$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft File: HdHLvF31vfq7s62vErACVrfxjRI.mft (raw, json) Hash identifier: YQ3vx4eKjqKG3Y2ZhCmnAw+33J44uGCQrgE5cy61d3k= Subject key identifier: 3E:C5:E9:E1:A3:0A:D8:B3:0C:35:ED:A6:B7:60:C4:22:A8:E2:85:32 Authority key identifier: 1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 Certificate issuer: /CN=A915ADC4/serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft Manifest number: 0150 Signing time: Sat 09 Aug 2025 04:58:00 +0000 Manifest this update: Sat 09 Aug 2025 04:58:00 +0000 Manifest next update: Sat 16 Aug 2025 04:58:00 +0000 Files and hashes: 1: HdHLvF31vfq7s62vErACVrfxjRI.crl (hash: /qZsDHJazMVNi44GBKIKCeMLABICiGN0Zmw59awIkHI=) 2: AFC9F5324A0F11EF9E51BD7CC4F9AE02.roa (hash: YC1hPH8mghnTJjDQYho998bjw91B3zrCEFjA4fVmKFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=1DD1CBBC5DF5BDFABBB3ADAF12B00256B7F18D12 Validity Not Before: Aug 9 04:58:00 2025 GMT Not After : Aug 16 04:58:00 2025 GMT Subject: CN=6896d558-e925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:b9:f2:a0:a6:03:c9:fb:03:1e:5c:40:da: 42:4e:87:cb:34:04:e9:3d:a3:40:68:28:36:bb:f2: 4a:1b:1f:2b:4c:1b:2f:35:66:e8:fe:ae:66:9e:71: 01:c3:b2:2d:a9:e8:50:f1:34:4c:4c:31:56:fe:be: dc:70:51:6f:4c:0d:d0:68:75:54:04:25:59:5c:ed: 8c:57:a4:bb:bb:3f:b3:f4:33:ee:fd:85:9a:fc:ea: 8c:00:86:ba:a2:26:fa:87:ef:d6:b5:69:f2:e7:16: 41:34:2e:7b:fd:ec:a6:77:4f:9c:18:3c:e9:7a:9c: a0:89:df:de:ab:e4:6c:f1:68:e0:fd:76:70:f1:b3: cb:2a:57:b4:ae:66:94:1d:a1:f3:ac:06:1a:1c:ca: 8f:c7:ad:12:fa:60:38:94:17:5c:4e:eb:8c:ae:0c: 65:14:49:fd:f1:e0:dd:f8:1b:b6:5b:62:b0:c8:d7: 02:76:35:cc:53:b3:0c:42:78:15:0f:e7:a2:ed:aa: 3a:01:ba:91:d3:47:e3:f5:06:09:17:16:4b:0a:55: 84:47:7b:9b:d0:a8:4b:ae:0f:dc:24:e3:55:89:42: e5:3c:22:ca:39:a6:fb:a1:a9:50:ec:ac:bb:39:78: 32:32:da:37:42:89:37:2f:6f:d7:86:a3:03:b3:11: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C5:E9:E1:A3:0A:D8:B3:0C:35:ED:A6:B7:60:C4:22:A8:E2:85:32 X509v3 Authority Key Identifier: keyid:1D:D1:CB:BC:5D:F5:BD:FA:BB:B3:AD:AF:12:B0:02:56:B7:F1:8D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdHLvF31vfq7s62vErACVrfxjRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/61415F58A9F711EE8EB48D22C4F9AE02/HdHLvF31vfq7s62vErACVrfxjRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:3e:b5:d5:11:8f:74:c2:f4:28:5e:27:37:c5:bb:a1:30:e3: 