$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft File: H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json) Hash identifier: Qg73svZwbqCyKeSrpGeCvVrbHbSFvhdP3C1GBGK28qc= Subject key identifier: F8:2F:02:CC:A8:BC:6E:70:91:AF:CA:7D:A5:A1:71:98:FE:2D:F1:D0 Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 Certificate issuer: /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Certificate serial: 0EC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft Manifest number: 101D Signing time: Fri 08 Aug 2025 17:52:41 +0000 Manifest this update: Fri 08 Aug 2025 17:52:40 +0000 Manifest next update: Fri 15 Aug 2025 17:52:40 +0000 Files and hashes: 1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: I/DyXT61iJnf8AgHvuJawjhG4jpC9T5mu/VLrjqRyD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3783 (0xec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607 Validity Not Before: Aug 8 17:52:40 2025 GMT Not After : Aug 15 17:52:40 2025 GMT Subject: CN=68963968-9ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:a1:42:64:5a:39:29:52:dd:43:47:0a:c1: 06:91:54:06:03:ce:9c:34:97:d7:e2:23:79:a0:97: 33:f8:09:7b:1e:f0:fe:02:ed:5d:0a:ce:86:66:67: 12:53:a4:c8:9d:66:00:dd:e4:5a:bc:b6:37:16:65: 26:a0:c2:b5:d6:48:79:a5:c9:24:fa:27:a2:8d:05: 34:61:2d:a5:f9:98:3f:67:05:e1:82:5d:12:3c:84: ba:2f:96:4f:86:d2:cb:d4:c5:c7:93:b1:fc:67:ce: 3a:64:0f:55:25:aa:61:0b:ec:d9:5f:b2:7a:61:c4: 7c:17:c8:1a:5e:3f:62:dd:5b:c9:f9:66:85:b7:46: 55:fa:7e:04:8c:b5:c6:ce:0b:3d:3b:9b:ee:c2:d0: 84:34:28:ef:a7:d8:b3:88:8c:6b:6a:74:fa:0b:fd: c1:50:4b:22:7c:02:34:45:12:69:de:0a:1c:7e:32: 3c:11:67:29:0f:ee:52:0c:b4:54:43:16:c3:f8:ba: d3:82:35:d9:a1:40:4b:64:4f:e0:29:63:cd:fd:47: ec:fe:7e:8e:5a:1b:ba:f6:9e:64:29:21:9a:fd:cb: e1:8c:fa:f4:19:3d:8c:7f:21:d5:b6:c2:57:cd:2a: 90:69:9e:3d:a9:13:91:09:2e:e0:66:2c:26:65:c7: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:02:CC:A8:BC:6E:70:91:AF:CA:7D:A5:A1:71:98:FE:2D:F1:D0 X509v3 Authority Key Identifier: keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:5b:90:a3:68:db:9b:6d:80:a0:af:c2:a8:83:0c:5f:a0:84: f1:c7:b4:09:9c:45:fa:73:4c:6e:46:49:83:75:04:85:99:31: d4:ce:bc:b1:be:a7:eb:21:3a:c3:e8:e0:ed:e3:c7:37:f3:ea: 0f:5c:91:8f:73:97:4c:31:5f:31:57:62:f2:f8:6e:9b:42:db: 79:a2:ff:31:11:98:74:c4:53:e3:d8:ed:90:be:bc:c4:76:f2: 4b:90:82:16:e4:fb:b6:c1:e3:00:52:1c:f3:15:c0:b5:29:a0: 4c:3e:87:17:ef:c1:b4:0e:84:94:84:cf:c0:82:3d:cb:ec:1b: 56:80:80:c6:3e:15:94:69:69:2e:d5:e1:6e:f3:57:57:11:0a: f6:97:e4:84:af:98:a4:bd:f5:44:e6:59:4f:6a:52:14:42:f9: 38:5b:35:06:66:e5:f5:f7:18:7b:a5:be:9f:9b:e1:18:2e:3a: 41:bb:5d:0c:a1:a8:eb:6f:4b:dc:d2:d9:e1:3c:68:5d:6c:90: a5:6c:0c:86:66:a7:67:15:8d:63:15:58:8c:44:73:db:50:be: 08:a5:ac:90:5d:e0:a4:a2:5a:57:22:b0:82:70:c6:e7:09:40: ab:f4:56:98:98:18:65:d9:c3:32:f9:de:f3:e7:25:9a:f9:8d: ab:fc:d2:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKDFGOEZBMEFCRkE4RDdGN0Y3RTdFQTAwRDU2RUEwMUM3 MDkzMkU2MDcwHhcNMjUwODA4MTc1MjQwWhcNMjUwODE1MTc1MjQwWjAYMRYwFAYD VQQDEw02ODk2Mzk2OC05YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BWhQmRaOSlS3UNHCsEGkVQGA86cNJfX4iN5oJcz+Al7HvD+Au1dCs6GZmcS U6TInWYA3eRavLY3FmUmoMK11kh5pckk+ieijQU0YS2l+Zg/ZwXhgl0SPIS6L5ZP htLL1MXHk7H8Z846ZA9VJaphC+zZX7J6YcR8F8gaXj9i3VvJ+WaFt0ZV+n4EjLXG zgs9O5vuwtCENCjvp9iziIxranT6C/3BUEsifAI0RRJp3gocfjI8EWcpD+5SDLRU QxbD+LrTgjXZoUBLZE/gKWPN/Ufs/n6OWhu69p5kKSGa/cvhjPr0GT2MfyHVtsJX zSqQaZ49qRORCS7gZiwmZceZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgvAsyo vG5wka/KfaWhcZj+LfHQMB8GA1UdIwQYMBaAFB+PoKv6jX9/fn6gDVbqAccJMuYH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYzOS1mcUFOVnVvQnh3a3k1 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g0LWdxX3FOZjM5LWZxQU5WdW9CeHdreTVnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi9INC1ncV9xTmYz OS1mcUFOVnVvQnh3a3k1Z2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXW5CjaNubbYCgr8KogwxfoITxx7QJnEX6c0xuRkmDdQSFmTHUzryx vqfrITrD6ODt48c38+oPXJGPc5dMMV8xV2Ly+G6bQtt5ov8xEZh0xFPj2O2QvrzE dvJLkIIW5Pu2weMAUhzzFcC1KaBMPocX78G0DoSUhM/Agj3L7BtWgIDGPhWUaWku 1eFu81dXEQr2l+SEr5ikvfVE5llPalIUQvk4WzUGZuX19xh7pb6fm+EYLjpBu10M oajrb0vc0tnhPGhdbJClbAyGZqdnFY1jFViMRHPbUL4IpayQXeCkolpXIrCCcMbn CUCr9FaYmBhl2cMy+d7z5yWa+Y2r/NI9 -----END CERTIFICATE-----Generated at Sat Aug 9 15:12:53 2025 by rpki-client