$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: PKjuCIq3dqMp9B0ZUZUlJUAN6qpYZF581h7BbRXIelQ= Subject key identifier: 9B:11:52:35:8A:D7:09:A1:1A:07:84:9F:E5:E5:D6:4A:21:CD:A0:62 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: 0F Signing time: Sat 09 Aug 2025 08:38:25 +0000 Manifest this update: Sat 09 Aug 2025 08:38:24 +0000 Manifest next update: Sat 16 Aug 2025 08:38:24 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: wg0kdoCoO6+3Ml9qEO+h/AKe4OrUGEZWhXyy+OGXrAA=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Aug 9 08:38:24 2025 GMT Not After : Aug 16 08:38:24 2025 GMT Subject: CN=68970900-9808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:61:d9:ff:1d:58:5f:6b:47:08:32:51:96: 1e:11:96:59:a5:09:96:26:da:fc:10:be:cd:1b:4c: fe:af:9b:72:ba:bf:93:4f:bd:8b:43:72:a3:e2:1e: 3c:b0:be:99:13:01:33:6c:ee:4f:ac:65:1d:5b:31: 9f:e1:8c:c3:7c:fa:47:19:8a:c6:6f:e0:ff:54:ea: 41:e0:b0:f1:e4:05:6a:58:35:c1:13:5d:73:11:e5: c3:69:61:26:5e:85:57:98:3d:df:aa:bf:39:e6:86: 15:ba:47:fe:1a:73:9d:63:58:c3:ce:19:7d:22:cf: 0d:6e:8a:6c:fe:2b:e1:fa:f7:13:a2:6e:d0:62:5c: 44:e2:ff:88:d2:17:ae:ce:79:25:7c:ea:bf:91:8d: 2e:54:e3:b6:0e:dc:c9:2b:1d:bb:ee:a3:19:e3:b9: 32:46:72:a3:69:4a:cc:35:55:dc:82:9b:bc:dc:af: 59:ee:39:b5:12:ef:67:2f:79:bb:c3:ad:22:b0:fa: a5:ef:54:cf:1c:1d:e3:5b:6b:e4:72:f0:83:15:f0: ae:78:9c:3a:78:be:ed:13:0e:8e:f4:8f:8a:b2:77: e5:65:10:62:83:e7:0f:1b:3a:23:9b:8e:64:67:35: 11:ca:0c:09:4f:16:76:82:88:29:9c:b7:70:05:70: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:52:35:8A:D7:09:A1:1A:07:84:9F:E5:E5:D6:4A:21:CD:A0:62 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:33:40:11:10:1e:a4:53:03:4f:48:83:1a:78:e2:b1:c5:9b: be:42:b5:c8:2a:1e:69:0f:cc:07:3d:c8:36:52:99:59:ba:66: 58:69:5f:d9:fe:b1:f7:f2:3a:f1:6a:20:1d:d9:f9:7c:38:15: 03:0b:29:e5:83:07:15:c8:c4:26:a0:c9:6d:6c:94:68:ac:30: 9d:91:90:8a:b0:f0:31:02:76:47:76:58:b5:ad:cf:5e:3c:08: 83:dc:6b:3d:c9:a9:18:67:71:48:cf:bc:8c:0f:49:b3:f4:18: a2:d6:b8:73:d0:9d:d1:fa:64:80:ae:e3:4a:e0:a4:a9:16:b7: 9e:dd:65:4f:89:73:43:ba:05:89:3c:35:10:b2:b7:c9:ec:fc: c9:fb:49:c7:15:c4:31:00:fc:5c:71:71:71:ba:97:83:43:0c: 51:fe:4b:9a:f8:ce:92:6b:d4:e7:46:14:77:0c:ec:e1:57:0c: 98:a7:e6:ef:02:97:e8:7d:4f:a1:11:71:25:fc:79:e6:1f:84: 02:ce:da:51:16:7b:c6:25:cb:0f:72:23:d7:d0:18:9e:f9:17: bf:b2:8e:1d:8e:09:64:2d:20:23:d4:61:01:b4:18:47:f5:b5: c4:76:34:14:77:50:44:d1:87:28:92:dc:a9:8b:6e:b1:6b:a1: e1:65:93:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNTA4MDkwODM4MjRaFw0yNTA4MTYwODM4MjRaMBgxFjAUBgNV BAMTDTY4OTcwOTAwLTk4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4bGHZ/x1YX2tHCDJRlh4RllmlCZYm2vwQvs0bTP6vm3K6v5NPvYtDcqPiHjyw vpkTATNs7k+sZR1bMZ/hjMN8+kcZisZv4P9U6kHgsPHkBWpYNcETXXMR5cNpYSZe hVeYPd+qvznmhhW6R/4ac51jWMPOGX0izw1uimz+K+H69xOibtBiXETi/4jSF67O eSV86r+RjS5U47YO3MkrHbvuoxnjuTJGcqNpSsw1VdyCm7zcr1nuObUS72cvebvD rSKw+qXvVM8cHeNba+Ry8IMV8K54nDp4vu0TDo70j4qyd+VlEGKD5w8bOiObjmRn NRHKDAlPFnaCiCmct3AFcAKXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmxFSNYrX CaEaB4Sf5eXWSiHNoGIwHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RUE0LzI2NERDRjFDNjNBRjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNO LVJVRkZhckFKaXp0WFBQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANEzQBEQHqRTA09Igxp44rHFm75CtcgqHmkPzAc9yDZSmVm6ZlhpX9n+ sffyOvFqIB3Z+Xw4FQMLKeWDBxXIxCagyW1slGisMJ2RkIqw8DECdkd2WLWtz148 CIPcaz3JqRhncUjPvIwPSbP0GKLWuHPQndH6ZICu40rgpKkWt57dZU+Jc0O6BYk8 NRCyt8ns/Mn7SccVxDEA/FxxcXG6l4NDDFH+S5r4zpJr1OdGFHcM7OFXDJin5u8C l+h9T6ERcSX8eeYfhALO2lEWe8Ylyw9yI9fQGJ75F7+yjh2OCWQtICPUYQG0GEf1 tcR2NBR3UETRhyiS3KmLbrFroeFlkxY= -----END CERTIFICATE-----Generated at Sun Aug 10 18:47:24 2025 by rpki-client