$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: JAvPPnWZjwI3Kvn2yaf2469a/Bb3S2q+sjNJV/UVLg8= Subject key identifier: 39:DE:F5:A6:95:00:9C:54:46:BE:69:9F:E8:0E:5F:C6:C1:DD:23:D6 Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: B8 Signing time: Sat 09 Aug 2025 06:24:21 +0000 Manifest this update: Sat 09 Aug 2025 06:24:21 +0000 Manifest next update: Sat 16 Aug 2025 06:24:21 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: cZfNzuLY3ZCIKTS65xQ3X1ajHOk61urRFFj9A954hsE=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: PY7lM6CHVV+AnVQlApq2F15tXj0v5hwGoyhPHySPg1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: Aug 9 06:24:21 2025 GMT Not After : Aug 16 06:24:21 2025 GMT Subject: CN=6896e995-dab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:34:20:17:9e:e3:02:5e:21:9e:b4:e5:09: 40:69:e5:b4:81:82:e8:5c:d9:9d:c7:10:d6:60:49: 2f:94:8e:97:c0:81:81:6a:38:36:30:4b:55:8f:22: 98:6b:1d:87:45:63:a3:d2:3e:12:b0:db:f3:ae:ea: 7c:c3:2d:e6:9c:cc:c9:d5:c3:04:66:da:da:a0:1e: 92:36:2b:0a:77:ac:b7:de:e5:4f:d7:a0:66:1e:8f: d6:b6:94:7e:a7:cb:8a:fa:30:a7:19:0e:5e:79:c5: 53:bf:8d:ff:e4:20:4c:f9:cb:6b:6e:41:5a:0f:7f: a0:d8:30:9d:f2:f1:2c:58:1d:3e:0b:20:5f:ae:22: f8:b2:7e:69:e6:06:e1:39:b0:20:d2:aa:7d:e7:b7: 53:d1:0c:99:f1:97:6d:a0:7b:c5:ad:fd:60:78:60: b9:c3:2a:3c:77:76:be:a3:bd:06:af:3f:03:b2:ae: cd:5b:52:86:7a:9a:57:21:ec:11:52:09:a1:f5:34: 81:19:b6:2d:55:8d:5e:d2:0a:08:88:cf:96:87:b2: d9:3e:b9:24:51:ad:5f:32:8b:de:a9:6a:e3:65:a2: 0c:62:35:de:d7:20:a2:98:27:e5:18:f5:4d:2d:7c: e7:d6:fd:bd:07:d9:a7:14:46:96:ca:cf:8a:47:45: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:F5:A6:95:00:9C:54:46:BE:69:9F:E8:0E:5F:C6:C1:DD:23:D6 X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:85:69:ed:5f:47:79:2b:d0:5d:11:f5:39:7c:23:61:27:c7: 11:3e:f4:19:2b:cf:d5:f9:30:0f:28:90:d8:a1:ce:52:55:d1: a7:54:e9:eb:98:bc:80:04:56:5e:2b:a3:93:65:9b:23:b7:cb: fc:f0:6b:b6:14:49:85:60:da:8c:b2:dc:3d:3c:ce:64:ff:3a: 34:c8:6e:1b:4d:41:be:46:1c:3e:08:7e:13:e4:ae:04:dd:cb: 20:d5:9a:73:4f:82:94:34:6f:3e:1c:92:ac:b3:00:c2:9e:69: 78:00:63:7b:83:cb:ce:3a:e5:43:c8:83:e9:37:a6:66:6e:a4: b6:5b:8a:7f:26:9c:9c:c0:cf:f2:e4:38:8d:83:e3:cc:14:b7: 35:ad:02:be:4a:9e:6c:d3:e8:d2:11:aa:9f:6c:b9:b4:52:fd: a8:a5:22:4c:fd:7b:7f:0c:03:e9:69:49:e6:e6:7c:7d:0b:98: 6f:2d:3a:f3:f7:84:44:76:fe:fe:49:36:4b:4a:01:88:b3:7d: 26:18:e9:11:1c:53:27:b3:4e:0a:83:06:24:10:dc:53:57:e4: 30:c7:a8:ca:4f:9c:c4:d3:50:69:a7:09:02:fb:9c:f0:88:a2: b4:dd:c2:d4:e8:27:02:da:eb:2a:47:31:b5:5d:d9:bf:1c:6a: ba:8e:45:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUwODA5MDYyNDIxWhcNMjUwODE2MDYyNDIxWjAYMRYwFAYD VQQDEw02ODk2ZTk5NS1kYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OM0IBee4wJeIZ605QlAaeW0gYLoXNmdxxDWYEkvlI6XwIGBajg2MEtVjyKY ax2HRWOj0j4SsNvzrup8wy3mnMzJ1cMEZtraoB6SNisKd6y33uVP16BmHo/WtpR+ p8uK+jCnGQ5eecVTv43/5CBM+ctrbkFaD3+g2DCd8vEsWB0+CyBfriL4sn5p5gbh ObAg0qp957dT0QyZ8ZdtoHvFrf1geGC5wyo8d3a+o70Grz8Dsq7NW1KGeppXIewR Ugmh9TSBGbYtVY1e0goIiM+Wh7LZPrkkUa1fMoveqWrjZaIMYjXe1yCimCflGPVN LXzn1v29B9mnFEaWys+KR0XVbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDne9aaV AJxURr5pn+gOX8bB3SPWMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/hWntX0d5K9BdEfU5fCNhJ8cRPvQZK8/V+TAPKJDYoc5SVdGnVOnr mLyABFZeK6OTZZsjt8v88Gu2FEmFYNqMstw9PM5k/zo0yG4bTUG+Rhw+CH4T5K4E 3csg1ZpzT4KUNG8+HJKsswDCnml4AGN7g8vOOuVDyIPpN6ZmbqS2W4p/JpycwM/y 5DiNg+PMFLc1rQK+Sp5s0+jSEaqfbLm0Uv2opSJM/Xt/DAPpaUnm5nx9C5hvLTrz 94REdv7+STZLSgGIs30mGOkRHFMns04KgwYkENxTV+Qwx6jKT5zE01BppwkC+5zw iKK03cLU6CcC2usqRzG1Xdm/HGq6jkX9 -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:26 2025 by rpki-client