$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: 87PqwkFV4YAXG2rdTayHqCqgyDKH1HbuWpag0l7jJxI= Subject key identifier: 05:FB:F1:11:47:44:63:70:49:99:B1:6C:AC:65:76:AB:EE:B7:83:21 Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 011D Signing time: Thu 07 Aug 2025 05:19:46 +0000 Manifest this update: Thu 07 Aug 2025 05:19:46 +0000 Manifest next update: Thu 14 Aug 2025 05:19:46 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: eA5R8RIMdYDfoCs4XpyIUKGRWZ6KPbD6b9aIQ4zaz9s=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Aug 7 05:19:46 2025 GMT Not After : Aug 14 05:19:46 2025 GMT Subject: CN=68943772-df31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:c2:86:db:83:63:31:13:30:fc:a6:ea:e0: dd:dc:0d:7f:1e:2e:18:69:ad:0f:ff:67:30:42:ee: 12:6f:c1:7a:2e:84:99:d7:3c:07:6c:20:66:a8:e6: 2c:86:f9:a6:ed:ad:3d:e6:6b:76:8d:32:c1:ae:40: df:c1:c4:fc:7d:59:c9:a2:ea:1a:5e:7c:18:4d:e2: e7:64:4c:bf:eb:4c:77:3a:f0:1e:3f:bb:e9:9c:52: 78:b8:c3:b0:be:d6:14:a5:35:3e:59:8b:90:e7:82: a7:09:b0:55:90:9f:9b:03:e7:78:61:9a:55:49:f2: 86:0f:05:88:d7:12:8a:d6:f5:92:2b:e3:c6:26:5a: 83:ae:0e:57:b4:9f:d1:f3:36:20:9f:e7:ff:43:95: d2:73:1f:5e:38:59:ef:1a:2c:97:fe:1b:52:71:6f: a0:8a:0b:cc:5c:70:57:bc:06:5f:ae:26:d6:16:cd: cc:40:07:a0:fe:fb:7f:ac:0c:28:a2:ca:0e:0f:f7: fc:6b:0a:a3:ff:9a:20:c0:15:5a:a8:84:4d:64:cb: 53:a8:8a:f1:4c:7a:ca:20:c0:71:dd:08:67:f6:f8: 07:ad:f5:85:25:2a:9b:96:01:b5:27:e1:fd:6c:8b: 88:8b:b8:a5:34:7c:a0:a6:73:57:7a:0e:87:fc:f0: 8b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FB:F1:11:47:44:63:70:49:99:B1:6C:AC:65:76:AB:EE:B7:83:21 X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8d:77:11:6c:68:ed:bf:93:7b:51:76:78:f9:f1:9c:17:49: 3e:ab:6c:81:9e:4d:a1:0e:c1:66:9a:47:3e:2c:ee:d2:98:88: ab:3b:9b:e4:44:e2:1d:e6:69:ff:61:88:67:50:b1:3e:a3:f3: 67:0e:de:ae:9d:a6:aa:f3:0c:9f:6f:25:09:99:90:f3:a9:bc: 6c:84:c2:47:fb:04:02:e7:3c:2a:f3:ce:f8:52:53:92:c4:d8: 96:3b:36:4b:0a:18:fa:bf:54:0b:56:62:99:a1:1f:f4:0e:22: 2b:92:62:a9:75:3d:1f:9a:0a:e9:9a:a3:fe:ba:76:4c:f1:40: 4c:89:dd:19:97:2b:62:8e:78:20:e1:68:a5:a8:3f:90:14:f0: 51:db:76:fb:eb:d3:5b:fd:e7:d9:7b:96:6d:89:0a:e5:f4:41: 29:d0:3b:25:0f:35:99:a8:67:c9:f1:aa:ae:71:07:75:bd:50: d0:b6:1c:a8:c8:4e:65:4f:ff:77:94:d9:7a:2a:29:5b:e2:c1: 5f:9d:78:6c:08:19:b5:52:ad:fa:39:be:48:fe:7c:06:bf:71: 67:ab:16:0e:f7:b7:9e:33:48:e2:70:58:53:3e:b9:eb:9f:ba: 9b:de:1e:4d:4a:07:b8:5d:2a:f2:5d:07:f2:6d:f9:08:f3:ab: 8d:d7:4d:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUwODA3MDUxOTQ2WhcNMjUwODE0MDUxOTQ2WjAYMRYwFAYD VQQDEw02ODk0Mzc3Mi1kZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tnChtuDYzETMPym6uDd3A1/Hi4Yaa0P/2cwQu4Sb8F6LoSZ1zwHbCBmqOYs hvmm7a095mt2jTLBrkDfwcT8fVnJouoaXnwYTeLnZEy/60x3OvAeP7vpnFJ4uMOw vtYUpTU+WYuQ54KnCbBVkJ+bA+d4YZpVSfKGDwWI1xKK1vWSK+PGJlqDrg5XtJ/R 8zYgn+f/Q5XScx9eOFnvGiyX/htScW+gigvMXHBXvAZfribWFs3MQAeg/vt/rAwo osoOD/f8awqj/5ogwBVaqIRNZMtTqIrxTHrKIMBx3Qhn9vgHrfWFJSqblgG1J+H9 bIuIi7ilNHygpnNXeg6H/PCLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX78RFH RGNwSZmxbKxldqvut4MhMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAjXcRbGjtv5N7UXZ4+fGcF0k+q2yBnk2hDsFmmkc+LO7SmIirO5vk ROId5mn/YYhnULE+o/NnDt6unaaq8wyfbyUJmZDzqbxshMJH+wQC5zwq8874UlOS xNiWOzZLChj6v1QLVmKZoR/0DiIrkmKpdT0fmgrpmqP+unZM8UBMid0Zlytijngg 4WilqD+QFPBR23b769Nb/efZe5ZtiQrl9EEp0DslDzWZqGfJ8aqucQd1vVDQthyo yE5lT/93lNl6Kilb4sFfnXhsCBm1Uq36Ob5I/nwGv3FnqxYO97eeM0jicFhTPrnr n7qb3h5NSge4XSryXQfybfkI86uN100u -----END CERTIFICATE-----Generated at Fri Aug 8 00:06:58 2025 by rpki-client