$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: 7K0A7hWWAyteZlZMtifnL6iTWDbu3aGJqGkiNygI4Q0= Subject key identifier: F6:F8:C4:5A:FC:E0:DB:14:70:28:DC:69:A3:32:B7:4A:AD:51:52:F0 Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B3C Signing time: Fri 08 Aug 2025 16:26:32 +0000 Manifest this update: Fri 08 Aug 2025 16:26:32 +0000 Manifest next update: Fri 15 Aug 2025 16:26:32 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: iQjfSrDClZ/da/e0eytpSLZwyiDzj+zQmwXlx/wSIGg=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7038 (0x1b7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Aug 8 16:26:32 2025 GMT Not After : Aug 15 16:26:32 2025 GMT Subject: CN=68962538-83d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:d4:e6:6c:68:6e:fc:93:80:67:f6:0a:bd: 33:ed:5a:0c:fa:4f:76:95:90:45:d5:39:6b:d1:b5: 6b:69:db:7a:90:8c:4b:07:60:a0:0b:18:e6:af:a9: a0:5e:ac:3a:1a:13:43:b1:0a:e4:4f:7a:b1:f9:26: 8c:4a:3a:96:fb:b2:61:25:c7:2a:27:d9:ca:12:5d: 6e:e6:b9:98:63:55:eb:0c:01:ce:3e:6f:51:59:d9: 89:cd:a9:2f:63:bb:f7:c3:b9:21:96:2e:77:82:16: 4a:69:a1:ae:67:d9:70:b3:07:b4:61:cf:d6:45:67: 48:27:ff:0a:f2:a0:00:23:6a:43:ec:fa:43:8d:34: 77:55:d7:49:09:9a:6e:1f:1c:55:43:89:53:50:04: b2:f6:47:18:4c:13:c4:b1:1a:fe:33:4b:c9:8a:60: 01:51:67:97:aa:4f:f5:13:4b:2e:f0:94:28:e2:3e: 67:86:ef:82:cf:dc:da:50:49:ef:e4:9f:72:55:29: fa:5c:63:f5:40:0a:bb:fd:81:df:60:d6:f0:e1:2e: 81:16:dc:12:34:eb:87:41:d1:33:ff:2d:8f:bb:69: 4a:0e:2c:c0:a3:d7:79:e7:ac:7b:af:8b:95:8d:3e: 92:9f:72:af:af:07:f1:54:6d:ae:9c:48:74:5e:d7: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F8:C4:5A:FC:E0:DB:14:70:28:DC:69:A3:32:B7:4A:AD:51:52:F0 X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:76:95:01:f7:88:d3:73:63:f7:e3:92:7f:37:bb:65:f0:cf: 9a:4b:3c:54:04:85:0b:ea:66:a1:1d:67:c9:f0:3f:11:f3:b7: 6d:ea:e0:71:72:8f:f7:72:12:15:59:78:97:94:01:8f:e3:40: 30:1e:c1:4c:b3:4d:85:19:d5:c4:77:9c:0c:85:e8:8a:c6:75: b3:92:90:67:5f:7d:58:f8:78:38:40:58:43:93:c7:99:9b:be: 61:7d:ca:b4:94:1f:2b:9f:6a:8a:23:64:c3:1e:5f:14:9d:20: 94:ed:64:bb:33:5a:7e:98:75:68:1f:dc:c6:c8:15:f4:d6:71: b4:30:3a:6c:31:00:9c:b6:02:50:b0:ed:a7:f8:a6:a8:10:bc: 64:bb:b2:95:74:16:b7:cd:81:63:e4:b1:70:b4:64:b4:2a:1d: 25:33:b7:57:7d:f1:e9:a3:39:6f:33:81:d1:cf:0b:c0:1a:e1: ed:6c:f7:d3:48:eb:7c:59:a1:6d:6b:41:32:34:0e:7d:09:71: e9:99:c1:d1:ea:86:dd:7a:68:78:52:de:11:ac:5f:4d:e6:c1: 22:85:fd:14:22:d4:5b:fe:c2:12:83:be:8a:44:bd:e4:43:ac: ad:6a:f2:8f:9a:38:47:3c:71:e4:72:af:4a:61:6e:f0:b8:88: 03:77:77:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwODA4MTYyNjMyWhcNMjUwODE1MTYyNjMyWjAYMRYwFAYD VQQDEw02ODk2MjUzOC04M2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/7U5mxobvyTgGf2Cr0z7VoM+k92lZBF1Tlr0bVradt6kIxLB2CgCxjmr6mg Xqw6GhNDsQrkT3qx+SaMSjqW+7JhJccqJ9nKEl1u5rmYY1XrDAHOPm9RWdmJzakv Y7v3w7khli53ghZKaaGuZ9lwswe0Yc/WRWdIJ/8K8qAAI2pD7PpDjTR3VddJCZpu HxxVQ4lTUASy9kcYTBPEsRr+M0vJimABUWeXqk/1E0su8JQo4j5nhu+Cz9zaUEnv 5J9yVSn6XGP1QAq7/YHfYNbw4S6BFtwSNOuHQdEz/y2Pu2lKDizAo9d556x7r4uV jT6Sn3KvrwfxVG2unEh0Xte1UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPb4xFr8 4NsUcCjcaaMyt0qtUVLwMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEdpUB94jTc2P345J/N7tl8M+aSzxUBIUL6mahHWfJ8D8R87dt6uBx co/3chIVWXiXlAGP40AwHsFMs02FGdXEd5wMheiKxnWzkpBnX31Y+Hg4QFhDk8eZ m75hfcq0lB8rn2qKI2TDHl8UnSCU7WS7M1p+mHVoH9zGyBX01nG0MDpsMQCctgJQ sO2n+KaoELxku7KVdBa3zYFj5LFwtGS0Kh0lM7dXffHpozlvM4HRzwvAGuHtbPfT SOt8WaFta0EyNA59CXHpmcHR6obdemh4Ut4RrF9N5sEihf0UItRb/sISg76KRL3k Q6ytavKPmjhHPHHkcq9KYW7wuIgDd3eR -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:00 2025 by rpki-client