$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: DGk8aUd7UcRKjZgxZn2rNN0DGBlKdVzUFoTE8E67wuE= Subject key identifier: 45:7E:06:F6:4B:84:0C:20:BF:FE:90:77:E6:59:C1:C9:FB:83:EC:60 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01FC Signing time: Sun 03 Aug 2025 02:56:07 +0000 Manifest this update: Sun 03 Aug 2025 02:56:07 +0000 Manifest next update: Sun 10 Aug 2025 02:56:07 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: Zp/Ci2rb6ZdCBLRFY8I1f7b9u3UHAx4K5h8pbKWpjiA=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OxFOcvwColoaxplUUzeWODF1QwobCLhtGfjV874lFQM=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: QHxe/wWqzwNVIDLAM9edUwMUGE9Cp2KpjH57VB1iuhs=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Aug 3 02:56:07 2025 GMT Not After : Aug 10 02:56:07 2025 GMT Subject: CN=688ecfc7-8da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:38:79:96:7f:a3:e8:12:4d:08:14:ca:e8: c7:d2:f1:92:be:2d:85:50:0f:7d:03:b4:65:d1:64: da:f8:05:0e:d1:f6:cf:63:eb:ec:4e:f5:7a:2a:78: 37:6d:69:f6:b4:b5:a7:1c:41:d2:cf:2e:dd:01:34: 4c:df:90:5d:75:f3:4a:47:9a:d1:6c:9c:1d:51:fb: 42:34:f3:10:64:43:9e:c0:eb:15:8c:7e:f6:1a:ca: a5:bd:5d:b0:f2:cf:46:ef:a6:c4:54:e2:c7:40:9f: e0:35:30:61:17:7e:8e:c0:23:c2:94:23:13:da:b1: 9f:02:ce:a0:4c:57:cc:f0:29:dd:24:a1:e2:e6:e3: aa:40:4a:ef:23:af:9a:b1:a8:6a:ed:19:a1:db:29: 14:1f:26:74:d6:c9:7e:d4:ff:03:5a:dc:bd:1a:b7: 76:97:28:32:d5:dc:f7:e4:c6:47:78:0e:4d:d1:f8: 01:51:d8:65:5b:25:a3:6f:39:ec:0b:38:1c:a9:5b: 80:8d:50:42:83:81:be:0a:1b:c6:9e:58:e6:df:6e: 20:af:74:c4:27:54:b2:e5:d8:78:f4:c8:b1:8b:3a: 05:4f:00:b6:b3:65:6c:64:62:28:60:ea:6c:ea:e4: 7e:9e:d4:6e:12:83:f4:27:8a:51:19:b7:a3:7b:85: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:06:F6:4B:84:0C:20:BF:FE:90:77:E6:59:C1:C9:FB:83:EC:60 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:d5:81:de:36:ee:d7:1a:dc:d9:ce:ce:6b:98:43:cc:51:66: c7:1b:9e:ac:fc:79:8d:d5:b5:f0:d6:ec:37:bc:31:d1:9d:df: 84:72:14:6e:38:b3:b2:c9:3c:5c:a1:8a:20:33:6f:33:e0:fd: 21:9a:92:95:14:e9:39:eb:64:2a:a8:1d:40:8b:32:c2:bb:54: 5b:83:ed:b4:07:36:de:ba:19:a1:8c:fb:6c:43:f1:64:2c:ef: d2:3a:51:46:7d:d5:5f:fc:b8:1a:c5:91:4f:5a:fa:0e:22:90: 75:c5:25:42:2b:e8:14:c4:c9:27:98:18:13:94:fd:cb:67:3f: 0e:4c:a1:97:08:cb:c3:31:5a:73:a1:53:9d:ec:be:25:42:53: ca:08:c2:8f:7f:e5:da:2d:58:10:7d:05:b3:95:dd:9f:75:5a: be:f3:b8:dc:ff:5c:71:d4:68:e3:3d:db:1a:75:93:5e:c9:04: 99:27:a5:31:f5:2b:d4:e4:10:e3:dd:60:73:09:a4:86:77:d7: f6:06:ed:2b:95:e8:8a:7d:80:25:c9:ac:14:2c:bc:35:9c:e9: ad:ff:c7:5a:87:6e:60:a0:c3:ea:50:dc:b7:6f:e7:4a:7c:e6: 75:6c:24:bd:bf:70:6c:dc:97:d8:5e:be:c7:b8:ea:97:23:98: bc:0b:09:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwODAzMDI1NjA3WhcNMjUwODEwMDI1NjA3WjAYMRYwFAYD VQQDEw02ODhlY2ZjNy04ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmo4eZZ/o+gSTQgUyujH0vGSvi2FUA99A7Rl0WTa+AUO0fbPY+vsTvV6Kng3 bWn2tLWnHEHSzy7dATRM35BddfNKR5rRbJwdUftCNPMQZEOewOsVjH72GsqlvV2w 8s9G76bEVOLHQJ/gNTBhF36OwCPClCMT2rGfAs6gTFfM8CndJKHi5uOqQErvI6+a sahq7Rmh2ykUHyZ01sl+1P8DWty9Grd2lygy1dz35MZHeA5N0fgBUdhlWyWjbzns CzgcqVuAjVBCg4G+ChvGnljm324gr3TEJ1Sy5dh49MixizoFTwC2s2VsZGIoYOps 6uR+ntRuEoP0J4pRGbeje4VbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV+BvZL hAwgv/6Qd+ZZwcn7g+xgMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDc1YHeNu7XGtzZzs5rmEPMUWbHG56s/HmN1bXw1uw3vDHRnd+EchRu OLOyyTxcoYogM28z4P0hmpKVFOk562QqqB1AizLCu1Rbg+20BzbeuhmhjPtsQ/Fk LO/SOlFGfdVf/LgaxZFPWvoOIpB1xSVCK+gUxMknmBgTlP3LZz8OTKGXCMvDMVpz oVOd7L4lQlPKCMKPf+XaLVgQfQWzld2fdVq+87jc/1xx1GjjPdsadZNeyQSZJ6Ux 9SvU5BDj3WBzCaSGd9f2Bu0rleiKfYAlyawULLw1nOmt/8dah25goMPqUNy3b+dK fOZ1bCS9v3Bs3JfYXr7HuOqXI5i8CwmT -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:28 2025 by rpki-client