$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: 5NYQLFvWxzByMyF7XhJl+Aw0GQ8DLWngTf6lX3T5DQ8= Subject key identifier: 14:00:0A:36:44:32:E6:F1:3E:3D:2C:37:0D:B0:9B:FB:F9:A9:BC:B6 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0160 Signing time: Wed 13 Aug 2025 04:32:30 +0000 Manifest this update: Wed 13 Aug 2025 04:32:29 +0000 Manifest next update: Wed 20 Aug 2025 04:32:29 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: 9mUU+KfwWxYcvp7vn5AWCB58xNPXVdXcZtXCMcwkBLo=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Aug 13 04:32:29 2025 GMT Not After : Aug 20 04:32:29 2025 GMT Subject: CN=689c155e-e086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:2f:96:2a:3b:87:76:9c:18:8a:80:2d:9c: 4c:9e:91:77:ec:1a:6e:7f:27:7e:99:6d:a6:2e:b8: 52:2a:42:9f:b0:3f:f9:2f:fd:0d:14:c7:26:ee:e5: a7:e0:d1:80:9a:b0:a8:08:22:fd:37:b3:57:8b:29: 55:e6:80:16:d7:9b:fb:9e:52:97:54:e4:5d:95:63: f3:fe:1e:b4:90:60:95:52:64:ca:a9:69:1a:92:53: 7f:20:25:5d:2e:92:0c:4d:19:59:4a:48:3b:64:71: 6e:78:71:ed:ae:89:fb:8b:da:41:67:c8:c3:3e:d4: 6b:0c:93:43:24:4a:4c:7d:ac:a2:b8:3f:9d:ab:ce: 63:c7:1d:35:53:29:8d:06:65:b1:0c:58:bf:7e:1b: d8:b2:06:9f:84:cb:34:e6:82:cb:c9:0f:a3:e5:21: 8a:00:b1:a2:d1:70:68:2a:45:6c:1c:6d:1f:ef:16: e0:87:6c:ce:ef:5c:f6:d8:69:b4:80:db:50:39:30: 80:93:be:22:ca:26:af:d2:51:c6:b0:0c:78:7b:15: bc:2a:0e:5b:81:89:3a:e8:dc:1c:2e:ff:74:6b:49: 28:95:1a:05:7a:55:d3:21:c2:49:82:95:c0:88:5b: 7d:71:5b:85:68:20:1b:d1:c2:27:13:a2:35:5b:bd: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:0A:36:44:32:E6:F1:3E:3D:2C:37:0D:B0:9B:FB:F9:A9:BC:B6 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:08:b8:58:3c:65:8a:33:92:fc:8a:1d:68:a5:b3:0a:07:5b: 03:89:43:e2:d0:d7:aa:af:b9:b1:9e:c4:76:31:5b:03:77:ff: b7:f6:fa:2d:c8:42:c2:05:9a:4a:21:13:a2:c1:ac:ec:f9:e0: f8:dc:8a:19:5f:41:ba:11:3b:20:c7:1a:f1:da:69:fa:91:39: 35:f0:fe:88:d4:e8:12:7b:07:e6:58:a3:c1:43:db:b8:09:94: 49:7d:ae:db:91:6a:1f:6a:ab:72:1d:fd:3e:48:2d:31:f0:95: 89:0b:ea:cc:04:b8:47:4d:e0:ff:16:05:da:24:27:dd:d3:a1: 9d:54:97:ff:84:0b:19:d0:b9:e1:cc:3c:51:6f:c7:75:e9:52: 0a:a5:64:65:0e:5f:24:bb:90:8a:37:54:2f:9f:21:cd:4a:a5: f8:67:03:d9:ef:0d:87:f3:77:aa:bc:55:af:29:25:95:41:25: 60:d7:ed:ce:ba:ba:35:3a:01:8a:27:13:f8:5f:1f:1d:b8:e6: 22:f0:33:db:a5:e3:a4:35:90:09:a8:af:df:f5:d2:64:19:26: ce:b5:ad:af:d9:a5:a8:4f:71:0f:1f:10:bc:eb:21:2b:f5:dd: 32:a2:b6:f6:d9:ce:13:b9:03:e3:2d:eb:9a:84:85:85:70:72: aa:36:ae:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwODEzMDQzMjI5WhcNMjUwODIwMDQzMjI5WjAYMRYwFAYD VQQDEw02ODljMTU1ZS1lMDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt34vlio7h3acGIqALZxMnpF37Bpufyd+mW2mLrhSKkKfsD/5L/0NFMcm7uWn 4NGAmrCoCCL9N7NXiylV5oAW15v7nlKXVORdlWPz/h60kGCVUmTKqWkaklN/ICVd LpIMTRlZSkg7ZHFueHHtron7i9pBZ8jDPtRrDJNDJEpMfayiuD+dq85jxx01UymN BmWxDFi/fhvYsgafhMs05oLLyQ+j5SGKALGi0XBoKkVsHG0f7xbgh2zO71z22Gm0 gNtQOTCAk74iyiav0lHGsAx4exW8Kg5bgYk66NwcLv90a0kolRoFelXTIcJJgpXA iFt9cVuFaCAb0cInE6I1W729iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQACjZE MubxPj0sNw2wm/v5qby2MB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeCLhYPGWKM5L8ih1opbMKB1sDiUPi0Neqr7mxnsR2MVsDd/+39vot yELCBZpKIROiwazs+eD43IoZX0G6ETsgxxrx2mn6kTk18P6I1OgSewfmWKPBQ9u4 CZRJfa7bkWofaqtyHf0+SC0x8JWJC+rMBLhHTeD/FgXaJCfd06GdVJf/hAsZ0Lnh zDxRb8d16VIKpWRlDl8ku5CKN1QvnyHNSqX4ZwPZ7w2H83eqvFWvKSWVQSVg1+3O uro1OgGKJxP4Xx8duOYi8DPbpeOkNZAJqK/f9dJkGSbOta2v2aWoT3EPHxC86yEr 9d0yorb22c4TuQPjLeuahIWFcHKqNq7r -----END CERTIFICATE-----Generated at Wed Aug 13 07:39:24 2025 by rpki-client