$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: HabOV5mlBSsVcy5SRMGJQXL2HFMV/6Ng/pZubA3QcuQ= Subject key identifier: 9B:EC:9B:1C:E4:FF:61:78:38:EA:16:3A:AC:CA:92:94:8F:59:BE:37 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 046B Signing time: Tue 05 Aug 2025 00:39:47 +0000 Manifest this update: Tue 05 Aug 2025 00:39:47 +0000 Manifest next update: Tue 12 Aug 2025 00:39:47 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: slAXoU2mgSifAA4fRorvi3jelxpD7mRKgVBr4uAdnqg=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Aug 5 00:39:47 2025 GMT Not After : Aug 12 00:39:47 2025 GMT Subject: CN=689152d3-7b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:75:8a:56:99:c4:a6:71:22:a5:45:dc:cb: f9:2a:eb:cc:5c:ca:62:a7:8f:53:19:35:24:b7:c2: 0c:39:52:27:d7:63:5d:be:bb:30:52:b4:58:15:dd: 60:ea:a1:bb:7b:8c:7f:2a:29:1f:7a:1d:e3:f4:d1: cb:c2:6e:50:07:f7:1f:08:e2:bb:a4:4a:b0:e2:1b: e7:de:d4:51:78:25:c8:51:d0:19:0f:48:63:13:49: ab:c6:3d:2a:31:04:b9:3d:75:2d:b7:81:4f:fa:a0: 3a:2c:ca:77:f8:2e:af:6b:e3:03:f3:7e:66:cb:ea: f8:12:9a:a7:59:04:9d:16:c9:b4:84:7d:80:39:ed: 12:2a:3c:5b:51:9a:01:bf:81:17:0d:32:38:37:4c: c9:ee:0d:3c:cb:ff:b6:75:a5:3c:0c:7e:1d:fe:ea: 7f:23:28:57:c4:61:bf:4f:7a:0a:10:0b:70:03:2f: 24:19:b6:4f:3b:b9:9f:47:d0:f2:a3:e3:0a:62:b1: e9:1d:1e:f1:d1:9a:2a:1d:a8:9f:e2:78:72:f0:83: b8:1d:c3:ef:af:a8:34:4f:fd:b7:02:ad:c0:d1:2f: 48:dc:b3:78:87:3c:30:bf:48:2e:fc:31:18:91:cb: e2:df:6f:66:29:a5:58:e1:ae:fb:e7:de:9a:3a:19: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EC:9B:1C:E4:FF:61:78:38:EA:16:3A:AC:CA:92:94:8F:59:BE:37 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:3f:29:e1:66:3c:0b:62:23:ad:65:af:0b:13:c7:d2:bc:9c: 02:d8:65:17:e2:41:fc:30:61:cd:4a:9a:7c:e8:ca:d9:96:a0: 1a:03:0e:1c:6d:4c:6f:d3:17:0b:9e:20:05:9c:21:0d:0d:4f: 74:76:c2:a1:52:15:9b:33:36:24:ee:9c:fb:46:43:f2:d1:4f: 78:f6:4e:d3:ea:1f:1b:d0:be:49:6c:b8:6d:b7:57:47:fd:34: 91:6e:8c:46:69:dd:3c:9f:ef:e0:7f:cb:ce:b5:a6:8e:3a:1f: 20:54:a6:17:6b:46:85:61:04:23:df:f7:3c:d8:7e:dd:03:64: 0f:59:6e:b7:66:fe:67:ab:c4:e1:63:10:c3:dd:3e:58:9d:e9: 8d:ee:78:f3:b5:78:2d:de:c6:9c:e2:44:26:ba:36:d9:39:a8: 07:09:9f:b2:02:6b:2e:83:a7:6b:a5:27:8a:74:ad:f9:d6:5d: 40:22:94:46:70:c5:23:d2:e7:00:36:66:63:36:e3:ca:71:8b: 8b:a7:c8:06:5f:59:42:49:56:0b:97:eb:4c:1a:58:db:47:1f: 7b:2e:cc:06:d6:83:ac:8d:be:ec:d9:e1:a6:78:0f:d7:61:12: 35:e9:86:db:fa:46:f2:82:7f:b0:98:3a:a4:d8:d1:86:d3:a3: 45:74:37:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUwODA1MDAzOTQ3WhcNMjUwODEyMDAzOTQ3WjAYMRYwFAYD VQQDEw02ODkxNTJkMy03YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbl1ilaZxKZxIqVF3Mv5KuvMXMpip49TGTUkt8IMOVIn12NdvrswUrRYFd1g 6qG7e4x/Kikfeh3j9NHLwm5QB/cfCOK7pEqw4hvn3tRReCXIUdAZD0hjE0mrxj0q MQS5PXUtt4FP+qA6LMp3+C6va+MD835my+r4EpqnWQSdFsm0hH2AOe0SKjxbUZoB v4EXDTI4N0zJ7g08y/+2daU8DH4d/up/IyhXxGG/T3oKEAtwAy8kGbZPO7mfR9Dy o+MKYrHpHR7x0ZoqHaif4nhy8IO4HcPvr6g0T/23Aq3A0S9I3LN4hzwwv0gu/DEY kcvi329mKaVY4a77596aOhkYVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvsmxzk /2F4OOoWOqzKkpSPWb43MB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnPynhZjwLYiOtZa8LE8fSvJwC2GUX4kH8MGHNSpp86MrZlqAaAw4c bUxv0xcLniAFnCENDU90dsKhUhWbMzYk7pz7RkPy0U949k7T6h8b0L5JbLhtt1dH /TSRboxGad08n+/gf8vOtaaOOh8gVKYXa0aFYQQj3/c82H7dA2QPWW63Zv5nq8Th YxDD3T5YnemN7njztXgt3sac4kQmujbZOagHCZ+yAmsug6drpSeKdK351l1AIpRG cMUj0ucANmZjNuPKcYuLp8gGX1lCSVYLl+tMGljbRx97LswG1oOsjb7s2eGmeA/X YRI16Ybb+kbygn+wmDqk2NGG06NFdDcO -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:14 2025 by rpki-client