$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: sjrrlrhZrC+Qzs2gBoqGG52F+EhRtGqOCPNyRHH/n2k= Subject key identifier: 70:9D:C7:5A:3A:1E:E5:18:23:0C:1D:30:F5:2A:06:5C:DE:1A:24:7E Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 011B Signing time: Sat 09 Aug 2025 05:20:17 +0000 Manifest this update: Sat 09 Aug 2025 05:20:17 +0000 Manifest next update: Sat 16 Aug 2025 05:20:17 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 8ntGsIZ4ickrx38kdqspxxYqEQh5Zzu+YSK4fS3xIGc=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Aug 9 05:20:17 2025 GMT Not After : Aug 16 05:20:17 2025 GMT Subject: CN=6896da91-8c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:d5:63:20:e7:6d:fd:5e:0c:85:77:d3:b5: 1d:f7:b2:d0:b9:d5:2f:4a:d6:77:51:7d:2b:4a:7f: db:b8:50:4d:8f:7f:90:6b:88:3e:26:ca:d4:6d:63: 19:8f:bb:a1:24:0d:0d:25:81:76:67:94:8b:31:b2: 3a:a6:9e:15:de:b9:d0:74:cd:4e:39:b6:89:33:22: 99:52:da:6a:48:c3:3f:e4:fc:14:95:9f:3f:52:5c: 9c:d1:76:b0:b0:75:d6:c9:21:34:6e:f5:fd:92:5f: c9:dc:04:81:0e:b9:ca:1c:de:c0:da:11:cf:33:07: 22:60:3d:7e:29:c9:d1:f1:73:be:f4:93:0b:71:ca: 20:a3:d9:cc:77:1a:49:52:aa:9f:2f:7c:8c:e5:b5: 8f:11:7c:ff:e5:0a:3f:0a:d0:1f:25:57:35:96:2c: 34:63:fa:88:12:e5:d2:1d:6e:f0:5d:5c:78:43:34: 05:e3:e4:2b:58:d1:5e:3c:81:17:6d:44:8a:23:10: 7f:4c:30:00:43:ad:6d:4d:20:75:de:d0:ba:39:8e: c8:d2:86:02:e9:55:69:6d:db:41:89:98:74:df:79: b6:4a:b7:88:36:37:76:66:9b:26:62:b4:38:1b:7e: ce:48:4e:98:df:b2:06:9e:31:4f:0c:09:8c:a9:69: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9D:C7:5A:3A:1E:E5:18:23:0C:1D:30:F5:2A:06:5C:DE:1A:24:7E X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:89:b1:10:c6:e0:fb:c3:18:e8:36:23:cd:fe:11:bd:28:66: c8:b6:df:20:4e:1b:cc:59:89:e8:24:d6:6c:95:04:ce:39:26: 22:9b:f8:61:84:c4:8c:3d:2d:e8:be:fd:c0:3c:e8:3e:ab:e7: 79:99:1b:39:85:db:e1:19:c5:e9:68:ad:2e:8b:18:31:9b:55: be:ba:52:d0:df:18:e9:8e:29:47:f4:39:6a:0b:3f:46:7e:45: 33:04:e4:b1:58:47:dc:7c:10:5d:e7:24:a5:1a:f3:43:d3:84: 6e:37:f5:d6:01:3e:00:7e:75:1f:17:30:2c:0c:b3:a3:94:c3: 56:f9:3e:46:57:7c:54:8e:a1:3a:d9:bf:b8:cb:85:0d:c5:b1: bd:7c:22:a2:fc:71:c4:39:b5:1c:b3:05:42:25:2f:ca:3a:16: 2c:d0:52:f6:8b:c6:51:e8:28:69:c1:c6:ac:63:c1:b1:f0:3c: fe:22:22:b5:d7:2b:b1:6c:60:fc:ec:69:07:68:bb:e4:51:5d: d7:e0:7d:38:0b:8a:d0:eb:3e:ed:39:dd:d1:95:6a:df:fc:25: de:6c:7a:25:6e:93:a4:19:3b:dd:1b:98:8e:49:7f:4b:06:9b: 45:17:34:ca:a7:68:c0:d9:dc:eb:d4:5e:9e:79:37:81:b2:25: bd:95:12:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwODA5MDUyMDE3WhcNMjUwODE2MDUyMDE3WjAYMRYwFAYD VQQDEw02ODk2ZGE5MS04YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xbVYyDnbf1eDIV307Ud97LQudUvStZ3UX0rSn/buFBNj3+Qa4g+JsrUbWMZ j7uhJA0NJYF2Z5SLMbI6pp4V3rnQdM1OObaJMyKZUtpqSMM/5PwUlZ8/Ulyc0Xaw sHXWySE0bvX9kl/J3ASBDrnKHN7A2hHPMwciYD1+KcnR8XO+9JMLccogo9nMdxpJ UqqfL3yM5bWPEXz/5Qo/CtAfJVc1liw0Y/qIEuXSHW7wXVx4QzQF4+QrWNFePIEX bUSKIxB/TDAAQ61tTSB13tC6OY7I0oYC6VVpbdtBiZh033m2SreINjd2ZpsmYrQ4 G37OSE6Y37IGnjFPDAmMqWlOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCdx1o6 HuUYIwwdMPUqBlzeGiR+MB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlibEQxuD7wxjoNiPN/hG9KGbItt8gThvMWYnoJNZslQTOOSYim/hh hMSMPS3ovv3APOg+q+d5mRs5hdvhGcXpaK0uixgxm1W+ulLQ3xjpjilH9DlqCz9G fkUzBOSxWEfcfBBd5ySlGvND04RuN/XWAT4AfnUfFzAsDLOjlMNW+T5GV3xUjqE6 2b+4y4UNxbG9fCKi/HHEObUcswVCJS/KOhYs0FL2i8ZR6ChpwcasY8Gx8Dz+IiK1 1yuxbGD87GkHaLvkUV3X4H04C4rQ6z7tOd3RlWrf/CXebHolbpOkGTvdG5iOSX9L BptFFzTKp2jA2dzr1F6eeTeBsiW9lRLX -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:05 2025 by rpki-client