$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json) Hash identifier: 9+quvmg3SWHO+6QyJOGR3RGYMU2nF+p736JAfTIpH1A= Subject key identifier: 8A:64:4D:AA:4F:9A:02:3D:22:1C:FC:A7:E7:CF:C9:16:2C:83:E5:44 Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft Manifest number: 40 Signing time: Mon 11 Aug 2025 07:46:29 +0000 Manifest this update: Mon 11 Aug 2025 07:46:29 +0000 Manifest next update: Mon 18 Aug 2025 07:46:29 +0000 Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: T3AwdO3x+6vaGD44sH3NmbrjH+L/v3RCe5ssupoxtJs=) 2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Validity Not Before: Aug 11 07:46:29 2025 GMT Not After : Aug 18 07:46:29 2025 GMT Subject: CN=68999fd5-b3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:87:91:83:90:64:33:de:b6:38:a9:5f:1e: c6:74:e5:ed:d8:a7:e8:92:aa:b6:de:59:20:25:19: a5:74:6f:bc:cd:1d:32:ce:df:11:6b:11:e3:0f:92: 4e:01:93:fd:5e:cc:1f:a7:dc:57:b8:2d:92:1a:8f: d5:00:d1:7f:93:7c:c3:a0:0f:fb:b4:0a:b3:48:70: d3:c8:f6:43:6c:d4:65:86:e5:b7:cd:a6:0f:61:98: 8e:85:20:91:fd:a2:e0:be:04:f7:a9:d0:72:33:40: 32:ed:f1:33:b9:5a:41:d5:4f:34:72:86:97:02:f3: 19:07:a8:45:37:57:e5:4f:74:61:91:80:8d:fe:cc: 72:5f:d8:e1:11:cc:34:13:ba:5e:d8:cd:06:8a:b1: 77:fe:39:64:02:cb:7d:d1:24:74:b5:33:5a:44:d5: f3:93:cf:9e:35:10:7c:73:24:2f:84:3a:81:ab:76: 54:c7:7e:77:76:6e:97:a4:a1:eb:98:49:8f:52:be: 6f:0b:0e:7d:fd:66:4c:2d:ad:0a:25:5e:9e:19:76: 57:19:b9:c4:03:10:ec:b1:55:82:a2:42:34:c1:9f: c8:72:dd:4b:96:45:5f:f1:34:43:d4:f6:d8:c5:5c: 48:ed:d4:0c:13:44:74:ef:6c:a4:b7:70:77:8f:a9: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:64:4D:AA:4F:9A:02:3D:22:1C:FC:A7:E7:CF:C9:16:2C:83:E5:44 X509v3 Authority Key Identifier: keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ea:fa:1f:36:a7:28:f9:49:00:ff:d8:4b:ae:ba:04:0b:b8: 1d:5f:f9:9a:1c:44:2a:a7:27:b9:1f:3d:db:5b:18:72:24:d5: 38:58:70:5a:e2:09:7a:f3:e9:10:1b:4c:cc:7b:f9:25:fe:30: 14:58:9e:d0:d0:72:8a:7a:7f:27:c8:a9:ef:dc:71:6e:8e:a8: 03:c8:58:00:9c:e6:ee:de:98:7f:65:2f:bd:24:59:d6:47:0f: 31:cc:c2:45:07:58:16:fa:6a:ed:c2:6a:a3:94:ee:6f:31:63: 67:2b:99:f5:68:08:03:0a:c0:bf:4c:2e:87:82:f2:e7:6f:26: 6d:05:84:14:00:90:48:b6:2d:19:49:c3:83:43:1a:45:d9:52: 24:35:d0:36:a8:87:1c:f0:6f:db:ad:d0:9d:35:4a:fb:c1:5d: 1e:17:29:0e:b9:f8:e6:a4:67:05:ac:3f:9a:98:3f:b7:43:83: fb:8a:20:47:10:26:3f:db:63:17:a3:a4:85:6d:ea:60:b2:80: fc:6b:7a:7b:2a:f2:8a:6e:e5:59:45:98:40:34:cc:12:3d:a4: 7f:63:4c:5a:d9:ed:7f:22:65:3f:02:d4:59:09:fa:d1:6f:fa: be:62:db:b0:cd:21:cf:21:14:e2:5a:fd:52:5a:c4:d9:62:3a: db:15:78:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw M0Q0MEI5MjAeFw0yNTA4MTEwNzQ2MjlaFw0yNTA4MTgwNzQ2MjlaMBgxFjAUBgNV BAMTDTY4OTk5ZmQ1LWIzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUhYeRg5BkM962OKlfHsZ05e3Yp+iSqrbeWSAlGaV0b7zNHTLO3xFrEeMPkk4B k/1ezB+n3Fe4LZIaj9UA0X+TfMOgD/u0CrNIcNPI9kNs1GWG5bfNpg9hmI6FIJH9 ouC+BPep0HIzQDLt8TO5WkHVTzRyhpcC8xkHqEU3V+VPdGGRgI3+zHJf2OERzDQT ul7YzQaKsXf+OWQCy33RJHS1M1pE1fOTz541EHxzJC+EOoGrdlTHfnd2bpekoeuY SY9Svm8LDn39ZkwtrQolXp4ZdlcZucQDEOyxVYKiQjTBn8hy3UuWRV/xNEPU9tjF XEjt1AwTRHTvbKS3cHePqQN3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUimRNqk+a Aj0iHPyn58/JFiyD5UQwHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvq+h82pyj5SQD/2EuuugQLuB1f+ZocRCqnJ7kfPdtbGHIk1ThYcFri CXrz6RAbTMx7+SX+MBRYntDQcop6fyfIqe/ccW6OqAPIWACc5u7emH9lL70kWdZH DzHMwkUHWBb6au3CaqOU7m8xY2crmfVoCAMKwL9MLoeC8udvJm0FhBQAkEi2LRlJ w4NDGkXZUiQ10Daohxzwb9ut0J01SvvBXR4XKQ65+OakZwWsP5qYP7dDg/uKIEcQ Jj/bYxejpIVt6mCygPxrensq8opu5VlFmEA0zBI9pH9jTFrZ7X8iZT8C1FkJ+tFv +r5i27DNIc8hFOJa/VJaxNliOtsVeHU= -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:04 2025 by rpki-client