$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: nrSrux0091/C+WpOPpKNINF+a9XyFFz+WAcUBSXI4bg= Subject key identifier: 4F:1C:49:63:B8:3C:02:42:9E:57:42:2F:D9:43:97:E4:8F:28:DD:99 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0632 Signing time: Fri 08 Aug 2025 23:08:48 +0000 Manifest this update: Fri 08 Aug 2025 23:08:47 +0000 Manifest next update: Fri 15 Aug 2025 23:08:47 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: th4uXzAwk+0+EJoqhm9tCw1Mg2rJ7BwFsROMcvMyFPw=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Aug 8 23:08:47 2025 GMT Not After : Aug 15 23:08:47 2025 GMT Subject: CN=6896837f-efc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:f4:8b:38:92:d7:99:f5:84:f2:a3:81:03: ec:72:00:ef:ab:5c:a4:59:d9:37:9b:81:07:1b:2d: 1f:d3:67:b0:48:c0:12:e7:ef:85:5c:59:96:0a:b4: 21:b8:25:12:c9:69:e3:d9:1e:c1:b4:56:c2:05:40: 42:d4:64:08:c3:29:b5:94:04:19:2a:f2:d1:72:e4: 36:ba:f4:72:ed:e7:be:81:23:86:96:dd:00:e3:7f: bc:cc:3b:4c:a9:2b:c9:a7:ef:40:fe:ee:0d:a9:18: 9b:30:ce:50:7a:d2:fc:13:e6:d4:d5:87:b7:d6:04: a0:ea:9f:8a:2f:7c:11:99:ac:49:3b:9f:75:30:b7: c9:51:24:45:8f:6c:8c:5d:0d:63:ec:ce:34:b9:92: 8a:df:26:9d:4f:55:50:af:ca:82:16:cc:e2:d9:92: e4:63:fa:a6:28:24:2e:bb:15:08:bf:2e:95:be:ba: 51:a7:db:23:0b:57:bb:4e:01:eb:2f:7a:23:5c:f9: b4:0b:ce:70:3c:fa:ff:23:a3:dc:b6:2c:76:9e:6c: 7b:c2:d8:5c:28:2c:91:cc:29:5a:e9:9e:0e:c0:81: 4c:92:bf:44:fb:96:93:52:b1:7a:57:56:d9:a2:c8: 64:6c:44:1f:be:f4:53:10:ea:07:e7:46:fc:76:b5: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:49:63:B8:3C:02:42:9E:57:42:2F:D9:43:97:E4:8F:28:DD:99 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:88:76:8b:20:22:2d:83:f3:9a:77:3a:28:29:3d:48:d7:2d: 19:e5:4a:92:c0:a4:e5:56:fa:86:b8:56:94:72:f2:2c:bd:2d: 70:4c:2c:2a:7a:7d:b5:89:cf:4c:6c:78:ba:8d:f7:76:ab:dc: cf:3a:32:58:00:7b:04:45:b0:24:50:24:c4:02:2c:8b:fd:a4: 29:c4:54:98:fb:e3:9f:4f:dd:7d:02:33:81:fd:bb:4e:5b:71: 5d:97:77:37:a3:c3:d9:4a:e4:8f:25:c2:d2:ff:a6:60:c8:3a: 1f:61:45:40:11:16:d2:98:e9:87:63:5f:7a:10:db:e4:92:86: ef:46:68:18:b5:af:11:c3:5f:5f:92:c1:3b:2b:bb:c8:99:b0: d0:31:2b:ea:d5:37:df:fd:26:10:62:d4:f8:ac:1e:b6:08:17: 5e:47:97:84:75:e2:b0:67:35:11:c3:02:51:37:b6:b5:5b:b6: d8:1d:34:c2:26:18:c6:dd:3a:8b:bb:32:9c:b2:a8:5c:e2:60: 71:2d:ed:7a:ac:1b:f9:ec:25:4b:f1:01:c3:74:cc:57:5d:2d: c4:c1:53:26:78:a8:94:80:74:f8:3c:4c:82:30:58:1b:ce:f7: 8c:cc:96:17:06:3e:e2:2e:f2:63:3d:7a:b9:ba:40:04:99:0c: d4:58:30:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUwODA4MjMwODQ3WhcNMjUwODE1MjMwODQ3WjAYMRYwFAYD VQQDEw02ODk2ODM3Zi1lZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdn0iziS15n1hPKjgQPscgDvq1ykWdk3m4EHGy0f02ewSMAS5++FXFmWCrQh uCUSyWnj2R7BtFbCBUBC1GQIwym1lAQZKvLRcuQ2uvRy7ee+gSOGlt0A43+8zDtM qSvJp+9A/u4NqRibMM5QetL8E+bU1Ye31gSg6p+KL3wRmaxJO591MLfJUSRFj2yM XQ1j7M40uZKK3yadT1VQr8qCFszi2ZLkY/qmKCQuuxUIvy6VvrpRp9sjC1e7TgHr L3ojXPm0C85wPPr/I6Pctix2nmx7wthcKCyRzCla6Z4OwIFMkr9E+5aTUrF6V1bZ oshkbEQfvvRTEOoH50b8drXkPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8cSWO4 PAJCnldCL9lDl+SPKN2ZMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSiHaLICItg/OadzooKT1I1y0Z5UqSwKTlVvqGuFaUcvIsvS1wTCwq en21ic9MbHi6jfd2q9zPOjJYAHsERbAkUCTEAiyL/aQpxFSY++OfT919AjOB/btO W3Fdl3c3o8PZSuSPJcLS/6ZgyDofYUVAERbSmOmHY196ENvkkobvRmgYta8Rw19f ksE7K7vImbDQMSvq1Tff/SYQYtT4rB62CBdeR5eEdeKwZzURwwJRN7a1W7bYHTTC JhjG3TqLuzKcsqhc4mBxLe16rBv57CVL8QHDdMxXXS3EwVMmeKiUgHT4PEyCMFgb zveMzJYXBj7iLvJjPXq5ukAEmQzUWDBJ -----END CERTIFICATE-----Generated at Sat Aug 9 23:27:01 2025 by rpki-client