$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: Xj3ipnmojNWFlAABu1cqJda75rm2PiICnnBxtkqteXg= Subject key identifier: 62:A7:0D:0C:26:81:44:0D:DB:59:CB:54:59:57:EA:58:F6:8A:A8:8A Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0BAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0BA6 Signing time: Sun 10 Aug 2025 18:58:01 +0000 Manifest this update: Sun 10 Aug 2025 18:58:00 +0000 Manifest next update: Sun 17 Aug 2025 18:58:00 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: 9UHayixrd/Z0N0nraan9IVgzYn4fesNkeuvL7gIe2so=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2988 (0xbac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Aug 10 18:58:00 2025 GMT Not After : Aug 17 18:58:00 2025 GMT Subject: CN=6898ebb8-21f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:97:bc:dd:6d:25:ef:fa:9b:ce:d5:fd:ff: ea:51:81:78:a5:ff:e5:d0:ec:6c:c8:8a:25:b5:d1: c8:59:20:8b:be:1d:e7:09:35:fc:58:af:5b:ce:87: b9:12:a2:9d:98:0a:60:01:d6:4a:f1:d2:53:6c:91: fa:ec:5a:fa:8c:6d:ac:ab:7b:f6:22:33:8e:68:80: 06:1d:97:c0:47:bf:96:af:14:3b:c9:76:b1:b6:af: 7f:39:23:2e:09:b8:63:3e:4c:46:04:9f:21:d1:be: 0c:be:e6:e2:fd:b6:ad:71:46:a2:94:f3:67:60:6a: a7:e6:47:02:5d:5e:31:b1:09:a8:7a:11:f6:2a:22: cc:8d:94:4d:56:f4:99:84:be:bc:a4:7b:40:27:f3: 1a:12:8c:88:80:a7:44:7b:97:3b:4c:03:9a:66:fb: 84:6b:50:9e:5c:72:de:5a:dc:65:92:2c:e9:eb:8c: f5:cd:55:5c:86:a3:bf:fa:3f:0c:b5:b5:a7:f3:13: d2:9b:57:4c:bf:51:92:a3:ae:8a:17:74:c6:ac:cf: 41:ed:e1:da:a2:cd:ad:24:44:d8:1b:0a:aa:fd:4c: 02:ec:a3:8e:5e:9b:b8:a0:74:14:03:8c:6e:95:b0: 00:4e:05:f1:8d:2b:32:e5:7a:1c:d8:85:e1:ce:8d: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A7:0D:0C:26:81:44:0D:DB:59:CB:54:59:57:EA:58:F6:8A:A8:8A X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7a:31:a6:d4:b2:7e:99:c1:23:39:08:de:db:f8:2d:bf:64: 90:30:4c:91:b3:d3:26:06:bb:6e:49:df:f1:af:26:1d:2c:f7: e3:ac:a0:a9:1d:d7:e1:9e:a7:2e:f3:f4:58:36:9c:49:d2:e9: d3:21:7d:74:50:4d:74:2e:e3:c5:c1:02:11:57:e9:3b:79:66: 89:50:2b:54:cd:01:62:48:0a:d5:0c:08:db:7d:5c:7d:93:fd: be:f9:2c:82:40:68:58:22:a8:eb:b9:43:a9:df:51:64:b2:d4: f1:b1:95:b3:b8:9c:b3:1a:ae:d6:61:a0:4f:18:c1:eb:57:47: 6a:dc:ca:e6:b3:af:cb:fd:cc:57:24:7b:c2:54:d3:27:97:4c: 56:2b:60:fc:1f:ad:57:cf:13:b4:b1:25:32:52:85:34:8c:f2: 30:b7:77:f8:57:62:4a:1a:79:5f:2c:ac:d1:eb:f1:50:73:b5: d4:f9:59:a5:db:ee:b7:a8:69:33:11:67:39:8e:b7:f2:c6:a3: e1:c6:d2:3f:07:d2:08:74:e8:5f:94:74:18:70:37:99:84:fa: e2:4b:d7:f8:17:64:15:5b:21:9b:67:68:d9:45:6c:19:96:ab: f5:08:11:c7:eb:bc:d0:f7:1b:14:6b:7a:ce:40:f2:36:2f:8e: 8a:b5:c8:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUwODEwMTg1ODAwWhcNMjUwODE3MTg1ODAwWjAYMRYwFAYD VQQDEw02ODk4ZWJiOC0yMWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspGXvN1tJe/6m87V/f/qUYF4pf/l0OxsyIoltdHIWSCLvh3nCTX8WK9bzoe5 EqKdmApgAdZK8dJTbJH67Fr6jG2sq3v2IjOOaIAGHZfAR7+WrxQ7yXaxtq9/OSMu CbhjPkxGBJ8h0b4Mvubi/batcUailPNnYGqn5kcCXV4xsQmoehH2KiLMjZRNVvSZ hL68pHtAJ/MaEoyIgKdEe5c7TAOaZvuEa1CeXHLeWtxlkizp64z1zVVchqO/+j8M tbWn8xPSm1dMv1GSo66KF3TGrM9B7eHaos2tJETYGwqq/UwC7KOOXpu4oHQUA4xu lbAATgXxjSsy5Xoc2IXhzo0r8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKnDQwm gUQN21nLVFlX6lj2iqiKMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEejGm1LJ+mcEjOQje2/gtv2SQMEyRs9MmBrtuSd/xryYdLPfjrKCp Hdfhnqcu8/RYNpxJ0unTIX10UE10LuPFwQIRV+k7eWaJUCtUzQFiSArVDAjbfVx9 k/2++SyCQGhYIqjruUOp31FkstTxsZWzuJyzGq7WYaBPGMHrV0dq3Mrms6/L/cxX JHvCVNMnl0xWK2D8H61XzxO0sSUyUoU0jPIwt3f4V2JKGnlfLKzR6/FQc7XU+Vml 2+63qGkzEWc5jrfyxqPhxtI/B9IIdOhflHQYcDeZhPriS9f4F2QVWyGbZ2jZRWwZ lqv1CBHH67zQ9xsUa3rOQPI2L46Ktchs -----END CERTIFICATE-----Generated at Mon Aug 11 12:53:59 2025 by rpki-client