$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: ahtrCEggVpAKh6YE/Je87dc7oHR13xd7+7MvopAMFRo= Subject key identifier: 09:58:B9:EE:84:99:47:B3:65:02:93:18:9D:E8:19:F6:70:70:69:B8 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 8A Signing time: Sat 09 Aug 2025 07:13:08 +0000 Manifest this update: Sat 09 Aug 2025 07:13:07 +0000 Manifest next update: Sat 16 Aug 2025 07:13:07 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: UgoSLUJkQvGAbYNPYTPtq+hPUuOnDnH2m9+Qz1ixQtY=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Aug 9 07:13:07 2025 GMT Not After : Aug 16 07:13:07 2025 GMT Subject: CN=6896f503-bdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:8b:fa:d9:46:f6:c2:91:37:86:c6:e9:b0: f3:f2:fc:46:9b:9e:88:25:fb:7b:fd:26:05:fc:95: da:54:e2:8d:e7:b0:5c:df:23:29:16:07:b8:9d:39: 49:dc:54:c7:70:1c:37:59:57:37:34:f1:a6:15:fa: 42:1b:5b:52:a9:d2:7c:f3:a1:be:68:82:c0:d6:02: de:72:f9:e3:5e:a3:2b:e2:f2:80:79:39:eb:28:0e: c4:af:ef:d7:73:94:80:ee:a1:ef:29:be:71:67:68: cd:db:87:ae:be:e7:d7:4b:12:5e:56:19:c2:c8:b8: 5b:89:d9:7c:6d:6a:f4:2b:e7:22:f9:90:70:b5:33: 3d:18:3f:cf:46:33:fe:a9:76:03:0d:e8:5a:e4:c5: 5a:5a:a3:06:7d:c7:5d:14:76:57:5c:0c:00:8a:e5: b0:cb:9d:e4:54:a7:77:46:f3:74:98:93:75:da:38: 38:0c:44:2d:ad:28:a0:f6:ea:01:50:94:ac:90:d5: ce:68:e5:08:9d:8f:3f:75:03:02:a0:a7:59:b6:25: 64:da:da:f9:11:a8:95:4d:8a:1e:fe:75:46:1e:f9: 11:45:f8:41:55:2a:00:30:ca:6a:4c:9c:0f:47:67: 91:9b:50:72:d4:b6:ac:d9:37:4c:a1:4b:1a:13:dd: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:58:B9:EE:84:99:47:B3:65:02:93:18:9D:E8:19:F6:70:70:69:B8 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:ae:d9:a6:9d:1c:41:93:da:7b:4c:04:c9:4c:bd:38:5b:7f: f6:45:79:2c:7d:7a:4e:f0:82:f1:92:fb:ba:ee:e4:24:be:bf: cd:a4:9f:63:0c:2a:d3:6e:79:9c:43:26:7c:1a:97:d4:05:28: 6e:2b:88:ef:16:1f:9a:32:cc:32:55:d8:fe:06:3e:aa:1e:31: 1b:d2:90:98:c4:58:60:e3:29:93:b6:a8:40:49:76:e6:1e:76: e1:3e:3c:52:cc:ab:5a:13:f4:2d:ba:d1:33:86:8e:e1:1c:10: 97:45:29:4d:46:91:58:25:c5:f9:56:58:15:ff:c3:1f:05:b4: 71:80:04:99:dd:bc:9c:0c:e9:9c:f8:2e:09:14:b1:cc:85:ed: a0:10:ab:23:a8:84:36:34:91:e0:5f:12:f2:77:1b:bb:49:42: a8:bf:a2:b6:17:b6:c4:65:55:8e:ca:10:0d:57:1d:ed:f7:72: dc:e5:a4:16:ff:a1:e6:67:a4:d1:03:b0:b1:ef:c5:f6:c8:78: d0:57:12:0d:5c:9e:86:c0:07:71:e8:73:81:87:48:c5:37:00: fd:38:18:96:1d:bc:fb:a3:24:1f:da:85:5f:79:64:52:d0:f9: 8b:ce:b9:d5:74:a9:21:99:71:3d:b1:49:2e:7a:3f:22:bf:c6: 44:a7:ed:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjUwODA5MDcxMzA3WhcNMjUwODE2MDcxMzA3WjAYMRYwFAYD VQQDEw02ODk2ZjUwMy1iZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1buL+tlG9sKRN4bG6bDz8vxGm56IJft7/SYF/JXaVOKN57Bc3yMpFge4nTlJ 3FTHcBw3WVc3NPGmFfpCG1tSqdJ886G+aILA1gLecvnjXqMr4vKAeTnrKA7Er+/X c5SA7qHvKb5xZ2jN24euvufXSxJeVhnCyLhbidl8bWr0K+ci+ZBwtTM9GD/PRjP+ qXYDDeha5MVaWqMGfcddFHZXXAwAiuWwy53kVKd3RvN0mJN12jg4DEQtrSig9uoB UJSskNXOaOUInY8/dQMCoKdZtiVk2tr5EaiVTYoe/nVGHvkRRfhBVSoAMMpqTJwP R2eRm1By1Las2TdMoUsaE92D5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlYue6E mUezZQKTGJ3oGfZwcGm4MB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyrtmmnRxBk9p7TATJTL04W3/2RXksfXpO8ILxkvu67uQkvr/NpJ9j DCrTbnmcQyZ8GpfUBShuK4jvFh+aMswyVdj+Bj6qHjEb0pCYxFhg4ymTtqhASXbm HnbhPjxSzKtaE/QtutEzho7hHBCXRSlNRpFYJcX5VlgV/8MfBbRxgASZ3bycDOmc +C4JFLHMhe2gEKsjqIQ2NJHgXxLydxu7SUKov6K2F7bEZVWOyhANVx3t93Lc5aQW /6HmZ6TRA7Cx78X2yHjQVxINXJ6GwAdx6HOBh0jFNwD9OBiWHbz7oyQf2oVfeWRS 0PmLzrnVdKkhmXE9sUkuej8iv8ZEp+1/ -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:19 2025 by rpki-client