$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: 74jADVe8rAwPjuxNlsDoPOl0v1U7bVqx65VbIo11UOk= Subject key identifier: 8E:52:20:C1:16:F6:41:EA:E5:4F:F3:85:F5:6C:70:E1:00:C1:D3:2B Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 01F6 Signing time: Thu 07 Aug 2025 02:55:00 +0000 Manifest this update: Thu 07 Aug 2025 02:54:59 +0000 Manifest next update: Thu 14 Aug 2025 02:54:59 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: zS1MqsgRcPfuML5BX4Qght/ymtIno4qergUGWFTEVD0=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Aug 7 02:54:59 2025 GMT Not After : Aug 14 02:54:59 2025 GMT Subject: CN=68941583-4f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:c7:6b:84:bb:65:3b:84:16:52:df:f3:3c: 66:c5:bf:06:a1:0d:cb:9c:27:2b:aa:12:dc:f9:3f: a8:26:e3:09:0e:10:28:c5:85:91:08:60:c7:76:f3: 64:37:97:0e:da:8c:96:31:a3:8b:5a:c1:ee:5a:38: 51:8c:69:86:82:f8:93:46:f0:af:f8:6e:0b:56:de: 67:c9:f4:6c:00:bb:85:4f:bb:9d:88:c8:3d:e4:4c: 02:41:3b:9b:c0:d5:4f:43:2e:16:20:6e:36:22:22: c8:80:31:cf:9a:fb:76:36:68:07:03:92:4c:d3:b7: ed:b5:f0:2b:c3:f9:f0:e9:b9:9d:b0:fe:12:35:0e: dd:a6:c6:84:6f:4a:5f:cc:22:e2:9d:5d:fb:68:52: 1a:2b:0a:46:f4:41:92:6e:3e:6b:20:75:53:af:25: 33:c4:7a:dd:96:9c:27:6a:c1:84:95:9f:f9:5e:fa: 06:c1:d7:e4:c6:32:e8:1f:20:76:9d:a6:f6:ff:1d: af:9e:ec:9e:2a:a5:f1:fa:21:0e:f8:f0:4c:85:50: 84:1b:a1:84:c0:8f:66:e0:72:a0:0e:80:60:96:21: b6:f3:11:4a:d6:93:69:51:15:2e:50:5b:6b:fb:12: 92:86:1e:51:59:42:ba:ae:a0:d3:20:f8:ac:c1:86: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:52:20:C1:16:F6:41:EA:E5:4F:F3:85:F5:6C:70:E1:00:C1:D3:2B X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:fd:4d:13:57:63:bb:3c:0e:79:af:3c:4c:ee:14:af:61: d1:cc:c0:93:c7:49:0e:5e:f6:a6:34:e2:6e:ce:98:ca:fe:6d: 7f:bf:ba:4c:90:f6:fb:eb:59:e3:d5:06:95:32:77:11:f6:6b: 97:53:1c:fe:22:63:e2:07:e5:33:15:61:8f:29:9e:bb:eb:ac: 56:72:2f:b4:13:b9:a4:24:6d:4c:b5:42:6e:4d:6e:ae:53:94: f1:c9:a7:70:f0:00:d6:9c:6d:2a:c6:b0:3a:90:fa:02:b3:b7: ef:70:ac:5b:16:0e:30:b8:fa:fa:bb:02:8e:7d:76:5f:ec:5d: af:bb:43:7d:d5:75:e2:1e:5b:bc:7b:50:3d:ac:5e:7a:97:73: 30:d4:51:f5:64:db:ee:ed:88:03:ac:a2:35:1c:fb:d4:b3:b6: be:cf:de:c3:ae:d3:56:f7:ec:39:89:f1:d5:cb:da:04:1b:f6: 1a:4d:f3:35:a4:74:28:91:59:69:df:96:df:20:c2:f9:e8:f4: e7:97:2d:bd:1c:23:e3:b6:b6:30:c9:79:85:e7:12:13:60:44: 80:d5:86:67:64:84:40:4c:a0:ef:33:bb:e6:22:8d:44:2b:2d: 9e:16:db:9c:c9:2e:b5:5a:7e:76:c7:8c:9e:70:d5:f1:bf:80: ee:f2:25:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUwODA3MDI1NDU5WhcNMjUwODE0MDI1NDU5WjAYMRYwFAYD VQQDEw02ODk0MTU4My00ZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wjHa4S7ZTuEFlLf8zxmxb8GoQ3LnCcrqhLc+T+oJuMJDhAoxYWRCGDHdvNk N5cO2oyWMaOLWsHuWjhRjGmGgviTRvCv+G4LVt5nyfRsALuFT7udiMg95EwCQTub wNVPQy4WIG42IiLIgDHPmvt2NmgHA5JM07fttfArw/nw6bmdsP4SNQ7dpsaEb0pf zCLinV37aFIaKwpG9EGSbj5rIHVTryUzxHrdlpwnasGElZ/5XvoGwdfkxjLoHyB2 nab2/x2vnuyeKqXx+iEO+PBMhVCEG6GEwI9m4HKgDoBgliG28xFK1pNpURUuUFtr +xKShh5RWUK6rqDTIPiswYaBdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5SIMEW 9kHq5U/zhfVscOEAwdMrMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThv1NE1djuzwOea88TO4Ur2HRzMCTx0kOXvamNOJuzpjK/m1/v7pM kPb761nj1QaVMncR9muXUxz+ImPiB+UzFWGPKZ6766xWci+0E7mkJG1MtUJuTW6u U5Txyadw8ADWnG0qxrA6kPoCs7fvcKxbFg4wuPr6uwKOfXZf7F2vu0N91XXiHlu8 e1A9rF56l3Mw1FH1ZNvu7YgDrKI1HPvUs7a+z97DrtNW9+w5ifHVy9oEG/YaTfM1 pHQokVlp35bfIML56PTnly29HCPjtrYwyXmF5xITYESA1YZnZIRATKDvM7vmIo1E Ky2eFtucyS61Wn52x4yecNXxv4Du8iU9 -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:57 2025 by rpki-client