$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: BBzpj8TyMXZd+14mD2/2Jds7I+nD6xlgb/8WeDvrfbE= Subject key identifier: 3A:DE:5E:25:26:58:63:03:9C:7C:38:0E:E5:12:AC:BC:8C:F3:25:85 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0131 Signing time: Wed 13 Aug 2025 05:18:06 +0000 Manifest this update: Wed 13 Aug 2025 05:18:05 +0000 Manifest next update: Wed 20 Aug 2025 05:18:05 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: 6vLpB1vFP9EBGpxTHiYFE6pyk1abtOG8iWXeBdzs/uY=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Aug 13 05:18:05 2025 GMT Not After : Aug 20 05:18:05 2025 GMT Subject: CN=689c200e-99c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:5f:98:b3:5b:74:14:65:64:88:e4:92:ea: 2f:12:8c:e3:44:4d:87:c6:dd:f3:78:bf:26:52:11: ea:2e:ac:ee:30:22:66:da:e0:d3:ff:2a:72:08:74: 3e:aa:d7:55:63:af:42:c3:d3:e5:73:6c:81:6f:a3: d5:90:2b:8b:49:a7:db:28:b5:0c:36:d5:c2:84:83: b3:37:c1:aa:cf:3e:9a:38:9d:43:1d:e1:66:12:f2: 32:08:f4:c6:1f:8b:a2:ef:bb:36:d2:2b:ba:b5:1d: 59:6d:89:af:71:7e:de:00:18:0c:c3:3a:4a:1b:06: ad:71:13:0a:d6:be:82:46:ba:36:be:c0:d2:18:46: 99:a7:4b:ab:03:59:f3:57:4e:69:b4:7c:11:08:08: 88:2e:a1:e1:ae:f4:30:0b:f4:30:80:a6:a9:13:a4: b9:f7:5b:c5:24:7e:3e:d6:a9:79:72:8f:94:18:3b: 20:22:38:15:9f:59:d3:09:f4:ab:8b:46:ef:19:0c: d3:0c:27:95:f6:a9:a2:b1:c5:b6:d2:2d:49:87:a7: 5a:05:ec:7b:09:96:c1:3a:4b:98:be:d0:be:1e:84: 32:55:d5:02:56:0d:8d:2a:25:96:32:ce:c5:f7:6b: db:0a:8f:89:54:8e:74:ad:3b:e4:01:4f:65:4f:1e: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:5E:25:26:58:63:03:9C:7C:38:0E:E5:12:AC:BC:8C:F3:25:85 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3a:ee:af:90:5f:66:ba:85:84:64:c5:94:e7:c0:d1:e8:e9: 15:59:1b:70:e7:f3:06:9a:cb:88:d3:3c:a2:97:66:91:9d:d1: 55:da:30:4a:d4:a6:8f:7b:85:0d:d1:a2:85:85:83:1e:99:a4: 32:56:77:47:ef:06:bd:8d:52:5f:a8:02:e6:ca:40:e9:5c:6f: a5:17:dd:50:9e:ac:7c:44:74:f1:74:95:a6:e7:95:ce:01:57: 76:47:c3:19:36:75:a5:d4:7a:a0:0e:a3:f6:05:a8:e2:e3:78: 53:65:8d:f5:3d:f7:c2:1d:9c:d9:3e:0f:ff:3c:7c:3c:50:dd: 51:20:d6:27:38:68:9d:ff:af:bb:61:17:94:05:7e:1e:c8:4a: 7d:93:7e:06:b5:e0:cf:7e:75:cc:3f:6a:e0:e6:92:f7:34:e1: 1b:2f:55:18:c0:b1:86:ed:4a:3d:00:54:6b:80:9c:a1:6b:64: 0f:79:ad:a0:6a:12:72:f5:fe:37:8b:b2:ff:08:ad:98:48:d6: 2d:0d:f0:bc:ca:1b:ec:4b:72:68:43:3a:90:8e:da:87:2a:a1: 58:1c:88:30:47:16:b5:cf:2d:f4:43:1d:58:37:55:ce:b8:6a: 71:0c:db:63:af:2a:f2:9f:97:5e:57:c4:bf:43:dd:cf:2b:c3: 54:a7:78:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwODEzMDUxODA1WhcNMjUwODIwMDUxODA1WjAYMRYwFAYD VQQDEw02ODljMjAwZS05OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyJfmLNbdBRlZIjkkuovEozjRE2Hxt3zeL8mUhHqLqzuMCJm2uDT/ypyCHQ+ qtdVY69Cw9Plc2yBb6PVkCuLSafbKLUMNtXChIOzN8Gqzz6aOJ1DHeFmEvIyCPTG H4ui77s20iu6tR1ZbYmvcX7eABgMwzpKGwatcRMK1r6CRro2vsDSGEaZp0urA1nz V05ptHwRCAiILqHhrvQwC/QwgKapE6S591vFJH4+1ql5co+UGDsgIjgVn1nTCfSr i0bvGQzTDCeV9qmiscW20i1Jh6daBex7CZbBOkuYvtC+HoQyVdUCVg2NKiWWMs7F 92vbCo+JVI50rTvkAU9lTx4eMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDreXiUm WGMDnHw4DuUSrLyM8yWFMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMOu6vkF9muoWEZMWU58DR6OkVWRtw5/MGmsuI0zyil2aRndFV2jBK 1KaPe4UN0aKFhYMemaQyVndH7wa9jVJfqALmykDpXG+lF91Qnqx8RHTxdJWm55XO AVd2R8MZNnWl1HqgDqP2Baji43hTZY31PffCHZzZPg//PHw8UN1RINYnOGid/6+7 YReUBX4eyEp9k34GteDPfnXMP2rg5pL3NOEbL1UYwLGG7Uo9AFRrgJyha2QPea2g ahJy9f43i7L/CK2YSNYtDfC8yhvsS3JoQzqQjtqHKqFYHIgwRxa1zy30Qx1YN1XO uGpxDNtjryryn5deV8S/Q93PK8NUp3hq -----END CERTIFICATE-----Generated at Wed Aug 13 07:38:01 2025 by rpki-client