$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft File: Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json) Hash identifier: kSHaBTO2dfHEvJIO+95RFz+XFdfFOOaJ1xt0p/AqvSQ= Subject key identifier: 1F:36:91:E0:FE:59:B4:7F:DC:8B:5E:F4:5D:E4:FB:8A:4F:BC:6F:E2 Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft Manifest number: 02E6 Signing time: Thu 07 Aug 2025 01:56:53 +0000 Manifest this update: Thu 07 Aug 2025 01:56:52 +0000 Manifest next update: Thu 14 Aug 2025 01:56:52 +0000 Files and hashes: 1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: AECpAgF6K9mRXHmqkqNS7T+Slf/Sjn6ptTz9SZTDeeY=) 2: E7923742526311F0986A3A5AC4F9AE02.roa (hash: C1cnMXKGJuTQ/i5MZh9Z6fPastUUu1Swd7Zuw8j4VwM=) 3: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=) 4: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Validity Not Before: Aug 7 01:56:52 2025 GMT Not After : Aug 14 01:56:52 2025 GMT Subject: CN=689407e4-f748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:f5:2e:ac:b9:ea:fe:8c:59:e3:e2:17:f7: 95:a9:ae:fb:e3:70:91:c7:e5:c2:cb:77:8d:05:5a: ec:a0:62:58:33:6d:58:aa:c5:95:12:1c:2f:b0:9d: a8:cf:3f:0a:9f:7e:2d:66:21:4a:b3:47:07:4d:1c: ea:1a:a2:12:b9:cb:05:6d:44:8c:b6:19:d8:1a:f0: 05:f0:40:35:c3:aa:93:d8:64:14:e6:ce:35:fa:b7: 8d:b5:b9:20:7a:52:98:26:ed:de:1f:c2:26:74:1c: 93:6d:3d:8e:f6:4c:e9:f1:2c:63:db:84:b3:00:c7: 7a:ad:41:b8:08:2f:25:44:d2:25:df:57:98:14:ed: da:42:3b:85:6c:b7:ea:48:aa:32:67:a8:1b:98:63: 5e:00:c4:fc:a4:77:d8:b9:5a:42:68:72:51:d2:eb: cd:b9:cb:7f:f7:d6:7b:08:bc:ad:ee:82:89:f4:66: c2:a0:e3:9c:91:1c:d6:76:fc:77:d7:1e:22:21:2f: 08:f6:de:f9:39:45:67:15:cb:cc:33:28:7f:a5:d7: fd:31:9e:f4:7d:39:b9:94:4e:2b:e0:45:08:a3:e1: ad:c3:f3:25:7d:5d:b6:28:14:03:46:d4:e9:d7:3a: 94:66:1b:00:aa:a8:f9:a7:f0:e7:04:33:fc:d6:8b: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:91:E0:FE:59:B4:7F:DC:8B:5E:F4:5D:E4:FB:8A:4F:BC:6F:E2 X509v3 Authority Key Identifier: keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ad:4b:b0:f8:dd:0c:28:66:4b:98:45:2a:9e:5b:5a:92:1d: e5:a9:93:2e:e2:05:4a:9a:cf:a4:c2:09:b0:d3:6d:37:b3:06: 1d:ae:12:dc:2a:7e:70:e6:9b:88:3c:d4:a8:f6:1b:d8:b4:1e: 47:a4:c0:60:21:83:41:db:89:d8:18:57:f2:ca:99:d2:58:f5: 95:b9:82:7f:e6:1f:74:bf:2a:bb:35:63:41:17:9a:7d:90:6a: f5:ba:75:8c:e3:6c:5d:b0:28:46:ac:58:2f:79:39:55:78:5c: f7:57:9d:f8:f8:22:17:46:5c:48:29:d7:ea:11:6b:a5:4b:5c: 83:26:f6:b2:3d:7b:bc:50:33:5c:a8:22:19:70:de:50:ab:9c: 87:2f:5f:e8:f1:43:ff:4a:af:5e:95:fa:af:2c:de:3d:ea:70: 08:73:23:1e:5b:ab:4f:89:f3:63:25:97:59:0d:17:bd:51:bf: 49:10:1b:e2:ba:f1:01:9e:83:10:d6:11:86:80:b1:e8:3c:64: 25:e0:5f:3f:1a:61:9e:70:a0:7d:c4:9f:5d:d4:86:6e:bb:ff: 65:22:7b:ba:ce:d3:fd:3d:0d:b2:d2:08:23:fc:cf:ac:3f:fb: 86:59:d3:99:d0:6e:1a:7d:61:06:1e:c5:e2:88:8f:2c:d0:26: 0a:23:0b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF QzhGQjgyQjUwHhcNMjUwODA3MDE1NjUyWhcNMjUwODE0MDE1NjUyWjAYMRYwFAYD VQQDEw02ODk0MDdlNC1mNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wT1Lqy56v6MWePiF/eVqa7743CRx+XCy3eNBVrsoGJYM21YqsWVEhwvsJ2o zz8Kn34tZiFKs0cHTRzqGqISucsFbUSMthnYGvAF8EA1w6qT2GQU5s41+reNtbkg elKYJu3eH8ImdByTbT2O9kzp8Sxj24SzAMd6rUG4CC8lRNIl31eYFO3aQjuFbLfq SKoyZ6gbmGNeAMT8pHfYuVpCaHJR0uvNuct/99Z7CLyt7oKJ9GbCoOOckRzWdvx3 1x4iIS8I9t75OUVnFcvMMyh/pdf9MZ70fTm5lE4r4EUIo+Gtw/MlfV22KBQDRtTp 1zqUZhsAqqj5p/DnBDP81ov+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB82keD+ WbR/3Ite9F3k+4pPvG/iMB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2 QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFDNC8xQ0I1M0YzMEY2QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9h VVViU2g5Z1FLeWJzajdnclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAprUuw+N0MKGZLmEUqnltakh3lqZMu4gVKms+kwgmw0203swYdrhLc Kn5w5puIPNSo9hvYtB5HpMBgIYNB24nYGFfyypnSWPWVuYJ/5h90vyq7NWNBF5p9 kGr1unWM42xdsChGrFgveTlVeFz3V534+CIXRlxIKdfqEWulS1yDJvayPXu8UDNc qCIZcN5Qq5yHL1/o8UP/Sq9elfqvLN496nAIcyMeW6tPifNjJZdZDRe9Ub9JEBvi uvEBnoMQ1hGGgLHoPGQl4F8/GmGecKB9xJ9d1IZuu/9lInu6ztP9PQ2y0ggj/M+s P/uGWdOZ0G4afWEGHsXiiI8s0CYKIwuG -----END CERTIFICATE-----Generated at Thu Aug 7 07:37:06 2025 by rpki-client