$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: 7NUUpgEwPHtB0khszdgN1qO9JdzQD/blfMO3awfT/i0= Subject key identifier: 69:F9:36:E2:5D:4B:92:2C:D5:69:8B:77:B3:6C:8A:C0:BB:3A:92:2C Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 0783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 077B Signing time: Fri 08 Aug 2025 21:55:42 +0000 Manifest this update: Fri 08 Aug 2025 21:55:42 +0000 Manifest next update: Fri 15 Aug 2025 21:55:42 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: 19UJ3Eq/2dba31awyo7emqJmNF4LUHVHPGmN4BBaJ3M=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1923 (0x783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Aug 8 21:55:42 2025 GMT Not After : Aug 15 21:55:42 2025 GMT Subject: CN=6896725e-909c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:01:b7:60:8e:24:b2:6a:ed:e0:cf:e0:63: 08:5e:58:72:f6:0d:ba:61:a9:33:fe:31:97:d2:8d: 1b:dd:75:93:f8:3a:6b:ab:36:4b:e3:62:33:23:6d: a1:64:c5:52:2d:5e:2d:0a:37:d7:1b:c7:0b:e3:fd: 49:58:57:53:f1:20:f3:c8:fc:18:9f:e6:02:ef:9d: 1a:6f:db:b2:68:47:44:c6:b2:b2:f5:72:81:e3:9f: cd:f4:5f:67:fb:4d:66:51:6c:cc:c6:20:c7:f5:1d: f6:61:9c:20:0f:9c:73:26:a3:51:f1:71:4d:77:d0: 46:04:e8:be:c3:e4:f8:0d:35:75:5e:2d:a7:f7:cd: 3f:f4:0b:fc:79:b7:ed:d0:37:1d:47:7b:6b:8d:cc: 39:91:d2:c2:89:d0:48:12:67:90:f0:4c:37:ed:f3: 67:8f:d0:7b:d4:be:9e:51:e6:ec:17:b6:2d:cf:14: 4c:99:90:44:5f:8e:2f:69:99:04:7c:1e:dc:42:a2: a2:8f:fa:93:70:60:59:b5:64:63:2d:4b:6f:f4:ef: c1:80:cb:55:b6:82:e5:40:d5:5a:a7:44:f9:0d:ee: d0:29:b0:57:dc:41:cf:93:b5:cf:36:6d:75:6c:85: 65:12:e2:7b:55:fc:f4:61:e0:ab:b6:05:19:48:18: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:36:E2:5D:4B:92:2C:D5:69:8B:77:B3:6C:8A:C0:BB:3A:92:2C X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:93:1a:b6:ad:c7:58:16:c4:c0:c1:7d:14:a6:9c:d8:cf:41: d2:23:5c:a3:7c:ea:c4:44:26:d0:88:ff:36:57:8b:f0:c0:05: 9b:a6:79:2d:77:c6:21:fc:91:b9:14:3a:f8:ae:fd:2e:4f:0f: cd:5d:97:93:98:05:85:d8:ed:2a:1b:05:60:32:67:85:80:9e: 67:a0:00:9b:dc:98:5a:8b:40:79:65:cf:6f:25:a3:59:de:ad: 1a:46:62:4c:f2:7c:b8:f8:1c:2d:34:c1:ee:e7:22:a4:ec:6b: c8:64:9a:0c:4e:9e:06:6a:ed:c5:08:8b:8d:ff:25:ab:d4:bc: 32:b9:f9:19:cb:da:d6:4f:b2:b2:cd:b8:23:54:62:32:22:eb: 68:ac:ca:86:f0:96:46:a3:d8:28:4d:05:b8:ea:11:21:16:90: a8:17:c8:fe:4e:f6:3a:65:da:fa:1d:dc:4b:87:61:40:6b:6d: b8:44:e3:bc:6d:85:9e:e9:8f:cf:61:8d:7a:be:f4:de:62:1e: fc:e7:cf:27:22:23:ca:1e:5d:5a:6f:34:57:33:63:59:66:5d: a7:05:8c:06:d5:b7:53:99:be:d3:21:ac:0f:0f:51:67:5c:0b: e6:a9:58:0b:98:53:a1:be:ff:d9:99:3c:35:17:ac:8c:5c:70: e2:8c:15:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwODA4MjE1NTQyWhcNMjUwODE1MjE1NTQyWjAYMRYwFAYD VQQDEw02ODk2NzI1ZS05MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fUBt2COJLJq7eDP4GMIXlhy9g26Yakz/jGX0o0b3XWT+DprqzZL42IzI22h ZMVSLV4tCjfXG8cL4/1JWFdT8SDzyPwYn+YC750ab9uyaEdExrKy9XKB45/N9F9n +01mUWzMxiDH9R32YZwgD5xzJqNR8XFNd9BGBOi+w+T4DTV1Xi2n980/9Av8ebft 0DcdR3trjcw5kdLCidBIEmeQ8Ew37fNnj9B71L6eUebsF7YtzxRMmZBEX44vaZkE fB7cQqKij/qTcGBZtWRjLUtv9O/BgMtVtoLlQNVap0T5De7QKbBX3EHPk7XPNm11 bIVlEuJ7Vfz0YeCrtgUZSBgfuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn5NuJd S5Is1WmLd7NsisC7OpIsMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPkxq2rcdYFsTAwX0UppzYz0HSI1yjfOrERCbQiP82V4vwwAWbpnkt d8Yh/JG5FDr4rv0uTw/NXZeTmAWF2O0qGwVgMmeFgJ5noACb3Jhai0B5Zc9vJaNZ 3q0aRmJM8ny4+BwtNMHu5yKk7GvIZJoMTp4Gau3FCIuN/yWr1LwyufkZy9rWT7Ky zbgjVGIyIutorMqG8JZGo9goTQW46hEhFpCoF8j+TvY6Zdr6HdxLh2FAa224ROO8 bYWe6Y/PYY16vvTeYh78588nIiPKHl1abzRXM2NZZl2nBYwG1bdTmb7TIawPD1Fn XAvmqVgLmFOhvv/ZmTw1F6yMXHDijBWf -----END CERTIFICATE-----Generated at Sun Aug 10 21:06:15 2025 by rpki-client