPST62I8DhYCLhGxMYVbNXju5O7GYz meQmuavMpEegjVtBu31AfdkFjiD+3dzjIGMG38vPzEXpZyMCKWeWJcQYCu6u1+oR KUxDh4jTCcux+dihKYtub/INqbbOxlwFSj93OHyUCdkS7WUfbbI9pJRm2TVipNLd EAKUsf5UW61GgQnKn8s5/gsbv2rRYUJ4eD/UJP6Qbae2gFDYcknBY7uS0WzItP0t wWuz42P8c1/kbzz5ytZ+uB2Q3Lhrt9/SmFaDk8XnK8PZpAt6UKSbKq/B+X+oHXPW KJ3Kwg4Al+I2L/MQivCFIvSBBFczryZL -----END CERTIFICATE-----Generated at Mon Aug 11 10:06:52 2025 by rpki-client