4b:05:53:15:22:5b:62:9b:da:43:8c:99:90:df:fe:ee:3b:0d: 8b:f3:55:57:3a:26:0c:48:2e:7e:0b:f1:5f:a3:52:95:80:33: c4:1c:23:fc:f2:29:63:13:71:f0:55:2d:92:3a:f2:0f:8b:ce: ed:98:34:1b:7c:19:ad:c5:70:96:9b:05:0e:f5:b3:37:19:e0: 58:f1:ad:0c:b4:e7:5b:1c:ed:f7:28:f6:4a:f0:64:49:f2:9f: 87:a0:86:50:9e:e9:b3:f1:0c:28:12:83:ea:f5:c6:c9:ce:d6: 5c:66:ea:8c:9d:21:72:3c:d7:80:8d:2d:b9:47:99:a7:f3:ce: 49:6e:39:36:a2:9f:ce:9d:1c:bb:6b:f7:8f:ae:5f:d6:96:ef: ed:20:48:dc:f6:2d:3c:2d:06:87:e1:f6:7f:e9:5f:31:95:23: be:6d:d1:7f:57:57:b0:c8:16:8a:e7:9b:02:c3:62:62:78:e8: fb:e1:ba:97:55:96:b9:3f:42:13:5b:82:4c:23:c5:80:aa:e3: 05:8b:1f:30:7a:4a:01:f5:f8:a8:f3:0c:59:4a:02:fa:e4:55: 45:ed:78:a5:a3:48:e3:85:ee:28:e7:1c:cc:49:3c:4c:b9:d5: d5:09:8f:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKDFERDFDQkJDNURGNUJERkFCQkIzQURBRjEyQjAwMjU2 QjdGMThEMTIwHhcNMjUwODA5MDQ1ODAwWhcNMjUwODE2MDQ1ODAwWjAYMRYwFAYD VQQDEw02ODk2ZDU1OC1lOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnx+58qCmA8n7Ax5cQNpCTofLNATpPaNAaCg2u/JKGx8rTBsvNWbo/q5mnnEB w7ItqehQ8TRMTDFW/r7ccFFvTA3QaHVUBCVZXO2MV6S7uz+z9DPu/YWa/OqMAIa6 oib6h+/WtWny5xZBNC57/eymd0+cGDzpepygid/eq+Rs8Wjg/XZw8bPLKle0rmaU HaHzrAYaHMqPx60S+mA4lBdcTuuMrgxlFEn98eDd+Bu2W2KwyNcCdjXMU7MMQngV D+ei7ao6AbqR00fj9QYJFxZLClWER3ub0KhLrg/cJONViULlPCLKOab7oalQ7Ky7 OXgyMto3Qok3L2/XhqMDsxF3cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7F6eGj CtizDDXtprdgxCKo4oUyMB8GA1UdIwQYMBaAFB3Ry7xd9b36u7OtrxKwAla38Y0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC82MTQxNUY1OEE5 RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZmcTdzNjJ2RXJBQ1ZyZnhq UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hkSEx2RjMxdmZxN3M2MnZFckFDVnJmeGpSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC82MTQxNUY1OEE5RjcxMUVFOEVCNDhEMjJDNEY5QUUwMi9IZEhMdkYzMXZm cTdzNjJ2RXJBQ1ZyZnhqUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYPrXVEY90wvQoXic3xbuhMONLBVMVIltim9pDjJmQ3/7uOw2L81VX OiYMSC5+C/Ffo1KVgDPEHCP88iljE3HwVS2SOvIPi87tmDQbfBmtxXCWmwUO9bM3 GeBY8a0MtOdbHO33KPZK8GRJ8p+HoIZQnumz8QwoEoPq9cbJztZcZuqMnSFyPNeA jS25R5mn885Jbjk2op/OnRy7a/ePrl/Wlu/tIEjc9i08LQaH4fZ/6V8xlSO+bdF/ V1ewyBaK55sCw2JieOj74bqXVZa5P0ITW4JMI8WAquMFix8wekoB9fio8wxZSgL6 5FVF7Xilo0jjhe4o5xzMSTxMudXVCY+C -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:15 2025 by rpki-client