$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: PgEkO2Yl1cO/r3XD71fSxZAP79VdmqjevxdQ2pcxSl8= Subject key identifier: 04:EE:BC:BC:75:E2:3C:19:18:1D:92:DC:39:83:E7:F2:65:20:D8:7A Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: 015E Signing time: Sat 09 Aug 2025 04:27:28 +0000 Manifest this update: Sat 09 Aug 2025 04:27:27 +0000 Manifest next update: Sat 16 Aug 2025 04:27:27 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: R9uGuO4uXzOyPwejBsLNow2T712rR9HsV9kso8pbxgc=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: Lj0YroS2X8LOR4hY25qUmswSSH1A4SRoLTfz7csDQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Aug 9 04:27:27 2025 GMT Not After : Aug 16 04:27:27 2025 GMT Subject: CN=6896ce30-64e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:af:82:44:30:dc:da:d0:35:62:29:05:90:ef: 34:68:84:de:24:78:2a:a1:8e:a6:1d:66:c6:e9:3f: a1:32:64:8b:e3:b7:f4:c8:15:0f:3a:ee:d2:68:91: f9:4d:4b:f8:57:7b:fe:a2:38:5f:9b:d9:3e:4e:38: 82:72:6c:b1:01:64:ea:ba:cb:94:01:1b:43:15:02: 34:a3:34:f8:00:d4:1d:fb:14:0f:80:cb:75:cf:bb: 1d:b9:36:ad:18:b3:4b:8a:e6:5c:dd:3c:15:8b:08: c3:77:39:3f:2c:21:b1:95:5a:73:e6:37:f7:a3:05: 6d:4c:1b:1d:86:ba:2d:e2:be:3d:7a:1e:5e:6a:32: 52:e8:8f:08:88:c9:79:75:1e:d4:44:82:61:b2:af: 0e:9e:d7:df:73:d6:be:9f:92:6b:19:02:ca:d2:92: 3c:af:b6:84:98:69:46:bd:af:ac:c9:5a:7c:70:27: 20:67:50:9e:9d:d5:1e:93:0c:44:66:cf:3f:fe:f6: 27:61:0b:c5:ed:78:60:1e:31:31:2e:ec:e3:1e:64: 9f:bb:b4:24:07:f4:f3:8e:ee:05:bb:69:91:51:81: 66:78:73:ac:65:93:af:cf:69:99:49:20:19:28:45: 00:f0:38:d4:56:e6:f3:fe:3a:ef:df:a5:88:1a:55: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EE:BC:BC:75:E2:3C:19:18:1D:92:DC:39:83:E7:F2:65:20:D8:7A X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:03:d9:ff:b9:56:47:0f:e6:dd:6d:80:8e:6d:72:c7:3a:4d: f3:45:9b:de:52:d1:84:b7:2c:3e:c6:58:f8:3d:65:c4:43:6e: 20:80:d5:5d:2c:be:d7:b3:f4:b2:39:1c:5f:11:ec:fc:a2:12: ea:c0:98:22:c5:64:71:40:ba:4c:77:1b:32:fb:68:43:72:0d: c8:af:43:68:a6:ce:ae:e8:27:a9:4a:71:18:ed:bf:8c:5c:d9: a3:f8:5a:dc:c6:3b:68:89:64:a5:07:aa:42:b8:09:35:0a:93: 94:d5:64:f6:29:88:4a:49:4b:3e:ff:23:1e:cf:b9:eb:68:8e: 62:6b:f8:17:4f:01:1d:37:ad:b1:86:cf:10:e0:8e:38:e7:1d: 29:8a:ed:c1:5a:99:3f:bd:66:7b:2e:70:36:41:2f:74:cc:d4: 3a:f6:68:ea:4d:50:1f:8d:a8:c2:5b:e8:8c:2d:85:a1:c4:7f: 8e:98:3c:08:8f:a2:3b:43:ea:a8:66:e9:b6:b8:f5:c0:a3:f2: d7:e7:a7:f3:a6:a2:af:b3:38:f8:5d:f3:7f:45:b6:12:6a:d2: 1e:57:6f:f9:f3:28:c2:39:ee:56:6e:14:f2:9b:5f:aa:91:22: 5f:7e:85:dc:09:38:8f:2f:c0:c1:3e:fa:a9:de:1b:7b:10:a7: 0b:2c:57:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUwODA5MDQyNzI3WhcNMjUwODE2MDQyNzI3WjAYMRYwFAYD VQQDEw02ODk2Y2UzMC02NGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7q+CRDDc2tA1YikFkO80aITeJHgqoY6mHWbG6T+hMmSL47f0yBUPOu7SaJH5 TUv4V3v+ojhfm9k+TjiCcmyxAWTqusuUARtDFQI0ozT4ANQd+xQPgMt1z7sduTat GLNLiuZc3TwViwjDdzk/LCGxlVpz5jf3owVtTBsdhrot4r49eh5eajJS6I8IiMl5 dR7URIJhsq8Ontffc9a+n5JrGQLK0pI8r7aEmGlGva+syVp8cCcgZ1CendUekwxE Zs8//vYnYQvF7XhgHjExLuzjHmSfu7QkB/Tzju4Fu2mRUYFmeHOsZZOvz2mZSSAZ KEUA8DjUVubz/jrv36WIGlWJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATuvLx1 4jwZGB2S3DmD5/JlINh6MB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoA9n/uVZHD+bdbYCObXLHOk3zRZveUtGEtyw+xlj4PWXEQ24ggNVd LL7Xs/SyORxfEez8ohLqwJgixWRxQLpMdxsy+2hDcg3Ir0Nops6u6CepSnEY7b+M XNmj+FrcxjtoiWSlB6pCuAk1CpOU1WT2KYhKSUs+/yMez7nraI5ia/gXTwEdN62x hs8Q4I445x0piu3BWpk/vWZ7LnA2QS90zNQ69mjqTVAfjajCW+iMLYWhxH+OmDwI j6I7Q+qoZum2uPXAo/LX56fzpqKvszj4XfN/RbYSatIeV2/58yjCOe5WbhTym1+q kSJffoXcCTiPL8DBPvqp3ht7EKcLLFdt -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:57 2025 by rpki-client