$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: KKSSqDmjZv8tOTUZAJv5SOtnezfgG2xNE19J2VGDYPk= Subject key identifier: 2E:70:6E:08:E3:18:DE:2C:D2:C2:28:A1:19:63:71:80:D0:D8:42:64 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1DEB Signing time: Sun 10 Aug 2025 16:04:28 +0000 Manifest this update: Sun 10 Aug 2025 16:04:27 +0000 Manifest next update: Sun 17 Aug 2025 16:04:27 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: jo7o+ZFgbLH3d0aNDsap3hwXaxIx0Nxg5VCsC2HNhEQ=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7674 (0x1dfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Aug 10 16:04:27 2025 GMT Not After : Aug 17 16:04:27 2025 GMT Subject: CN=6898c30c-72f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:a0:ba:97:69:fc:2b:0f:0a:db:33:e3:98: 5b:a7:c3:b1:99:20:88:3b:33:54:d8:8a:59:31:da: f2:b8:91:76:ed:1f:4b:9a:9b:8d:e4:e2:c3:2f:e0: de:f6:f2:98:0b:1f:54:08:14:c1:12:99:ef:8f:e7: b6:16:54:33:0a:fd:08:4f:ad:9c:a3:0e:fc:17:b0: ff:98:21:83:1d:1d:6d:c3:b7:dc:1d:9c:48:97:23: 79:8c:8a:4a:12:8b:9b:d9:83:dd:75:ec:93:db:98: 98:93:02:3a:c2:c9:c2:df:c2:92:5c:a0:4e:7b:5f: 0b:ee:0b:93:3e:9b:be:62:38:ce:7b:0c:08:82:34: f9:15:91:5e:d4:cd:cb:fc:2d:4b:c6:d8:49:55:5a: 8d:a6:3d:8c:a6:86:87:b0:9f:ec:89:19:54:c0:58: 6a:cf:a6:db:62:5f:05:cc:46:19:3a:04:a2:85:fa: d3:b7:a9:9f:71:0b:ae:d5:4a:2b:40:49:9f:38:62: 96:c4:4f:fe:4f:a6:77:9c:e1:d5:d5:fd:08:83:7e: e3:df:bf:a1:67:24:23:0f:5a:e7:98:99:2e:8d:4a: 8c:66:58:4a:96:87:24:77:c0:87:e3:62:ad:ee:bf: d8:d4:00:07:87:9b:13:bf:9b:e2:18:4b:49:69:b1: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:6E:08:E3:18:DE:2C:D2:C2:28:A1:19:63:71:80:D0:D8:42:64 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:70:5e:9a:bc:5c:93:75:f2:53:03:b1:8a:fa:45:c3:09:ed: d7:de:a2:1a:0e:c2:de:c7:75:b5:1a:91:1b:61:c1:e5:ca:5c: b5:72:61:4a:78:ed:20:75:b5:f9:fe:f2:32:f2:3c:49:8f:d4: 0b:fc:d8:03:e7:cf:c7:36:b5:75:f1:67:ee:19:96:b8:8d:44: ab:1f:c3:dc:e5:43:56:c3:14:9f:68:d2:55:a6:77:cb:97:85: 09:44:68:1e:11:a5:13:aa:53:6f:b6:21:07:16:f4:ac:22:68: f6:57:68:a1:e9:63:98:36:94:ea:6a:ce:91:7e:71:cb:74:7d: ac:a0:58:d8:91:f6:eb:1c:c3:79:51:d4:ea:5c:84:96:ae:d2: eb:61:44:b1:ff:e5:a5:2a:13:eb:bd:b8:fe:5c:4b:67:fc:f7: bf:9f:48:55:e1:bc:8b:9b:4f:13:c2:d0:9e:22:ad:94:97:fc: 22:cd:ab:7a:2d:94:65:75:e9:51:bf:fe:b2:7a:7a:15:df:3a: 8e:57:97:7a:a2:c7:03:7a:d4:18:a4:93:d7:08:79:25:e6:b7: bb:c3:6a:73:8d:ab:2f:6e:6f:c7:91:17:be:f7:29:52:d7:df: 55:52:5b:5b:c3:9d:a6:20:41:4e:e6:00:82:c0:e3:ec:3f:b6: 53:7f:3b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwODEwMTYwNDI3WhcNMjUwODE3MTYwNDI3WjAYMRYwFAYD VQQDEw02ODk4YzMwYy03MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs6gupdp/CsPCtsz45hbp8OxmSCIOzNU2IpZMdryuJF27R9LmpuN5OLDL+De 9vKYCx9UCBTBEpnvj+e2FlQzCv0IT62cow78F7D/mCGDHR1tw7fcHZxIlyN5jIpK Eoub2YPddeyT25iYkwI6wsnC38KSXKBOe18L7guTPpu+YjjOewwIgjT5FZFe1M3L /C1LxthJVVqNpj2MpoaHsJ/siRlUwFhqz6bbYl8FzEYZOgSihfrTt6mfcQuu1Uor QEmfOGKWxE/+T6Z3nOHV1f0Ig37j37+hZyQjD1rnmJkujUqMZlhKlockd8CH42Kt 7r/Y1AAHh5sTv5viGEtJabGhJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5wbgjj GN4s0sIooRljcYDQ2EJkMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvcF6avFyTdfJTA7GK+kXDCe3X3qIaDsLex3W1GpEbYcHlyly1cmFK eO0gdbX5/vIy8jxJj9QL/NgD58/HNrV18WfuGZa4jUSrH8Pc5UNWwxSfaNJVpnfL l4UJRGgeEaUTqlNvtiEHFvSsImj2V2ih6WOYNpTqas6RfnHLdH2soFjYkfbrHMN5 UdTqXISWrtLrYUSx/+WlKhPrvbj+XEtn/Pe/n0hV4byLm08TwtCeIq2Ul/wizat6 LZRldelRv/6yenoV3zqOV5d6oscDetQYpJPXCHkl5re7w2pzjasvbm/HkRe+9ylS 199VUltbw52mIEFO5gCCwOPsP7ZTfztI -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:37 2025 by rpki-client