$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft File: h25oE78sGBHNEd6ZKBrNRL7A3nM.mft (raw, json) Hash identifier: hoL8CJ3lkkSWDhF1Dn2o61Hi7V+JdOQO+/AB/r5hpgA= Subject key identifier: 68:F4:F5:B5:EC:14:B6:20:BB:B3:DB:80:53:61:B5:62:F6:C5:E2:96 Authority key identifier: 87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 Certificate issuer: /CN=A91F4FB0/serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft Manifest number: 010B Signing time: Mon 11 Aug 2025 05:35:52 +0000 Manifest this update: Mon 11 Aug 2025 05:35:52 +0000 Manifest next update: Mon 18 Aug 2025 05:35:52 +0000 Files and hashes: 1: h25oE78sGBHNEd6ZKBrNRL7A3nM.crl (hash: sxKvqcTC68DkuhSohOfFzM1RCtYxtf1RYuEyBtxkHJo=) 2: EEC42F86232311EFAF815012C4F9AE02.roa (hash: dmDX5d8Ee6EDnk/9c9IbholerFQLcJ0sPLUNE3zziAE=) 3: 0B5DBB081C0311EF8B8AB54DC4F9AE02.roa (hash: +l7KzNw3VW+RHOqRN7o7MYFbDiz9Uue5nL0WGR6JFyA=) 4: 2EFBFF901C0611EF883D807CC4F9AE02.roa (hash: UX1cRz51Yc/EPgI7Avdxh/+oTCoX8i2QidlgdW8Epmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FB0, serialNumber=876E6813BF2C1811CD11DE99281ACD44BEC0DE73 Validity Not Before: Aug 11 05:35:52 2025 GMT Not After : Aug 18 05:35:52 2025 GMT Subject: CN=68998138-7a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:33:51:2f:f9:d6:cd:81:27:7d:6f:02:2a:18: c8:55:ed:5e:cd:25:f7:7b:39:20:2d:a5:6c:fb:a9: c5:20:b3:df:32:80:e3:47:5d:fb:38:e5:12:b8:5f: 9f:af:27:18:a6:3d:35:be:0e:94:40:99:69:a6:a7: 01:7b:f0:07:a6:74:70:46:76:b0:69:66:fa:81:7d: c2:a4:49:c4:a9:e1:d6:76:5d:fa:52:6d:4b:58:dd: ee:61:5f:9d:aa:af:fb:e7:37:8b:cc:e1:02:06:a3: dd:7b:a9:8c:3a:45:58:60:e3:e8:ce:23:d1:c5:1a: 0a:63:7c:b0:75:f7:8a:8f:60:94:f4:ed:4f:a0:52: 08:e4:aa:18:98:ae:05:41:a2:cf:0e:ff:63:08:28: 62:f7:b0:ce:ef:4c:68:53:45:7f:64:6b:bb:71:dd: 59:60:a0:91:73:4d:09:78:5e:69:0f:57:cb:5c:7e: d3:2b:c3:85:af:e5:77:77:62:d1:5d:e8:0b:3e:a4: b0:7c:7b:04:75:a7:86:3f:65:51:51:b0:b6:75:59: f9:eb:e0:67:0e:89:0d:fb:9f:6b:3b:9c:7c:61:9f: d6:a8:5a:fa:3e:f2:d2:ff:21:2b:e7:4c:66:8c:d4: 59:cc:b4:b7:6c:01:42:35:40:45:5e:af:d6:3f:cf: 8e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:F5:B5:EC:14:B6:20:BB:B3:DB:80:53:61:B5:62:F6:C5:E2:96 X509v3 Authority Key Identifier: keyid:87:6E:68:13:BF:2C:18:11:CD:11:DE:99:28:1A:CD:44:BE:C0:DE:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h25oE78sGBHNEd6ZKBrNRL7A3nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FB0/058CEC1419BD11EFBD33E082C4F9AE02/h25oE78sGBHNEd6ZKBrNRL7A3nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:28:42:48:3d:47:34:92:bc:f8:99:73:ec:5e:83:d3:2d:61: 