$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: 0iIbrXbxzmGlOVH1B6w8W3Ah/5C6MNaEQ/0X08eMtw4= Subject key identifier: A9:EA:AA:8D:73:57:37:C2:64:5E:90:F8:FE:88:60:67:7D:19:D3:93 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 1430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 1427 Signing time: Sun 10 Aug 2025 16:54:32 +0000 Manifest this update: Sun 10 Aug 2025 16:54:31 +0000 Manifest next update: Sun 17 Aug 2025 16:54:31 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: KpnSxd6XsRKn0wt3CAsFt+VvTfVvTEcQHNUXEDAotOs=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5168 (0x1430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Aug 10 16:54:31 2025 GMT Not After : Aug 17 16:54:31 2025 GMT Subject: CN=6898cec8-8fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:fa:56:63:91:34:de:1d:a4:24:99:7d:cb: e2:6b:97:75:74:e4:dd:0c:06:78:e9:59:a1:e3:b3: 2a:49:78:0f:b4:29:a9:10:4d:b3:f9:4d:74:9e:c0: 2d:12:21:67:f4:0b:5a:64:81:e8:32:e5:d6:1a:8e: 6f:5b:63:29:0b:4e:85:19:ea:34:d5:aa:ff:15:1e: 2a:c0:bd:dc:00:6a:6f:14:6c:a9:aa:87:f4:7b:9d: 48:9c:67:64:02:10:d1:de:e2:60:7f:49:7b:1c:b8: e2:3c:bf:55:57:7e:ba:2b:a6:ec:07:f2:dd:ff:c7: 50:68:34:5a:4d:5b:33:07:ef:83:62:ce:ab:32:a0: 98:46:e4:c8:50:38:15:27:f4:f3:63:9c:a0:88:05: 4b:33:05:10:bf:50:4e:b0:c1:60:13:09:00:51:bb: 8e:2a:46:8e:8b:b2:c0:9c:6b:f5:38:bc:0c:00:19: fd:34:f7:8c:26:e2:22:3d:2d:54:33:bc:68:bc:06: b9:4e:72:3d:c6:0d:63:25:62:73:56:45:0e:37:d6: 58:16:2e:95:c3:2e:c3:fc:62:95:41:e5:4f:dc:b7: eb:d4:30:57:31:e9:d3:5e:76:0f:46:21:92:a0:f9: 3f:ad:01:c3:1d:13:bc:91:cb:35:6d:d8:8e:88:07: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:AA:8D:73:57:37:C2:64:5E:90:F8:FE:88:60:67:7D:19:D3:93 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:b3:cb:71:0e:97:7f:e0:7e:8e:ce:cd:c0:b0:a9:c2:aa:b2: e1:6e:b3:b0:58:f5:00:b0:8b:d7:4b:01:d8:79:66:7d:f5:a0: 57:aa:24:07:11:0a:a8:d3:37:f9:d0:4a:03:c6:db:d2:e8:d8: 16:7b:35:c4:0b:f6:80:fb:c5:1c:39:33:ff:2e:62:ca:25:de: d8:f0:e2:46:f8:e2:a0:3b:2f:9c:6c:62:5b:4d:35:d0:64:9b: 5c:c2:71:f5:a4:2c:1c:8e:e3:08:ac:34:12:40:a4:b9:bc:07: 33:3f:69:eb:56:f0:d1:b5:bc:b0:a4:44:2a:98:ab:1a:66:e8: 0b:69:75:0b:ed:44:4c:7b:43:3c:85:51:82:82:e6:1d:90:1a: 87:01:9a:4b:d1:83:e6:ee:66:56:df:4c:9b:9e:59:40:f5:7a: ae:fb:5c:28:6d:ce:94:f3:79:15:d4:1f:81:f9:b1:18:c9:3e: 34:d5:82:cc:55:92:1f:65:fa:d5:99:7b:05:75:b4:26:33:58: ef:ff:de:5c:ad:ac:5c:4e:1f:ba:fc:21:f1:70:1c:56:c5:1f: c8:29:f3:07:6e:d6:6d:24:80:bb:6d:5c:f8:d3:b6:24:c7:98: 4a:92:b2:0e:0f:4f:d6:98:ae:10:ee:d3:55:42:e9:fd:27:87: a3:90:2d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUwODEwMTY1NDMxWhcNMjUwODE3MTY1NDMxWjAYMRYwFAYD VQQDEw02ODk4Y2VjOC04ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp76VmORNN4dpCSZfcvia5d1dOTdDAZ46Vmh47MqSXgPtCmpEE2z+U10nsAt EiFn9AtaZIHoMuXWGo5vW2MpC06FGeo01ar/FR4qwL3cAGpvFGypqof0e51InGdk AhDR3uJgf0l7HLjiPL9VV366K6bsB/Ld/8dQaDRaTVszB++DYs6rMqCYRuTIUDgV J/TzY5ygiAVLMwUQv1BOsMFgEwkAUbuOKkaOi7LAnGv1OLwMABn9NPeMJuIiPS1U M7xovAa5TnI9xg1jJWJzVkUON9ZYFi6Vwy7D/GKVQeVP3Lfr1DBXMenTXnYPRiGS oPk/rQHDHRO8kcs1bdiOiAe1HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnqqo1z VzfCZF6Q+P6IYGd9GdOTMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrs8txDpd/4H6Ozs3AsKnCqrLhbrOwWPUAsIvXSwHYeWZ99aBXqiQH EQqo0zf50EoDxtvS6NgWezXEC/aA+8UcOTP/LmLKJd7Y8OJG+OKgOy+cbGJbTTXQ ZJtcwnH1pCwcjuMIrDQSQKS5vAczP2nrVvDRtbywpEQqmKsaZugLaXUL7URMe0M8 hVGCguYdkBqHAZpL0YPm7mZW30ybnllA9Xqu+1wobc6U83kV1B+B+bEYyT401YLM VZIfZfrVmXsFdbQmM1jv/95craxcTh+6/CHxcBxWxR/IKfMHbtZtJIC7bVz407Yk x5hKkrIOD0/WmK4Q7tNVQun9J4ejkC0U -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:38 2025 by rpki-client