$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: l+6zWOHbzFKy6DyT+bAkbaMg4FhfKj0HOm3lR6nFAbM= Subject key identifier: 28:12:7A:39:47:49:3A:E1:66:CC:E2:A0:AC:3A:77:52:82:21:74:1F Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 08BB Signing time: Sun 10 Aug 2025 20:29:14 +0000 Manifest this update: Sun 10 Aug 2025 20:29:14 +0000 Manifest next update: Sun 17 Aug 2025 20:29:14 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: SAI7ZfDUXUWAws2GSptyFq/OYaiWnMzNBqaXMIutXS4=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: pJopSUouAomRS7bBbLiExTbU2TzCWgsGbKH4r8LjMrI=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: NDjkgreHok48ic1Su9+HPGIeiSQ2Z7P+GcpTGnpZzHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Aug 10 20:29:14 2025 GMT Not After : Aug 17 20:29:14 2025 GMT Subject: CN=6899011a-4ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:68:7c:93:f9:b0:d2:9d:c1:f2:33:1d:7f: 37:ef:98:56:f8:a8:40:a8:5c:c5:5a:97:ce:50:9a: c3:15:bc:77:0a:57:d0:09:d4:b4:a8:6a:26:76:5f: 4a:fa:75:4d:b0:0e:6a:57:19:4d:0f:92:7f:0c:c2: 4b:56:52:56:8f:43:c8:99:46:1a:1e:2c:89:96:39: 2f:6b:83:23:ca:c7:02:82:9c:b0:33:92:31:4b:42: c2:7d:ce:b6:6a:46:07:97:1b:47:6e:5e:e8:87:fc: 93:0e:a6:dc:c8:9f:19:e7:94:6c:d3:bf:92:53:20: 48:f0:4d:9b:0a:40:82:6a:9c:42:ca:cf:d1:62:d3: 4f:1e:b6:3a:22:0d:79:92:4f:2c:7c:a9:18:7a:78: b7:79:39:44:e0:2c:eb:13:91:0e:11:db:87:bd:86: 1a:c6:b1:c2:63:55:a0:af:4a:72:f8:32:d4:e2:f1: 09:6f:92:1e:04:dd:8c:fe:3a:45:f3:38:98:51:45: d6:cf:63:a2:1f:1a:82:d9:f7:90:67:99:e3:ff:4f: 6a:1f:10:d8:c9:aa:b9:69:96:3f:90:9a:6d:67:dc: 57:1c:8e:2b:a6:d7:33:e5:d2:4e:ff:e7:38:de:3e: 67:14:2e:51:c4:1a:8e:d0:f2:3d:41:44:ef:c5:74: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:7A:39:47:49:3A:E1:66:CC:E2:A0:AC:3A:77:52:82:21:74:1F X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ca:01:07:09:16:dc:aa:8e:54:e4:11:dd:28:8d:99:37:54: 43:da:53:cd:51:e4:a4:59:9e:44:f1:ca:0e:de:a6:ca:83:4a: 10:a9:7b:27:60:e6:23:e7:36:53:f9:ce:d1:cd:f0:bb:d6:37: 58:90:c4:ac:11:63:7c:60:94:5d:72:c2:71:53:9e:4d:0d:04: 4b:2f:51:d2:b7:2f:a2:06:0c:59:08:dd:9c:af:a4:9f:9a:70: ae:81:3f:1a:75:79:5c:df:9a:c2:8e:81:25:ab:44:ba:5b:ba: d2:b4:fb:70:2c:19:fd:6c:dd:c8:ce:f5:22:2e:ae:85:68:14: 3a:36:f3:cc:9f:43:8e:61:55:2b:9e:fd:04:a1:bf:07:c3:89: a4:4e:bc:93:39:f1:79:4e:72:b0:59:f2:3b:84:aa:43:d4:27: 6e:d0:2f:19:33:05:fe:58:52:32:68:56:0a:c6:fa:06:2d:75: b0:c4:64:ed:87:85:52:f4:a0:6f:71:bd:bd:38:b3:9c:78:2c: c6:60:ff:ea:bc:eb:2d:72:a6:ae:7a:88:be:3f:5a:cc:1e:16: 94:c3:52:f0:09:08:db:be:d3:a3:b1:dc:75:7e:f3:58:cc:c4: 92:5e:17:fd:b8:5e:39:34:60:0a:67:9a:5b:f4:d6:85:89:e3: 2e:71:3d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUwODEwMjAyOTE0WhcNMjUwODE3MjAyOTE0WjAYMRYwFAYD VQQDEw02ODk5MDExYS00Y2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ9ofJP5sNKdwfIzHX8375hW+KhAqFzFWpfOUJrDFbx3ClfQCdS0qGomdl9K +nVNsA5qVxlND5J/DMJLVlJWj0PImUYaHiyJljkva4MjyscCgpywM5IxS0LCfc62 akYHlxtHbl7oh/yTDqbcyJ8Z55Rs07+SUyBI8E2bCkCCapxCys/RYtNPHrY6Ig15 kk8sfKkYeni3eTlE4CzrE5EOEduHvYYaxrHCY1Wgr0py+DLU4vEJb5IeBN2M/jpF 8ziYUUXWz2OiHxqC2feQZ5nj/09qHxDYyaq5aZY/kJptZ9xXHI4rptcz5dJO/+c4 3j5nFC5RxBqO0PI9QUTvxXSRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgSejlH STrhZszioKw6d1KCIXQfMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfygEHCRbcqo5U5BHdKI2ZN1RD2lPNUeSkWZ5E8coO3qbKg0oQqXsn YOYj5zZT+c7RzfC71jdYkMSsEWN8YJRdcsJxU55NDQRLL1HSty+iBgxZCN2cr6Sf mnCugT8adXlc35rCjoElq0S6W7rStPtwLBn9bN3IzvUiLq6FaBQ6NvPMn0OOYVUr nv0Eob8Hw4mkTryTOfF5TnKwWfI7hKpD1Cdu0C8ZMwX+WFIyaFYKxvoGLXWwxGTt h4VS9KBvcb29OLOceCzGYP/qvOstcqaueoi+P1rMHhaUw1LwCQjbvtOjsdx1fvNY zMSSXhf9uF45NGAKZ5pb9NaFieMucT3f -----END CERTIFICATE-----Generated at Mon Aug 11 07:25:10 2025 by rpki-client