$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: C03r42yH7W69WKWZ7qycbDyTQw1Du5V9bVS3jEVor9g= Subject key identifier: ED:8E:80:38:7D:72:6F:01:78:23:47:98:E9:35:32:66:B5:A2:7D:4C Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 029F Signing time: Sat 09 Aug 2025 02:07:10 +0000 Manifest this update: Sat 09 Aug 2025 02:07:09 +0000 Manifest next update: Sat 16 Aug 2025 02:07:09 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: z7xyoeQNtdbY0vMcADCTAjUxPpM488cvj0iD5MGZ73w=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Aug 9 02:07:09 2025 GMT Not After : Aug 16 02:07:09 2025 GMT Subject: CN=6896ad4e-0030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:8b:f0:a0:4d:11:b6:4c:12:f6:a4:92:bf: b0:86:d0:7f:ce:5d:42:3c:6c:4f:b4:be:ab:20:30: b3:bd:62:31:b7:93:1a:ff:50:cf:88:97:be:88:87: 9e:16:02:9d:94:ec:43:44:2f:c5:81:9a:1d:c2:cf: cd:4d:9c:3f:75:f7:49:71:ae:dc:7d:26:48:41:cf: 61:11:b2:a9:0d:1c:f4:f0:43:6c:89:e7:12:e1:0d: d7:05:e6:fb:a1:92:20:79:f2:42:4a:10:08:a5:59: 4e:e7:d6:71:6b:18:72:36:df:a3:8e:50:e8:e8:b1: 89:7d:92:3d:d9:90:d0:53:50:42:84:81:b9:68:56: db:1e:48:89:fb:59:f1:f5:29:ec:75:bf:af:d9:4d: 41:9d:71:02:b4:b7:29:fa:4b:ba:17:57:5f:bd:c8: e5:a5:5c:f6:7a:66:1b:26:c7:5f:53:45:3d:09:8c: dd:6f:4f:50:82:d8:d5:c5:09:14:f7:ce:93:44:b8: f1:48:ad:31:2c:4a:d6:87:f9:df:f4:e2:04:d2:9c: a9:24:ca:71:b5:04:0f:1d:4a:69:f3:8e:3b:56:7c: 75:13:4e:23:58:ce:53:12:da:bc:3b:67:fd:6d:62: 36:69:df:4b:60:eb:e2:48:79:9b:8d:29:0d:3c:1e: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8E:80:38:7D:72:6F:01:78:23:47:98:E9:35:32:66:B5:A2:7D:4C X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:df:73:e1:a8:d0:89:94:9a:6d:c8:05:e0:a2:f4:e2:8e:5a: f0:7b:9c:2d:f0:3b:d2:d9:b2:69:4e:22:86:ac:c0:d3:73:62: c8:d1:f3:11:0e:da:50:e6:2b:ec:7f:2a:c3:29:f1:08:76:13: ce:41:5b:5a:71:e4:be:cb:46:55:60:4e:2f:4a:1b:11:30:ca: 62:27:3b:95:3f:f5:7f:cd:bb:48:58:ee:04:80:33:17:db:57: 0d:48:64:c9:b4:80:01:9a:22:f6:e7:53:6f:5c:1f:af:04:8b: e3:18:63:06:b6:3b:f4:58:97:75:a1:12:d6:48:8b:06:70:39: 3d:55:c4:d0:d0:b0:c7:00:2f:ee:b4:ed:a0:8a:6c:7c:7b:f9: 06:51:7a:2f:76:61:a1:02:12:b0:2c:29:21:bf:e0:b8:4a:6b: 90:c4:04:06:65:b1:07:53:84:82:ec:c7:3b:d3:67:49:93:1c: 54:07:20:c6:42:76:4f:e8:9e:c3:f6:f1:36:4d:fd:14:23:f1: 87:8e:56:3f:99:d7:1b:c8:ee:79:93:67:73:ec:7e:b7:b3:d7: 64:86:93:4b:86:e2:e1:07:56:f8:6a:52:c9:f7:00:4d:29:a5: 6b:de:f7:8b:bb:51:8a:e0:75:b7:58:9b:0c:69:9d:70:01:08: aa:5d:88:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwODA5MDIwNzA5WhcNMjUwODE2MDIwNzA5WjAYMRYwFAYD VQQDEw02ODk2YWQ0ZS0wMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eKL8KBNEbZMEvakkr+whtB/zl1CPGxPtL6rIDCzvWIxt5Ma/1DPiJe+iIee FgKdlOxDRC/FgZodws/NTZw/dfdJca7cfSZIQc9hEbKpDRz08ENsiecS4Q3XBeb7 oZIgefJCShAIpVlO59ZxaxhyNt+jjlDo6LGJfZI92ZDQU1BChIG5aFbbHkiJ+1nx 9Snsdb+v2U1BnXECtLcp+ku6F1dfvcjlpVz2emYbJsdfU0U9CYzdb09QgtjVxQkU 986TRLjxSK0xLErWh/nf9OIE0pypJMpxtQQPHUpp8447Vnx1E04jWM5TEtq8O2f9 bWI2ad9LYOviSHmbjSkNPB52ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2OgDh9 cm8BeCNHmOk1Mma1on1MMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ33PhqNCJlJptyAXgovTijlrwe5wt8DvS2bJpTiKGrMDTc2LI0fMR DtpQ5ivsfyrDKfEIdhPOQVtaceS+y0ZVYE4vShsRMMpiJzuVP/V/zbtIWO4EgDMX 21cNSGTJtIABmiL251NvXB+vBIvjGGMGtjv0WJd1oRLWSIsGcDk9VcTQ0LDHAC/u tO2gimx8e/kGUXovdmGhAhKwLCkhv+C4SmuQxAQGZbEHU4SC7Mc702dJkxxUByDG QnZP6J7D9vE2Tf0UI/GHjlY/mdcbyO55k2dz7H63s9dkhpNLhuLhB1b4alLJ9wBN KaVr3veLu1GK4HW3WJsMaZ1wAQiqXYgX -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:25 2025 by rpki-client