$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: Bve5SAZmHXiMO+cXB7UpnHxLHk+VHzeFYuIAG5V8dcs= Subject key identifier: 83:4D:25:03:06:CE:96:04:7F:EE:90:86:F0:C4:19:16:15:D9:FD:4B Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: BA Signing time: Sat 09 Aug 2025 06:19:01 +0000 Manifest this update: Sat 09 Aug 2025 06:19:01 +0000 Manifest next update: Sat 16 Aug 2025 06:19:01 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: CUVZhfg+wTA+0dDejkf3oWnkbFKrTOOyv4+o09Mb8ic=) 2: 36C627945ADD11EF80893A3FC4F9AE02.roa (hash: SmnJr3cmtzrwi435sl7t5/Qk1K3MbfKQ5zVZNYo5M50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Aug 9 06:19:01 2025 GMT Not After : Aug 16 06:19:01 2025 GMT Subject: CN=6896e855-01f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6e:1f:4e:f4:26:7b:74:88:40:7d:87:72:7b: b7:d5:80:3e:99:32:cc:fc:8d:db:99:dc:2f:b1:7b: b9:2b:8f:df:61:2a:6c:63:08:00:31:8a:74:4c:87: 74:ee:2e:fe:26:ef:c2:94:27:ed:1c:e8:7b:86:9c: 90:68:24:7b:5c:5e:9a:19:f1:a5:cd:73:7c:c4:40: d7:1b:ff:cd:aa:4d:3e:1c:b2:10:8e:2e:a5:c7:d6: e2:75:2b:3f:96:85:73:fe:be:95:c5:da:54:fc:a8: f6:cd:b4:05:ec:51:b4:26:fa:9b:41:f8:6f:52:0e: 48:ee:c4:33:ce:26:67:0d:12:51:66:d2:bf:2b:aa: 96:0c:75:87:f3:f2:a6:93:71:e8:51:5e:19:08:cd: 09:5e:de:46:0e:e7:55:45:f7:11:a1:4b:88:8f:3e: 91:6b:d3:29:d8:52:a5:ab:ab:a3:19:b4:43:0b:b3: a1:3c:ea:1d:c2:d3:20:ba:81:0b:17:5e:74:cc:65: be:6e:13:0c:40:a9:5b:1e:69:c9:77:62:b0:dc:92: d7:87:c2:1d:39:9c:c1:23:ac:7e:54:f7:bd:22:37: 19:1e:94:3e:0c:80:14:8f:de:46:f5:f0:84:8f:c7: cc:15:fc:81:cc:f4:c7:be:33:28:66:25:22:6c:30: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4D:25:03:06:CE:96:04:7F:EE:90:86:F0:C4:19:16:15:D9:FD:4B X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:64:63:c1:5d:15:5d:4b:90:67:46:4c:c6:56:f4:75:1c:dc: fa:db:80:36:00:48:ce:a5:2a:86:94:f6:d9:b9:3f:a0:58:26: e0:5d:d3:2d:32:18:ad:54:fd:94:bd:f1:91:6c:74:1a:ce:a1: f1:5d:b6:9e:2a:95:41:88:4c:7a:e5:1e:90:11:80:d0:5c:4f: ed:12:06:bb:a4:84:dd:d0:70:2b:d5:01:fe:cd:8e:12:3e:65: 36:26:1f:c2:4e:c2:0f:f2:31:44:32:31:37:4b:61:a3:24:f2: 47:ce:75:6e:00:0d:66:f5:ae:5d:ac:3d:01:50:10:c9:d8:a5: cb:47:d8:97:df:21:fa:69:c0:02:ed:6f:5d:25:ea:f4:ec:f9: eb:8a:fa:b7:6d:b6:83:56:62:e7:5f:c5:d6:00:6c:3f:f6:cf: 22:a8:de:b4:30:bc:95:64:8f:af:92:9f:16:2f:8a:7e:c4:0b: fa:96:e5:14:84:bc:e9:59:17:d1:b1:a2:6b:18:70:ce:13:4f: c9:c9:2a:1c:49:2a:38:bb:a7:ef:e2:86:c3:28:64:20:e2:a2: 70:ae:3f:9c:a3:15:dd:7e:e9:aa:0e:5f:2a:89:5c:69:a2:75: 38:75:e1:5d:9f:c7:10:03:14:18:6e:b4:77:17:40:5e:6c:83: ed:16:9c:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUwODA5MDYxOTAxWhcNMjUwODE2MDYxOTAxWjAYMRYwFAYD VQQDEw02ODk2ZTg1NS0wMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAom4fTvQme3SIQH2Hcnu31YA+mTLM/I3bmdwvsXu5K4/fYSpsYwgAMYp0TId0 7i7+Ju/ClCftHOh7hpyQaCR7XF6aGfGlzXN8xEDXG//Nqk0+HLIQji6lx9bidSs/ loVz/r6VxdpU/Kj2zbQF7FG0JvqbQfhvUg5I7sQzziZnDRJRZtK/K6qWDHWH8/Km k3HoUV4ZCM0JXt5GDudVRfcRoUuIjz6Ra9Mp2FKlq6ujGbRDC7OhPOodwtMguoEL F150zGW+bhMMQKlbHmnJd2Kw3JLXh8IdOZzBI6x+VPe9IjcZHpQ+DIAUj95G9fCE j8fMFfyBzPTHvjMoZiUibDCYlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINNJQMG zpYEf+6QhvDEGRYV2f1LMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ZGPBXRVdS5BnRkzGVvR1HNz624A2AEjOpSqGlPbZuT+gWCbgXdMt MhitVP2UvfGRbHQazqHxXbaeKpVBiEx65R6QEYDQXE/tEga7pITd0HAr1QH+zY4S PmU2Jh/CTsIP8jFEMjE3S2GjJPJHznVuAA1m9a5drD0BUBDJ2KXLR9iX3yH6acAC 7W9dJer07Pnrivq3bbaDVmLnX8XWAGw/9s8iqN60MLyVZI+vkp8WL4p+xAv6luUU hLzpWRfRsaJrGHDOE0/JySocSSo4u6fv4obDKGQg4qJwrj+coxXdfumqDl8qiVxp onU4deFdn8cQAxQYbrR3F0BebIPtFpwG -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:38 2025 by rpki-client