$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: VJ0CX4MZJCCrAjPHYK26SIgDYCmzCm/y9kwfcZIJxbs= Subject key identifier: 15:30:63:C6:AB:4C:9B:98:4E:D9:0C:51:0D:CC:C4:28:C6:D0:CE:45 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 14A3 Signing time: Tue 12 Aug 2025 16:59:49 +0000 Manifest this update: Tue 12 Aug 2025 16:59:49 +0000 Manifest next update: Tue 19 Aug 2025 16:59:49 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: SlswJXumE32mu2slvOMPGUfGBrsRSE7VvkAocFsGo9k=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5307 (0x14bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Aug 12 16:59:49 2025 GMT Not After : Aug 19 16:59:49 2025 GMT Subject: CN=689b7305-ef7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:9b:58:74:6f:a0:af:15:18:13:b9:f1:86: 45:dd:f2:68:fb:1d:71:1a:20:71:d5:ea:b4:b3:59: e3:76:e9:cf:c2:cb:d1:c5:9b:b8:d3:08:ca:67:a6: f4:08:64:79:85:52:0b:3e:0c:f8:9d:fd:6c:fa:3a: 0f:80:44:22:03:b1:6b:c6:ef:0a:4a:05:d8:e1:4a: 9f:1b:cb:8a:47:08:85:73:e4:85:8f:4a:5d:af:24: 10:d1:06:6f:23:20:4f:fb:0f:06:fb:08:48:05:9c: 0a:87:9a:f0:a4:fb:44:09:81:99:3d:85:b5:2a:0e: d8:f0:24:d5:6e:5f:95:61:4e:75:fd:14:1c:1c:80: 40:fd:0a:9c:c1:7a:5c:b2:1a:3c:37:cd:1a:65:21: 7d:c7:9e:90:36:a6:ab:b7:d0:2b:84:35:5b:17:1a: 19:8d:43:e7:a5:6b:8c:f7:37:87:89:3f:c3:94:03: ce:cf:b2:fd:2a:23:2d:72:f9:b8:4c:f7:65:4f:bd: 66:e7:0a:c1:9a:8f:4d:57:01:12:52:6e:5f:65:13: 90:11:2a:c1:af:a2:7b:0c:dd:f6:44:07:a4:f4:f0: 2b:23:42:f5:ac:e2:74:a8:13:e7:87:c3:25:01:07: d3:60:4c:22:8d:80:c8:9e:4d:7f:4e:85:9d:23:0f: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:63:C6:AB:4C:9B:98:4E:D9:0C:51:0D:CC:C4:28:C6:D0:CE:45 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ff:df:31:67:19:ec:3c:f7:a6:57:6d:f6:e6:f1:50:14:8f: 5b:4c:8c:a8:f7:8e:b0:ad:f5:7e:fc:48:11:2c:a3:01:e6:18: 32:53:0f:77:69:ca:25:13:e8:7b:5d:c4:3e:01:07:e8:fc:ec: 4d:c8:cb:d5:f4:23:39:be:7c:75:9c:be:95:dc:36:95:f4:68: 3b:a9:c7:62:dc:e3:26:cc:f1:57:bd:45:ed:7a:f0:15:5c:07: 4b:fa:3e:ae:c1:e6:4e:6b:2a:73:aa:0e:77:a7:e8:bf:be:2f: 9b:10:b3:43:5d:55:83:b6:96:14:27:4e:a6:65:d8:72:a8:48: 8b:7b:f1:c4:c5:ca:68:2d:9c:39:ad:ee:c6:03:1f:77:0c:89: a1:f1:89:81:cb:2a:ed:3e:d1:fe:52:e5:83:c9:34:5a:c2:77: 1c:14:ed:e0:23:77:b7:ef:36:93:78:a5:2a:14:9b:d0:f6:09: 88:fc:80:1d:45:1e:3c:c4:ae:b6:67:74:0a:bd:e5:e9:3e:f2: 69:fc:46:06:8f:26:7d:47:86:67:17:29:37:c3:fa:23:9d:b2: 99:8a:d5:90:1a:08:99:b2:4c:57:5a:70:4b:ed:04:dc:8d:3d: ee:dd:61:fd:48:dc:85:77:c0:63:cc:94:13:43:dc:fb:1f:d4: 9d:2c:7c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwODEyMTY1OTQ5WhcNMjUwODE5MTY1OTQ5WjAYMRYwFAYD VQQDEw02ODliNzMwNS1lZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjibWHRvoK8VGBO58YZF3fJo+x1xGiBx1eq0s1njdunPwsvRxZu40wjKZ6b0 CGR5hVILPgz4nf1s+joPgEQiA7Frxu8KSgXY4UqfG8uKRwiFc+SFj0pdryQQ0QZv IyBP+w8G+whIBZwKh5rwpPtECYGZPYW1Kg7Y8CTVbl+VYU51/RQcHIBA/QqcwXpc sho8N80aZSF9x56QNqart9ArhDVbFxoZjUPnpWuM9zeHiT/DlAPOz7L9KiMtcvm4 TPdlT71m5wrBmo9NVwESUm5fZROQESrBr6J7DN32RAek9PArI0L1rOJ0qBPnh8Ml AQfTYEwijYDInk1/ToWdIw8giwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUwY8ar TJuYTtkMUQ3MxCjG0M5FMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv/98xZxnsPPemV2325vFQFI9bTIyo946wrfV+/EgRLKMB5hgyUw93 acolE+h7XcQ+AQfo/OxNyMvV9CM5vnx1nL6V3DaV9Gg7qcdi3OMmzPFXvUXtevAV XAdL+j6uweZOaypzqg53p+i/vi+bELNDXVWDtpYUJ06mZdhyqEiLe/HExcpoLZw5 re7GAx93DImh8YmByyrtPtH+UuWDyTRawnccFO3gI3e37zaTeKUqFJvQ9gmI/IAd RR48xK62Z3QKveXpPvJp/EYGjyZ9R4ZnFyk3w/ojnbKZitWQGgiZskxXWnBL7QTc jT3u3WH9SNyFd8BjzJQTQ9z7H9SdLHwn -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:09 2025 by rpki-client