$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: lRCK4LxTm6dpqgW1tFDVqvgXRTKhsvwn42F/d4KQvrs= Subject key identifier: B3:92:31:3B:87:68:EB:78:77:86:2A:EC:8F:24:F2:3F:22:0D:5C:2B Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: DA Signing time: Sat 09 Aug 2025 06:16:26 +0000 Manifest this update: Sat 09 Aug 2025 06:16:25 +0000 Manifest next update: Sat 16 Aug 2025 06:16:25 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: 5c2ntEPMkiBJWR7QKt5KnxjfsMDxgbjoASfy+bqfILI=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Aug 9 06:16:25 2025 GMT Not After : Aug 16 06:16:25 2025 GMT Subject: CN=6896e7ba-f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:61:d1:5a:a0:40:8d:c8:e2:3f:34:b8:b8: e1:e6:47:d4:69:1a:81:d4:22:29:87:eb:f0:29:cc: c2:f1:43:32:55:66:54:b6:a1:c9:de:bc:cc:0d:fa: e6:fc:5a:c8:ac:ca:18:e7:de:bd:30:59:d1:ba:96: 39:b0:cd:30:13:91:bf:0b:27:78:e8:ec:8f:57:3a: c5:e2:e8:59:06:f1:7b:f4:51:0a:79:2c:49:67:06: 08:49:12:63:8a:be:b3:16:96:0e:d2:8d:4e:b0:70: c4:08:03:18:46:e4:fd:4b:12:88:65:99:89:b2:dc: 02:f5:67:c7:f0:86:bd:80:58:0c:cc:f9:44:21:f7: 5a:dc:b4:76:4d:3e:50:8f:1e:0f:2d:ac:35:ba:83: 3e:6c:94:18:53:de:d4:fd:cb:2a:b4:8e:63:15:aa: 45:2f:18:b3:38:fa:27:2d:47:21:48:3e:e7:93:18: 97:8e:75:3a:b5:a8:9a:fe:f2:3e:82:43:48:90:14: 5f:38:26:c4:2d:33:e3:0d:6d:4c:c3:19:47:5f:fe: ce:7a:b6:b2:e5:41:09:87:d8:c4:e1:c0:67:6f:21: 29:02:df:18:ca:f1:5f:16:b3:f9:45:9c:08:aa:01: 0b:58:f3:08:37:f7:ac:e1:01:90:17:e3:47:1f:36: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:92:31:3B:87:68:EB:78:77:86:2A:EC:8F:24:F2:3F:22:0D:5C:2B X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:11:be:d8:6b:b7:fb:2f:18:2d:76:1e:e4:14:84:88:cb:8b: 5b:21:25:29:0e:c6:68:74:3e:ef:b0:bf:85:71:01:01:e9:b6: e7:97:dd:91:c5:e6:6b:9c:45:3b:64:0e:eb:21:3b:d4:b5:e6: 11:c7:79:e0:b3:24:b4:e4:3a:a6:a5:68:39:77:e7:73:2a:c1: 71:fb:76:e3:11:b3:78:fb:9b:9c:c1:f8:a4:f1:6f:3a:c2:a2: ba:5c:62:a2:16:92:8d:ae:2d:7c:78:96:60:0a:7e:ae:78:6d: 5e:12:46:e9:63:25:70:80:f7:03:ac:87:f9:5f:bc:78:50:c8: aa:7a:35:64:99:e3:16:9b:44:ed:31:30:2c:1c:aa:7e:cd:62: aa:2e:b6:a5:c2:2f:53:6a:9c:07:d6:ca:e7:1d:18:ec:76:32: 40:44:ec:48:bc:c1:26:a2:05:81:9a:b6:6b:dc:9d:78:26:e0: 7c:5b:7a:8a:8d:47:3e:b5:b3:12:d9:b0:d8:9c:b1:eb:64:2e: 1a:b5:84:22:df:dc:f5:b0:33:f8:70:2e:15:7f:b4:31:6d:14: 26:21:e8:9e:50:91:b5:af:4a:76:a8:08:d6:50:53:d8:49:ae: 1d:89:9a:48:8d:d9:25:17:ae:4f:2b:b9:b4:de:0c:77:5f:8c: 09:1a:54:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwODA5MDYxNjI1WhcNMjUwODE2MDYxNjI1WjAYMRYwFAYD VQQDEw02ODk2ZTdiYS1mMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9Fh0VqgQI3I4j80uLjh5kfUaRqB1CIph+vwKczC8UMyVWZUtqHJ3rzMDfrm /FrIrMoY5969MFnRupY5sM0wE5G/Cyd46OyPVzrF4uhZBvF79FEKeSxJZwYISRJj ir6zFpYO0o1OsHDECAMYRuT9SxKIZZmJstwC9WfH8Ia9gFgMzPlEIfda3LR2TT5Q jx4PLaw1uoM+bJQYU97U/csqtI5jFapFLxizOPonLUchSD7nkxiXjnU6taia/vI+ gkNIkBRfOCbELTPjDW1MwxlHX/7Oeray5UEJh9jE4cBnbyEpAt8YyvFfFrP5RZwI qgELWPMIN/es4QGQF+NHHzZkFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOSMTuH aOt4d4Yq7I8k8j8iDVwrMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMEb7Ya7f7Lxgtdh7kFISIy4tbISUpDsZodD7vsL+FcQEB6bbnl92R xeZrnEU7ZA7rITvUteYRx3ngsyS05DqmpWg5d+dzKsFx+3bjEbN4+5ucwfik8W86 wqK6XGKiFpKNri18eJZgCn6ueG1eEkbpYyVwgPcDrIf5X7x4UMiqejVkmeMWm0Tt MTAsHKp+zWKqLralwi9TapwH1srnHRjsdjJAROxIvMEmogWBmrZr3J14JuB8W3qK jUc+tbMS2bDYnLHrZC4atYQi39z1sDP4cC4Vf7QxbRQmIeieUJG1r0p2qAjWUFPY Sa4diZpIjdklF65PK7m03gx3X4wJGlSZ -----END CERTIFICATE-----Generated at Sun Aug 10 05:44:44 2025 by rpki-client