$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: UyR9fn0YXeSzV3/yFBeX4GT9irAdgYiLyajox+/SXkk= Subject key identifier: 98:5F:BD:0F:AC:F9:EF:F3:03:3B:B3:AB:C3:3F:21:E6:78:96:51:C3 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 0150 Signing time: Sat 09 Aug 2025 04:41:59 +0000 Manifest this update: Sat 09 Aug 2025 04:41:58 +0000 Manifest next update: Sat 16 Aug 2025 04:41:58 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: qpAUgpvw7DIsu40g8DOLIb6BNGPGOjAHqUmw6ND5t0k=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Aug 9 04:41:58 2025 GMT Not After : Aug 16 04:41:58 2025 GMT Subject: CN=6896d197-2664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:da:06:c1:d1:e5:2f:d8:63:7d:50:58:3a: 2e:7e:f9:1c:d4:40:b7:8b:9b:4a:ac:74:ee:fa:58: 38:4f:a1:dd:49:9a:05:f9:d6:38:a9:75:ef:88:59: 47:ce:c9:9d:de:76:40:88:9d:c0:e4:f9:7b:0d:09: 25:5e:36:fb:27:df:a3:c8:c2:3f:14:67:41:5a:73: a7:4f:49:a9:a5:bd:fe:2d:15:0c:ef:f1:87:7e:af: 26:8f:1f:27:4e:fc:b8:77:45:d2:dc:63:71:85:fd: 6a:67:fb:20:aa:77:b6:4f:f8:19:f5:de:42:d2:0a: 87:b9:ef:66:11:93:26:61:3b:db:67:b6:a8:17:c7: af:a8:8d:11:6e:63:2b:59:94:f9:22:1f:c5:d4:f4: 7b:7d:65:25:9b:ef:bd:f1:9c:5c:6e:49:73:2a:66: 87:b8:6d:c6:b6:41:ca:3b:e9:9b:69:b4:2c:ce:65: 84:b8:bf:05:e2:c9:0e:97:89:98:6b:6a:5a:d1:67: 7f:23:bd:df:f5:50:a3:33:df:e8:14:1a:89:c5:ce: a8:45:3a:7d:e4:f2:c9:28:48:bf:10:42:b5:9d:2f: f9:53:76:b9:2b:85:4f:64:e5:3d:16:10:84:cd:79: 54:10:be:0a:ac:a4:12:e5:16:c2:16:cd:df:32:9d: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:BD:0F:AC:F9:EF:F3:03:3B:B3:AB:C3:3F:21:E6:78:96:51:C3 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:78:44:64:c6:b5:84:b3:f6:a1:11:10:3e:f8:56:bd:64: 17:11:20:a9:61:39:64:51:28:43:1e:f5:4d:c0:b2:52:0f:a4: ee:21:f2:c7:69:45:f6:e8:d5:57:fa:30:57:ba:a2:ae:d0:e6: a7:9f:67:11:d7:90:47:3a:f5:30:39:bf:fa:a6:58:ed:70:f6: f6:5f:6b:95:57:ec:36:2c:25:fa:2a:1a:9c:d0:f6:b1:d1:4a: ae:e2:d5:27:8f:6a:43:90:e9:83:86:b3:7f:92:45:b3:33:58: af:2c:c0:43:e6:34:c2:7c:c2:99:fe:9f:19:a7:fa:51:ad:6d: 7b:ea:35:7d:5c:0f:5c:33:17:5b:35:ef:1b:7c:3a:fb:37:26: 56:00:51:26:bb:0e:8d:ce:33:d1:34:58:f8:41:70:2c:c4:82: 1c:e3:48:54:43:df:2e:3e:41:f2:54:f9:e3:ad:e7:48:be:c0: 02:ed:1a:a4:b9:fa:c5:18:ae:7c:14:8c:a2:1a:72:12:ec:1e: bd:60:f5:b8:4c:e9:f2:9e:bd:6a:26:dd:ba:7a:dc:dd:b7:7e: fa:2b:7a:fd:af:34:e4:44:84:90:3f:70:23:dc:2c:41:bb:38: 65:ad:aa:72:4a:09:e6:28:09:41:e1:f2:77:33:de:e0:5e:6b: cd:4c:1d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUwODA5MDQ0MTU4WhcNMjUwODE2MDQ0MTU4WjAYMRYwFAYD VQQDEw02ODk2ZDE5Ny0yNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6PaBsHR5S/YY31QWDoufvkc1EC3i5tKrHTu+lg4T6HdSZoF+dY4qXXviFlH zsmd3nZAiJ3A5Pl7DQklXjb7J9+jyMI/FGdBWnOnT0mppb3+LRUM7/GHfq8mjx8n Tvy4d0XS3GNxhf1qZ/sgqne2T/gZ9d5C0gqHue9mEZMmYTvbZ7aoF8evqI0RbmMr WZT5Ih/F1PR7fWUlm++98ZxcbklzKmaHuG3GtkHKO+mbabQszmWEuL8F4skOl4mY a2pa0Wd/I73f9VCjM9/oFBqJxc6oRTp95PLJKEi/EEK1nS/5U3a5K4VPZOU9FhCE zXlUEL4KrKQS5RbCFs3fMp0dQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhfvQ+s +e/zAzuzq8M/IeZ4llHDMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKYHhEZMa1hLP2oREQPvhWvWQXESCpYTlkUShDHvVNwLJSD6TuIfLH aUX26NVX+jBXuqKu0Oann2cR15BHOvUwOb/6pljtcPb2X2uVV+w2LCX6Khqc0Pax 0Uqu4tUnj2pDkOmDhrN/kkWzM1ivLMBD5jTCfMKZ/p8Zp/pRrW176jV9XA9cMxdb Ne8bfDr7NyZWAFEmuw6NzjPRNFj4QXAsxIIc40hUQ98uPkHyVPnjredIvsAC7Rqk ufrFGK58FIyiGnIS7B69YPW4TOnynr1qJt26etzdt376K3r9rzTkRISQP3Aj3CxB uzhlrapySgnmKAlB4fJ3M97gXmvNTB3L -----END CERTIFICATE-----Generated at Sun Aug 10 18:51:45 2025 by rpki-client