$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: F7n8v2KUt0FuJudAiv6sIo8DFxQtBFpU27KVM02OmQY= Subject key identifier: AC:9F:84:16:BB:5C:6C:8B:DA:F2:CA:1E:FC:A4:75:1C:7A:8F:FD:C1 Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 18A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 188C Signing time: Sun 10 Aug 2025 16:27:39 +0000 Manifest this update: Sun 10 Aug 2025 16:27:38 +0000 Manifest next update: Sun 17 Aug 2025 16:27:38 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: OpwrQKX9r4cBfq38zEXeIeh1n6SRPla0VI2G7miSl2Q=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6312 (0x18a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: Aug 10 16:27:38 2025 GMT Not After : Aug 17 16:27:38 2025 GMT Subject: CN=6898c87b-9c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:e1:d3:2d:da:f2:f6:dc:17:13:36:ca:05: 23:05:07:0a:2c:34:00:27:17:a7:63:17:87:71:d6: ec:76:b7:f3:86:ff:12:c5:d2:5b:be:e0:3e:1f:f1: 4c:14:4a:89:46:91:9f:14:b7:1c:e2:6f:91:dd:3a: b2:93:46:01:39:d2:94:54:c1:fd:53:ac:d7:9c:84: 29:42:c5:37:ae:4e:7d:94:97:ad:34:e8:0f:e8:07: 74:06:1f:e6:4e:05:58:f6:a4:ed:65:f8:d5:bc:0c: b1:f2:d0:58:85:db:a3:6b:58:a1:c6:b2:ff:b4:27: 49:4f:9a:67:c3:1e:4d:cd:68:0d:06:30:e2:a5:69: 9d:77:8b:c5:7f:d5:fe:0b:47:25:19:12:a2:b8:3f: 7b:f0:5a:b1:61:89:75:e4:5f:4c:e8:06:21:fc:53: c1:c7:e5:ab:6c:d7:f0:e3:a5:fb:34:b4:ba:a8:a5: 4a:e1:e1:4e:6d:25:db:2a:66:9f:d2:ff:37:aa:0c: 6e:44:10:c4:fb:55:b3:10:05:a0:3f:14:6b:8c:3d: a8:d8:c1:f3:7a:c9:2f:c1:fd:53:29:a3:f0:e0:24: a3:4c:d0:2d:c4:f1:6b:a6:ae:8e:97:75:22:71:ac: 5c:7a:6a:f4:6c:c2:48:b2:14:fe:26:9c:64:cc:67: 57:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:84:16:BB:5C:6C:8B:DA:F2:CA:1E:FC:A4:75:1C:7A:8F:FD:C1 X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:71:86:57:2e:ff:2c:e1:e2:c7:e3:af:b2:30:c5:40:27:e1: ad:c8:3d:47:51:98:10:b0:b6:9d:af:db:e4:85:a2:fe:b0:e4: 70:30:f7:d0:e6:ec:28:4d:34:2e:5f:01:eb:81:a1:83:53:d3: d5:63:54:62:84:12:51:04:1c:96:53:22:77:7d:5f:4d:3a:48: 46:4e:53:1f:e0:03:d8:d1:4e:42:7d:e6:80:55:d9:25:6f:bb: 8e:87:94:eb:c3:84:b3:6c:8e:d7:a0:56:9a:bb:57:37:79:b9: 80:68:6c:5f:a6:2a:b5:5a:f0:eb:15:63:b8:56:b4:46:5e:43: 91:44:89:a6:2a:56:51:b0:76:fa:49:b1:a0:17:f2:fa:4e:d9: 4d:2b:3f:c3:4c:ef:f8:24:8b:98:d6:da:8d:08:da:bd:98:d0: 6e:39:7e:c6:e1:84:57:a1:cd:0f:ab:50:ac:f9:cf:1a:3a:a7: c9:c4:8f:93:24:ed:3f:25:88:f9:9c:f4:17:16:a6:69:63:ad: 72:d2:15:c4:9c:0f:f1:a5:4d:ca:44:4c:6e:37:5f:23:9d:6a: 9d:e9:8d:5f:8d:7d:f4:be:13:df:7a:e2:61:dc:8e:ad:ed:79: cf:31:98:01:ed:f7:e4:42:69:8c:41:24:3b:d9:41:ca:87:59: 90:81:4e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUwODEwMTYyNzM4WhcNMjUwODE3MTYyNzM4WjAYMRYwFAYD VQQDEw02ODk4Yzg3Yi05YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Inh0y3a8vbcFxM2ygUjBQcKLDQAJxenYxeHcdbsdrfzhv8SxdJbvuA+H/FM FEqJRpGfFLcc4m+R3Tqyk0YBOdKUVMH9U6zXnIQpQsU3rk59lJetNOgP6Ad0Bh/m TgVY9qTtZfjVvAyx8tBYhduja1ihxrL/tCdJT5pnwx5NzWgNBjDipWmdd4vFf9X+ C0clGRKiuD978FqxYYl15F9M6AYh/FPBx+WrbNfw46X7NLS6qKVK4eFObSXbKmaf 0v83qgxuRBDE+1WzEAWgPxRrjD2o2MHzeskvwf1TKaPw4CSjTNAtxPFrpq6Ol3Ui caxcemr0bMJIshT+JpxkzGdXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyfhBa7 XGyL2vLKHvykdRx6j/3BMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCccYZXLv8s4eLH46+yMMVAJ+GtyD1HUZgQsLadr9vkhaL+sORwMPfQ 5uwoTTQuXwHrgaGDU9PVY1RihBJRBByWUyJ3fV9NOkhGTlMf4APY0U5CfeaAVdkl b7uOh5Trw4SzbI7XoFaau1c3ebmAaGxfpiq1WvDrFWO4VrRGXkORRImmKlZRsHb6 SbGgF/L6TtlNKz/DTO/4JIuY1tqNCNq9mNBuOX7G4YRXoc0Pq1Cs+c8aOqfJxI+T JO0/JYj5nPQXFqZpY61y0hXEnA/xpU3KRExuN18jnWqd6Y1fjX30vhPfeuJh3I6t 7XnPMZgB7ffkQmmMQSQ72UHKh1mQgU66 -----END CERTIFICATE-----Generated at Mon Aug 11 07:46:17 2025 by rpki-client