$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: REiU+jrF38pbWzF8pFFQHMgJWzJvV0lN9u9YH0QYwZA= Subject key identifier: 7E:87:C9:93:F7:A3:CF:AE:B8:90:08:1E:5B:A5:DE:5B:94:C7:F6:69 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 29 Signing time: Thu 07 Aug 2025 08:24:57 +0000 Manifest this update: Thu 07 Aug 2025 08:24:57 +0000 Manifest next update: Thu 14 Aug 2025 08:24:57 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: RPGU/iXqvKkHissdpmQ6O14pQR2XRr1JagZ1KvPBtjg=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Aug 7 08:24:57 2025 GMT Not After : Aug 14 08:24:57 2025 GMT Subject: CN=689462d9-1e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:e1:c7:08:cc:70:15:9d:36:02:a0:f7:cf: ca:53:21:45:b4:25:8e:d8:e4:5a:ca:73:3c:16:cc: 3f:5c:9d:5f:c9:a6:66:ba:a4:ab:54:d0:1e:82:da: 7e:fd:6b:f1:8d:95:5c:22:85:b5:d1:21:10:52:46: 8d:79:71:fd:ef:9f:52:bb:08:50:3b:a5:a7:96:f1: ae:c0:09:ce:1f:fd:74:71:54:57:e6:1b:80:a0:e3: 04:fe:4a:13:bd:b0:b4:ff:1b:12:ed:70:91:b7:cc: 9b:dc:2b:6d:ab:0b:33:9b:e0:fe:7f:35:c1:fa:4b: c7:cb:a0:b6:24:07:8e:65:a7:3c:74:65:a9:75:ec: 84:84:f5:ad:65:8a:70:dd:40:5d:53:26:59:08:f2: 8f:55:5f:b9:56:9a:3b:16:ea:d1:c9:1e:93:25:ee: de:71:64:a1:6b:41:0d:33:dd:7a:33:6d:7c:31:03: 1b:47:fd:44:15:63:36:9f:d3:5c:b3:c1:33:31:05: b1:f9:2a:d7:b9:9e:e5:a8:da:16:bc:9a:84:5e:06: 11:20:3b:ff:69:79:59:bf:1f:0c:16:70:f9:05:87: 03:b3:83:96:80:26:6c:23:02:64:cd:df:68:9f:5d: 47:81:24:0b:86:e9:ca:e3:ab:a4:44:60:e5:ec:4a: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:87:C9:93:F7:A3:CF:AE:B8:90:08:1E:5B:A5:DE:5B:94:C7:F6:69 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d7:c0:e0:40:86:8a:e4:5d:33:f8:5c:0c:de:7b:80:3e:4b: 27:e6:0f:3c:47:f6:04:50:77:ad:a9:6e:4f:4a:f1:12:cb:53: 68:6c:0d:8b:dc:17:32:b7:78:ce:59:e1:f6:ef:e5:c1:6a:56: 29:4c:6a:c1:2e:47:7c:f9:0d:35:99:91:e7:5a:a0:bf:7b:f3: 31:9f:26:b0:56:03:12:0d:b0:9a:69:bd:0a:43:a5:f5:dc:48: 71:df:3d:2b:28:b6:8e:e1:e3:30:f2:e9:a8:5f:e4:b2:a7:84: 4e:01:af:69:3d:3d:2c:4e:63:0d:d3:7c:4f:bd:b1:b3:a8:28: 48:69:6f:39:55:6e:1e:a0:95:e9:67:27:4a:06:74:9d:2c:2f: 5c:17:ce:6c:c5:a7:2f:c3:16:4d:ee:65:06:e4:58:a4:54:c3: f7:62:41:b4:76:d4:fc:da:eb:9f:28:77:30:33:0b:6e:ca:7d: ed:d5:db:f7:ce:d5:70:57:3e:54:36:73:13:21:27:d1:20:24: 7b:0f:72:54:fa:4c:bd:c3:ed:d2:7e:67:ce:e7:f4:81:f8:66: a9:23:6b:d2:10:5e:a7:7e:4e:f8:74:66:d6:c1:ce:ba:a0:f0: a0:71:a7:66:1d:fe:32:4e:2d:c6:e8:e0:c7:c4:2e:ac:f2:f1: 56:4f:d6:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTA4MDcwODI0NTdaFw0yNTA4MTQwODI0NTdaMBgxFjAUBgNV BAMTDTY4OTQ2MmQ5LTFlNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEpOHHCMxwFZ02AqD3z8pTIUW0JY7Y5FrKczwWzD9cnV/Jpma6pKtU0B6C2n79 a/GNlVwihbXRIRBSRo15cf3vn1K7CFA7paeW8a7ACc4f/XRxVFfmG4Cg4wT+ShO9 sLT/GxLtcJG3zJvcK22rCzOb4P5/NcH6S8fLoLYkB45lpzx0Zal17ISE9a1linDd QF1TJlkI8o9VX7lWmjsW6tHJHpMl7t5xZKFrQQ0z3XozbXwxAxtH/UQVYzaf01yz wTMxBbH5Kte5nuWo2ha8moReBhEgO/9peVm/HwwWcPkFhwOzg5aAJmwjAmTN32if XUeBJAuG6crjq6REYOXsSqahAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfofJk/ej z664kAgeW6XeW5TH9mkwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABrXwOBAhorkXTP4XAzee4A+SyfmDzxH9gRQd62pbk9K8RLLU2hsDYvc FzK3eM5Z4fbv5cFqVilMasEuR3z5DTWZkedaoL978zGfJrBWAxINsJppvQpDpfXc SHHfPSsoto7h4zDy6ahf5LKnhE4Br2k9PSxOYw3TfE+9sbOoKEhpbzlVbh6gleln J0oGdJ0sL1wXzmzFpy/DFk3uZQbkWKRUw/diQbR21Pza658odzAzC27Kfe3V2/fO 1XBXPlQ2cxMhJ9EgJHsPclT6TL3D7dJ+Z87n9IH4Zqkja9IQXqd+Tvh0ZtbBzrqg 8KBxp2Yd/jJOLcbo4MfELqzy8VZP1sY= -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:22 2025 by rpki-client