$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: o7dSw8R4zYEecIVoKau4Tn2hVV5Uq4WazvBZOwDVDdE= Subject key identifier: 87:13:47:B1:1E:A0:5F:E6:77:81:8A:4B:1E:30:F1:0F:D4:BD:14:A7 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 193F Signing time: Sat 14 Jun 2025 16:22:50 +0000 Manifest this update: Sat 14 Jun 2025 16:22:49 +0000 Manifest next update: Sat 21 Jun 2025 16:22:49 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: whb98EpQ4mtp5kEBnnnvD0VBmZUrdwRqO7iahAHzYuc=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6485 (0x1955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Jun 14 16:22:49 2025 GMT Not After : Jun 21 16:22:49 2025 GMT Subject: CN=684da1d9-b1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:10:e3:08:12:85:2b:8c:98:1a:0e:66:77: da:80:a2:b4:c4:a1:c6:62:5b:4a:cd:f1:59:1e:7a: 8c:51:75:e2:9b:4a:98:c5:4c:1d:16:d8:0c:b4:2c: f0:e0:f4:fc:ab:5c:eb:73:7f:b4:6c:ef:1e:15:84: 5f:03:9f:d0:ff:10:cf:06:5d:43:fc:f7:a3:5c:db: 4f:63:fc:ac:a7:2e:36:db:3c:fa:ca:dd:16:52:7c: 11:5a:6c:b1:e0:10:97:07:b4:32:75:b5:44:8c:8a: 94:1b:f3:76:09:08:ef:c9:dd:e0:d4:58:1b:d4:9d: fd:89:67:50:0d:b5:2f:64:46:e8:7b:86:4b:d4:84: 42:52:a3:c5:82:c9:12:f9:fb:15:1e:fd:b2:bc:c0: e4:71:ab:a0:1a:d4:67:11:2d:56:86:e6:c7:4d:c2: bf:ca:b3:8a:46:56:5e:da:b3:65:97:3a:1e:41:61: fd:de:fe:2a:12:01:26:0b:96:4e:9a:ea:94:4e:9e: 0f:18:05:fd:cb:eb:f0:e0:06:1c:8d:5c:78:87:38: 7e:ad:77:89:89:63:79:65:e6:0e:61:bf:0e:79:17: d0:87:83:c1:1f:9e:c6:35:ba:c4:6d:0c:e3:a7:c1: 1a:8c:bc:fb:17:c8:7c:a2:e5:a4:cb:50:1b:cf:dd: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:47:B1:1E:A0:5F:E6:77:81:8A:4B:1E:30:F1:0F:D4:BD:14:A7 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:94:00:22:17:58:6a:a9:36:41:3a:dc:3e:3e:90:2c:6f:7c: 08:8a:b4:e0:4f:a0:96:db:67:ed:dd:35:49:8e:57:51:20:a4: 06:63:fc:a3:e6:34:25:30:93:ca:b9:45:f0:b8:18:a8:c7:75: 48:92:38:be:98:00:80:dd:a1:b0:6f:46:f3:6f:00:e4:da:17: 85:59:11:aa:98:5e:b6:38:6e:33:8f:1b:c2:ca:58:c2:a4:35: 3f:2c:7f:7a:c4:c0:6d:32:9d:61:13:95:e5:da:86:77:e1:a9: 1a:c3:3a:25:ad:bf:9c:4d:7d:c1:c6:f6:e4:38:4f:ba:fb:9e: d0:84:2a:39:48:ca:81:f2:fc:a4:0c:4a:59:10:d4:8b:3b:60: b6:af:09:e6:6f:6b:e0:83:2f:c6:ed:a7:78:14:5a:5b:1a:5f: 59:83:02:04:d4:48:45:ca:16:86:08:31:ad:58:0b:e7:09:1d: e9:6c:24:99:8e:c4:c2:d5:cd:b5:1e:fb:a4:69:c3:12:cd:f2: 8c:3d:23:90:19:da:30:1e:2e:3f:13:85:93:99:ee:5d:03:03: 35:b1:39:9a:f8:de:fd:65:54:ac:ff:94:97:c9:76:c3:f9:be: dd:c9:9c:88:b7:3d:e7:2d:65:91:08:78:16:f7:66:34:4e:c5: 54:6a:dc:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwNjE0MTYyMjQ5WhcNMjUwNjIxMTYyMjQ5WjAYMRYwFAYD VQQDEw02ODRkYTFkOS1iMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvQQ4wgShSuMmBoOZnfagKK0xKHGYltKzfFZHnqMUXXim0qYxUwdFtgMtCzw 4PT8q1zrc3+0bO8eFYRfA5/Q/xDPBl1D/PejXNtPY/yspy422zz6yt0WUnwRWmyx 4BCXB7QydbVEjIqUG/N2CQjvyd3g1Fgb1J39iWdQDbUvZEboe4ZL1IRCUqPFgskS +fsVHv2yvMDkcaugGtRnES1WhubHTcK/yrOKRlZe2rNllzoeQWH93v4qEgEmC5ZO muqUTp4PGAX9y+vw4AYcjVx4hzh+rXeJiWN5ZeYOYb8OeRfQh4PBH57GNbrEbQzj p8EajLz7F8h8ouWky1Abz91+6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcTR7Ee oF/md4GKSx4w8Q/UvRSnMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+lAAiF1hqqTZBOtw+PpAsb3wIirTgT6CW22ft3TVJjldRIKQGY/yj 5jQlMJPKuUXwuBiox3VIkji+mACA3aGwb0bzbwDk2heFWRGqmF62OG4zjxvCyljC pDU/LH96xMBtMp1hE5Xl2oZ34akawzolrb+cTX3BxvbkOE+6+57QhCo5SMqB8vyk DEpZENSLO2C2rwnmb2vggy/G7ad4FFpbGl9ZgwIE1EhFyhaGCDGtWAvnCR3pbCSZ jsTC1c21HvukacMSzfKMPSOQGdowHi4/E4WTme5dAwM1sTma+N79ZVSs/5SXyXbD +b7dyZyItz3nLWWRCHgW92Y0TsVUatyC -----END CERTIFICATE-----Generated at Sun Jun 15 05:22:40 2025 by rpki-client