$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: VlNQo8OfyVnq34WDhiGvhnd9Tg1V9GtmJK9AdBaEbQg= Subject key identifier: 84:FF:17:82:5E:E4:90:1F:45:85:57:F4:42:E8:D8:EE:32:62:6B:09 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 01BA Signing time: Tue 05 Aug 2025 03:36:13 +0000 Manifest this update: Tue 05 Aug 2025 03:36:13 +0000 Manifest next update: Tue 12 Aug 2025 03:36:12 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: hK0u8Ik6Z3xyqRDYMJGcP7W/59kADoC7QKEcJyGB96A=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Aug 5 03:36:13 2025 GMT Not After : Aug 12 03:36:12 2025 GMT Subject: CN=68917c2d-3b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:47:87:d6:6a:69:82:80:ad:17:e3:67:79: 2c:c0:56:38:08:97:a4:47:f3:92:d8:15:13:f3:0a: 5e:0a:a2:a3:3e:89:f7:92:6e:8b:be:3a:60:e8:60: 62:33:27:bd:65:d4:1c:3a:d7:62:7a:22:20:3e:d2: 4d:18:84:9c:52:25:b8:28:d9:f2:b1:ba:b8:1d:27: 6f:c9:ea:0f:dc:46:b0:bf:2b:35:e2:06:9c:1c:71: 13:9c:9e:8a:0c:6f:d9:65:fd:99:e5:1c:b9:92:8d: fc:7f:48:ee:02:11:3d:5c:f7:15:ee:b6:23:05:9f: 06:2b:4d:ee:7e:da:45:6d:76:af:33:6a:e4:d8:6d: ff:7b:2b:10:48:67:79:81:b6:62:b3:43:ad:b2:31: b1:b0:21:3d:08:6b:d9:1c:0d:a9:a4:2b:6f:75:fb: 69:a6:f5:84:ad:e2:d5:e9:ba:81:2d:99:26:40:16: 1d:a1:9d:db:b7:8d:d0:ff:86:18:9d:1a:8a:17:6d: 68:fd:9e:4c:2e:8e:2e:de:98:c9:ca:fc:fb:fe:df: 51:83:6e:1c:63:8c:d7:51:ca:41:af:9a:71:e2:b4: d0:ed:a4:b8:d3:b3:17:a5:2a:72:fa:8a:c0:58:b2: f2:a0:42:14:15:1e:5e:53:ca:3c:aa:d4:2b:15:29: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FF:17:82:5E:E4:90:1F:45:85:57:F4:42:E8:D8:EE:32:62:6B:09 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:3d:88:db:6e:80:82:03:8d:4b:1f:70:af:e4:42:90:76:fd: 75:1c:7d:49:fb:d2:bc:bf:ad:f1:64:28:47:73:db:ec:72:dc: e3:32:e7:47:17:59:80:d7:df:a4:4b:2e:6e:03:ef:16:e9:ed: b0:ef:4a:03:65:e3:31:15:84:5b:c9:9f:85:51:51:10:09:40: 0c:23:2a:ac:2c:a9:3b:f4:83:3f:69:af:fc:a5:06:5d:6c:12: 79:24:72:e0:e1:c9:40:f2:35:95:62:21:cf:4a:4a:bb:94:ac: 22:84:de:86:6d:40:de:3f:b3:d4:f5:b6:67:1d:c7:77:01:59: ad:81:b0:d9:ad:fa:8b:4a:38:98:7b:c2:8c:95:e1:33:0d:01: 96:c4:df:95:01:fe:0c:b2:f8:67:f5:51:7c:39:5b:78:70:b9: ec:74:94:bc:13:73:36:66:0f:a2:8d:85:1b:d4:e4:f6:20:ce: 4c:12:8b:5f:73:6e:67:1c:98:14:77:95:c7:11:a6:76:cc:72: 0d:87:2b:0a:62:b5:64:8d:96:2a:87:72:5c:0b:91:51:44:46: 40:b7:e8:7a:ad:b9:71:33:d0:c5:4a:df:2e:e1:5e:33:76:7d: 31:51:80:f1:49:3e:6e:f5:7b:24:91:0b:6f:64:02:29:e1:bb: b4:2d:0f:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUwODA1MDMzNjEzWhcNMjUwODEyMDMzNjEyWjAYMRYwFAYD VQQDEw02ODkxN2MyZC0zYjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutZHh9ZqaYKArRfjZ3kswFY4CJekR/OS2BUT8wpeCqKjPon3km6Lvjpg6GBi Mye9ZdQcOtdieiIgPtJNGIScUiW4KNnysbq4HSdvyeoP3Eawvys14gacHHETnJ6K DG/ZZf2Z5Ry5ko38f0juAhE9XPcV7rYjBZ8GK03uftpFbXavM2rk2G3/eysQSGd5 gbZis0OtsjGxsCE9CGvZHA2ppCtvdftppvWEreLV6bqBLZkmQBYdoZ3bt43Q/4YY nRqKF21o/Z5MLo4u3pjJyvz7/t9Rg24cY4zXUcpBr5px4rTQ7aS407MXpSpy+orA WLLyoEIUFR5eU8o8qtQrFSnM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT/F4Je 5JAfRYVX9ELo2O4yYmsJMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5PYjbboCCA41LH3Cv5EKQdv11HH1J+9K8v63xZChHc9vsctzjMudH F1mA19+kSy5uA+8W6e2w70oDZeMxFYRbyZ+FUVEQCUAMIyqsLKk79IM/aa/8pQZd bBJ5JHLg4clA8jWVYiHPSkq7lKwihN6GbUDeP7PU9bZnHcd3AVmtgbDZrfqLSjiY e8KMleEzDQGWxN+VAf4Msvhn9VF8OVt4cLnsdJS8E3M2Zg+ijYUb1OT2IM5MEotf c25nHJgUd5XHEaZ2zHINhysKYrVkjZYqh3JcC5FRREZAt+h6rblxM9DFSt8u4V4z dn0xUYDxST5u9XskkQtvZAIp4bu0LQ+J -----END CERTIFICATE-----Generated at Wed Aug 6 16:25:07 2025 by rpki-client