$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: yF6rgSV/c4A12Nf8WgkHKM2LBmJGoM4MBdBrcz1owOM= Subject key identifier: 03:7F:0D:0B:2C:6F:72:57:66:4E:B3:CD:9A:43:24:72:E9:E4:D4:DA Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 091A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 0911 Signing time: Wed 06 Aug 2025 20:37:07 +0000 Manifest this update: Wed 06 Aug 2025 20:37:07 +0000 Manifest next update: Wed 13 Aug 2025 20:37:07 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: mFUSm4geTE+TLjIkrdwYIDuLsD4a+fVugElPYq5s9+A=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: Do71l71FTiixHCCIPeakkaaBf4R9F2qJdYWGM64Ufb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2330 (0x91a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Aug 6 20:37:07 2025 GMT Not After : Aug 13 20:37:07 2025 GMT Subject: CN=6893bcf3-19f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:4a:a7:16:70:1e:ca:0e:1c:33:e5:d5:33: 85:f7:6a:77:60:95:96:f3:f1:18:ca:8c:9c:2b:6b: 19:0c:63:2f:ef:e1:00:e7:c5:88:87:80:8b:96:b8: ec:e8:b9:2c:f5:21:1f:fa:21:64:af:07:f3:cb:c4: 76:31:d8:49:dc:ce:91:f7:b9:00:36:3b:b7:1c:54: ce:a9:aa:14:de:8a:f6:4e:7d:13:55:09:8d:ad:d8: a7:64:89:b4:e8:1a:47:10:17:18:fb:f6:2b:81:ac: 11:50:ba:a7:02:ef:35:60:8b:5c:c4:fd:80:0e:8a: cd:7e:9e:9f:07:f4:7f:34:c7:5a:cb:56:ec:05:74: de:0d:3a:c1:1d:f1:82:6d:8d:c4:a8:01:34:33:8f: 5f:c2:10:59:ab:8c:82:2d:e0:c7:96:96:d7:79:1e: d8:9d:48:c5:85:f5:a3:58:d8:b3:ff:27:21:cf:8b: 5a:90:3e:fa:f3:2a:ee:b3:ea:23:8a:06:b9:60:f6: e8:8d:fb:7d:3e:01:ce:ec:d7:c2:70:d4:ee:64:c3: f8:f7:db:64:87:c6:88:50:de:f5:ba:d8:b0:56:54: dc:bd:5f:da:fb:b9:af:a8:5c:5f:6d:d0:19:db:38: 4f:20:2d:fd:c8:03:f4:df:5f:09:c7:4c:72:7f:67: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:0D:0B:2C:6F:72:57:66:4E:B3:CD:9A:43:24:72:E9:E4:D4:DA X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:03:43:22:92:46:48:5a:2f:79:f4:c9:04:b7:73:f8:3f:3b: d8:53:cc:29:f2:fa:6d:6e:f7:d2:3c:d6:0e:c9:12:2c:d8:4b: 39:5d:f1:37:a6:6d:9e:d5:75:63:83:1e:d0:0a:f3:a5:84:cb: 9f:0b:51:f9:32:1d:4a:aa:f7:ce:71:8c:6c:37:33:72:a6:10: c8:cc:3b:39:39:3c:89:42:89:eb:02:db:85:3b:a6:4d:5e:d4: 02:89:9e:e7:7d:5d:f3:75:8a:e2:ab:8d:a2:40:59:5d:59:22: e8:da:42:b1:9c:29:43:e5:d1:da:19:d5:91:b3:cf:98:62:89: 7f:78:a6:f0:91:57:61:79:e9:e1:1d:73:25:84:dd:f0:38:75: 6f:7a:58:73:61:31:b4:6e:dc:9f:20:df:29:5a:18:66:8f:ba: 2a:20:c3:77:8d:23:03:77:e4:b3:cb:38:d7:4c:91:f8:3c:49: 18:e6:b5:b7:c2:62:46:8a:0a:ff:30:22:2e:fd:29:0f:dd:b5: 94:21:5c:47:04:43:b8:1f:72:76:c1:ac:be:f1:b3:a0:19:74: 42:35:a2:52:20:d0:44:42:28:83:12:f7:bb:7c:fa:5d:8c:4c: 45:24:4f:1b:76:a1:27:62:0c:0b:36:98:08:d4:6e:22:08:ad: 62:29:26:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjUwODA2MjAzNzA3WhcNMjUwODEzMjAzNzA3WjAYMRYwFAYD VQQDEw02ODkzYmNmMy0xOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug5KpxZwHsoOHDPl1TOF92p3YJWW8/EYyoycK2sZDGMv7+EA58WIh4CLlrjs 6Lks9SEf+iFkrwfzy8R2MdhJ3M6R97kANju3HFTOqaoU3or2Tn0TVQmNrdinZIm0 6BpHEBcY+/YrgawRULqnAu81YItcxP2ADorNfp6fB/R/NMday1bsBXTeDTrBHfGC bY3EqAE0M49fwhBZq4yCLeDHlpbXeR7YnUjFhfWjWNiz/ychz4takD768yrus+oj iga5YPbojft9PgHO7NfCcNTuZMP499tkh8aIUN71utiwVlTcvV/a+7mvqFxfbdAZ 2zhPIC39yAP0318Jx0xyf2fvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN/DQss b3JXZk6zzZpDJHLp5NTaMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWA0MikkZIWi959MkEt3P4PzvYU8wp8vptbvfSPNYOyRIs2Es5XfE3 pm2e1XVjgx7QCvOlhMufC1H5Mh1KqvfOcYxsNzNyphDIzDs5OTyJQonrAtuFO6ZN XtQCiZ7nfV3zdYriq42iQFldWSLo2kKxnClD5dHaGdWRs8+YYol/eKbwkVdheenh HXMlhN3wOHVvelhzYTG0btyfIN8pWhhmj7oqIMN3jSMDd+SzyzjXTJH4PEkY5rW3 wmJGigr/MCIu/SkP3bWUIVxHBEO4H3J2way+8bOgGXRCNaJSINBEQiiDEve7fPpd jExFJE8bdqEnYgwLNpgI1G4iCK1iKSZ6 -----END CERTIFICATE-----Generated at Thu Aug 7 04:42:47 2025 by rpki-client