$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json) Hash identifier: WDRRP3KmuT2C1BRY54Hy9PQe2JnWNtIRjKRkj7B9iAU= Subject key identifier: 5F:57:BC:FD:D0:BF:91:B1:43:E0:8A:84:D7:15:CD:F5:EA:0B:E1:AB Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft Manifest number: 079D Signing time: Sun 10 Aug 2025 22:40:32 +0000 Manifest this update: Sun 10 Aug 2025 22:40:32 +0000 Manifest next update: Sun 17 Aug 2025 22:40:32 +0000 Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: ME5EswSDQAUQvcLJlzfoP7f+0+WeHychkdgBbZ8bUGY=) 2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Validity Not Before: Aug 10 22:40:32 2025 GMT Not After : Aug 17 22:40:32 2025 GMT Subject: CN=68991fe0-9fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:74:cb:04:de:ff:11:a6:40:3a:12:1b:1b: 52:f4:9f:3a:10:77:fa:29:a7:57:67:8f:6e:6b:bc: 54:32:ff:5e:26:4c:9d:ec:1f:31:8f:19:fd:b1:a9: 97:5e:7b:91:41:df:b1:78:b5:01:6c:0a:91:18:b6: 04:8d:d9:12:ff:ee:9f:01:c1:b1:42:c1:a0:e6:5b: a8:28:a4:6d:36:f5:c2:c3:ab:cf:7c:ca:bc:ff:ea: 4d:92:94:ea:ae:45:c1:14:98:9b:59:65:b4:e3:7d: e5:df:66:cb:fd:ee:f8:90:57:41:4a:f5:f0:b3:20: 99:76:98:8a:02:9b:80:0c:63:a6:49:72:9e:85:33: 31:b8:29:93:26:9f:35:d7:07:51:04:ab:e9:65:9a: 37:41:d5:f0:ba:47:a2:dd:6c:ac:59:ce:40:9a:e3: 15:9a:33:e4:47:86:41:38:f2:7e:f8:d5:5f:df:65: 93:f6:35:5d:6e:2e:62:e1:5b:73:11:5a:d4:0f:2b: f5:76:01:7a:04:98:39:0a:c0:41:f9:61:a2:2f:80: 64:13:a4:7f:bd:fc:a4:77:d3:34:ba:81:19:af:3c: be:3a:32:85:47:f5:b1:a9:7c:ea:bc:da:0e:16:73: 1a:73:8b:0b:72:4e:f9:28:b7:8d:b6:11:8b:76:14: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:57:BC:FD:D0:BF:91:B1:43:E0:8A:84:D7:15:CD:F5:EA:0B:E1:AB X509v3 Authority Key Identifier: keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:61:c6:32:01:7f:4c:d4:4e:fd:03:98:b1:0d:30:da:95:cc: 74:f5:bb:80:21:23:70:62:6f:ae:38:1e:b3:17:d2:40:66:00: d4:5f:89:0a:bb:ce:3c:5c:0e:c2:3f:1e:52:1d:91:f3:66:58: 21:67:38:b7:0a:b3:01:cf:11:88:c3:19:53:62:5a:4b:0b:03: c4:2e:05:6d:e4:46:49:fb:52:33:2e:8f:d9:86:55:22:1b:67: 56:c9:72:cd:05:d0:dd:48:17:6d:73:1d:e0:15:a6:95:6a:7c: 27:74:64:74:6f:99:6c:e3:95:61:4d:83:d8:e5:b3:ed:9b:ce: a4:6e:4b:4e:a0:dc:52:d9:a9:df:dc:ba:e2:5b:e8:59:3d:3e: f9:4e:03:60:5b:02:da:a4:e6:0d:c0:41:af:d8:52:21:6f:5f: d5:2d:78:99:38:c0:4e:04:f2:40:0b:93:91:76:85:1e:d3:83: 4a:23:72:67:4f:89:7e:77:18:b6:61:25:0b:b1:ce:3a:85:e5: 54:f8:54:81:a9:cd:74:cc:62:64:14:ed:94:50:f8:49:32:a7: 61:31:7e:06:56:26:d3:5c:4f:82:81:5f:20:6a:2c:92:bc:dd: 36:5b:ef:d6:0d:39:ec:5b:8c:2e:83:b3:8f:09:1a:2b:e4:6c: 63:f9:58:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5NjMxMTAvBgNVBAUTKDFENDkyRkEzRjNCMjk1ODA0OTVBNjg4MEQ0MDRFRTBD MzcwQUQ5MjUwHhcNMjUwODEwMjI0MDMyWhcNMjUwODE3MjI0MDMyWjAYMRYwFAYD VQQDEw02ODk5MWZlMC05ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooZ0ywTe/xGmQDoSGxtS9J86EHf6KadXZ49ua7xUMv9eJkyd7B8xjxn9samX XnuRQd+xeLUBbAqRGLYEjdkS/+6fAcGxQsGg5luoKKRtNvXCw6vPfMq8/+pNkpTq rkXBFJibWWW0433l32bL/e74kFdBSvXwsyCZdpiKApuADGOmSXKehTMxuCmTJp81 1wdRBKvpZZo3QdXwukei3WysWc5AmuMVmjPkR4ZBOPJ++NVf32WT9jVdbi5i4Vtz EVrUDyv1dgF6BJg5CsBB+WGiL4BkE6R/vfykd9M0uoEZrzy+OjKFR/WxqXzqvNoO FnMac4sLck75KLeNthGLdhQrkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9XvP3Q v5GxQ+CKhNcVzfXqC+GrMB8GA1UdIwQYMBaAFB1JL6PzspWASVpogNQE7gw3Ctkl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3 RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZQkpXbWlBMUFUdUREY0sy U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVa3ZvX095bFlCSldtaUExQVR1RERjSzJTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZ QkpXbWlBMUFUdUREY0syU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARYcYyAX9M1E79A5ixDTDalcx09buAISNwYm+uOB6zF9JAZgDUX4kK u848XA7CPx5SHZHzZlghZzi3CrMBzxGIwxlTYlpLCwPELgVt5EZJ+1IzLo/ZhlUi G2dWyXLNBdDdSBdtcx3gFaaVanwndGR0b5ls45VhTYPY5bPtm86kbktOoNxS2anf 3LriW+hZPT75TgNgWwLapOYNwEGv2FIhb1/VLXiZOMBOBPJAC5ORdoUe04NKI3Jn T4l+dxi2YSULsc46heVU+FSBqc10zGJkFO2UUPhJMqdhMX4GVibTXE+CgV8gaiyS vN02W+/WDTnsW4wug7OPCRor5Gxj+Vik -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:54 2025 by rpki-client