8c:f4:5e:16:bc:12:28:da:ea:1c:99:ae:a0:39:3c:52:23:2f: aa:0a:61:63:1e:c0:7e:c3:85:06:f3:d3:a3:d6:bc:4b:72:9f: e8:88:8e:74:8d:b0:bd:5c:41:c7:eb:ba:f6:95:d1:a9:e1:8b: d7:93:51:48:07:23:32:f8:af:db:9f:81:44:c9:4c:52:ce:36: b8:e5:36:0c:b0:3e:b3:47:b8:2c:57:fa:99:49:4f:d8:f2:1c: dc:40:09:e2:47:50:ed:73:6b:48:62:4b:e1:bd:4b:5f:c5:56: 8c:af:b9:90:8a:d6:d3:36:99:70:68:29:61:9d:0d:f0:6a:e4: e8:d0:7a:9f:a1:f5:fd:dc:bd:73:10:2e:bd:63:2e:08:99:5f: 81:f9:d1:e1:36:62:1e:1b:13:01:a9:b5:db:a3:e7:c4:57:54: 80:0b:8c:8c:47:ec:99:06:b5:f2:21:a8:31:52:1b:6a:94:a5: 2a:15:99:9c:32:d1:c6:b5:fe:17:26:ee:d6:a1:cc:5e:31:e4: 3f:00:3f:9c:66:b7:ec:da:78:20:c6:8f:68:56:86:dc:3d:75: f1:5c:87:40:5d:1c:38:a2:61:e9:89:1e:36:42:04:c3:1b:7c: 9d:bd:e4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGQjAxMTAvBgNVBAUTKDg3NkU2ODEzQkYyQzE4MTFDRDExREU5OTI4MUFDRDQ0 QkVDMERFNzMwHhcNMjUwODExMDUzNTUyWhcNMjUwODE4MDUzNTUyWjAYMRYwFAYD VQQDEw02ODk5ODEzOC03YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozNRL/nWzYEnfW8CKhjIVe1ezSX3ezkgLaVs+6nFILPfMoDjR137OOUSuF+f rycYpj01vg6UQJlppqcBe/AHpnRwRnawaWb6gX3CpEnEqeHWdl36Um1LWN3uYV+d qq/75zeLzOECBqPde6mMOkVYYOPoziPRxRoKY3ywdfeKj2CU9O1PoFII5KoYmK4F QaLPDv9jCChi97DO70xoU0V/ZGu7cd1ZYKCRc00JeF5pD1fLXH7TK8OFr+V3d2LR XegLPqSwfHsEdaeGP2VRUbC2dVn56+BnDokN+59rO5x8YZ/WqFr6PvLS/yEr50xm jNRZzLS3bAFCNUBFXq/WP8+OLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj09bXs FLYgu7PbgFNhtWL2xeKWMB8GA1UdIwQYMBaAFIduaBO/LBgRzRHemSgazUS+wN5z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZCMC8wNThDRUMxNDE5 QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dCSE5FZDZaS0JyTlJMN0Ez bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyNW9FNzhzR0JITkVkNlpLQnJOUkw3QTNuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZCMC8wNThDRUMxNDE5QkQxMUVGQkQzM0UwODJDNEY5QUUwMi9oMjVvRTc4c0dC SE5FZDZaS0JyTlJMN0Ezbk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKEJIPUc0krz4mXPsXoPTLWGM9F4WvBIo2uocma6gOTxSIy+qCmFj HsB+w4UG89Oj1rxLcp/oiI50jbC9XEHH67r2ldGp4YvXk1FIByMy+K/bn4FEyUxS zja45TYMsD6zR7gsV/qZSU/Y8hzcQAniR1Dtc2tIYkvhvUtfxVaMr7mQitbTNplw aClhnQ3wauTo0HqfofX93L1zEC69Yy4ImV+B+dHhNmIeGxMBqbXbo+fEV1SAC4yM R+yZBrXyIagxUhtqlKUqFZmcMtHGtf4XJu7WocxeMeQ/AD+cZrfs2nggxo9oVobc PXXxXIdAXRw4omHpiR42QgTDG3ydveR4 -----END CERTIFICATE-----Generated at Tue Aug 12 14:46:03 2025 by rpki-client