$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: 4kpk1HANo24U9L9DSdC0AkuPcIWmo/ZBh4U++PBdh5A= Subject key identifier: 81:DE:28:F1:61:7C:C7:6F:5C:65:13:10:A1:92:B4:88:FB:DE:A0:13 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 02E4 Signing time: Sat 09 Aug 2025 01:51:39 +0000 Manifest this update: Sat 09 Aug 2025 01:51:38 +0000 Manifest next update: Sat 16 Aug 2025 01:51:38 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: oPbZfARPD9Y50ObhTlLcJSJ0+FtPOyOkoN6efFL/j/Q=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: WLqs4EYDGZGhgsTcvZkB1qzpm9zeqwQq3iz4UzKMW3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Aug 9 01:51:38 2025 GMT Not After : Aug 16 01:51:38 2025 GMT Subject: CN=6896a9aa-8b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:76:79:ab:98:75:f8:fc:fa:78:6c:eb:07: 2f:f7:d3:46:fc:59:2f:27:09:7a:dd:31:6b:b9:6b: 0d:fb:d8:12:02:85:74:e5:6a:64:a9:9d:f4:84:4c: c4:b0:33:fe:b2:fb:95:1e:40:b3:a8:7b:ee:39:e7: 29:4b:88:b0:00:d0:53:dd:94:19:5a:64:f0:b7:6b: 13:ae:db:1b:ae:6f:1d:22:49:8e:38:62:e6:47:61: 02:4d:ec:f1:46:3c:09:43:12:49:40:6e:f5:dc:6c: ff:ad:c8:4e:f2:09:ab:04:7e:cd:5d:cc:0d:71:e3: 4a:0f:c1:2b:5a:97:16:33:be:91:37:74:9b:df:c8: bc:d8:ae:ee:a1:21:7b:17:87:d2:9c:93:00:87:52: 5b:a9:fd:28:4a:e1:2b:5f:1f:80:59:68:e2:72:23: e5:0a:cc:a4:0b:80:bb:d0:53:ca:65:51:51:9f:c5: 4d:69:8c:45:5b:94:d0:ef:eb:9e:e6:bc:4a:56:42: db:38:a1:ab:5c:a9:58:58:13:5d:04:bf:03:7b:7f: 08:9e:8d:c0:4a:69:b5:27:1a:0c:73:de:6c:4d:6c: 82:5c:17:72:cb:19:3c:28:16:99:cd:4f:10:b8:8c: a1:fe:b2:f6:3c:eb:54:5b:99:d4:fd:7e:35:81:b1: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DE:28:F1:61:7C:C7:6F:5C:65:13:10:A1:92:B4:88:FB:DE:A0:13 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:b7:9e:8e:2f:4a:02:c9:70:ae:21:38:8f:d6:ed:ad:03: 75:34:f8:28:62:60:a5:c6:67:be:85:4a:f7:4f:59:a3:a6:dc: 59:fd:2b:0a:32:49:a7:86:58:c5:a8:ef:51:45:65:fa:0c:32: 36:34:7e:13:18:77:c5:b4:c9:18:2c:94:96:8e:1f:88:4c:62: 6b:d6:12:e9:4c:8d:70:73:4f:c0:94:de:0e:06:12:cf:f1:db: fe:7f:bf:74:44:42:6d:fb:c6:e9:2c:ca:30:2b:5e:35:ce:98: d6:e5:20:d2:25:28:6b:07:9e:4d:18:bc:da:21:65:00:01:f1: 63:30:9d:df:3a:e3:b7:e9:af:09:9f:c3:3a:f3:bc:c3:f1:35: ce:36:1a:95:09:5f:fb:ee:ce:86:bf:56:fd:1c:ce:9e:4a:83: 02:48:eb:73:01:72:e6:5f:d4:7e:0a:f1:31:c7:4d:b3:9c:3e: b2:88:8a:f8:b6:68:b4:93:8c:fc:05:6f:83:41:78:cb:f2:62: a4:a6:32:74:7d:46:ab:25:1c:4d:fe:3f:56:73:3a:63:2b:ca: 1b:be:ee:07:4b:9f:f5:71:ae:80:0d:c4:30:49:11:51:0e:fd: b8:6b:a9:45:b9:2e:51:94:cc:03:f4:38:a1:2e:e6:da:b4:f7: f0:22:f2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUwODA5MDE1MTM4WhcNMjUwODE2MDE1MTM4WjAYMRYwFAYD VQQDEw02ODk2YTlhYS04YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqF2eauYdfj8+nhs6wcv99NG/FkvJwl63TFruWsN+9gSAoV05WpkqZ30hEzE sDP+svuVHkCzqHvuOecpS4iwANBT3ZQZWmTwt2sTrtsbrm8dIkmOOGLmR2ECTezx RjwJQxJJQG713Gz/rchO8gmrBH7NXcwNceNKD8ErWpcWM76RN3Sb38i82K7uoSF7 F4fSnJMAh1Jbqf0oSuErXx+AWWjiciPlCsykC4C70FPKZVFRn8VNaYxFW5TQ7+ue 5rxKVkLbOKGrXKlYWBNdBL8De38Ino3ASmm1JxoMc95sTWyCXBdyyxk8KBaZzU8Q uIyh/rL2POtUW5nU/X41gbHWiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHeKPFh fMdvXGUTEKGStIj73qATMB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABB7eeji9KAslwriE4j9btrQN1NPgoYmClxme+hUr3T1mjptxZ/SsK MkmnhljFqO9RRWX6DDI2NH4TGHfFtMkYLJSWjh+ITGJr1hLpTI1wc0/AlN4OBhLP 8dv+f790REJt+8bpLMowK141zpjW5SDSJShrB55NGLzaIWUAAfFjMJ3fOuO36a8J n8M687zD8TXONhqVCV/77s6Gv1b9HM6eSoMCSOtzAXLmX9R+CvExx02znD6yiIr4 tmi0k4z8BW+DQXjL8mKkpjJ0fUarJRxN/j9WczpjK8obvu4HS5/1ca6ADcQwSRFR Dv24a6lFuS5RlMwD9DihLubatPfwIvIg -----END CERTIFICATE-----Generated at Sun Aug 10 03:57:19 2025 by rpki-client