$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft File: HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json) Hash identifier: AMj/yC79aLy5sfOvgAWS2bBfj5LLI33/wApIHMjVHSU= Subject key identifier: 66:41:AE:FE:53:76:4F:C3:71:75:46:DC:8C:DD:B3:83:D0:65:02:3E Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft Manifest number: 1C0E Signing time: Fri 18 Jul 2025 16:19:32 +0000 Manifest this update: Fri 18 Jul 2025 16:19:31 +0000 Manifest next update: Fri 25 Jul 2025 16:19:31 +0000 Files and hashes: 1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: SmnYPLZzcfzV5O3rVS7UjSiB7QvsCGkdfozDG+C8dso=) 2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: 9EcXEyYQS23lcV2U+HKPELhdNtW+6VqWRslfao0UNEU=) 3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QoTcLfEkEV4sZtEqMQTgGT13hqif8q7yBrWiFwLEqIo=) 4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: ZGC2ZFJHwlq5Ep2j3cd1PYdlRsmipJnSDGQN5BOUcNk=) 5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: dgOhhCgJNmqIABfmqn7RZ7HEHVhf8zRLQCOO0zkoj5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7221 (0x1c35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: Jul 18 16:19:31 2025 GMT Not After : Jul 25 16:19:31 2025 GMT Subject: CN=687a7414-7885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:4c:f7:e4:30:a2:ef:60:b1:1c:a8:fa:13: 61:e0:c7:74:c5:52:28:8c:db:64:87:b4:da:fa:27: 74:d0:a0:bf:1c:7d:21:c3:12:50:53:9c:57:d2:9f: 97:b5:4f:8f:bb:46:7f:f8:64:d2:db:c3:1f:76:e2: 1d:00:b1:1b:c1:06:7c:f8:8c:af:b3:a4:88:91:20: 33:19:56:a0:dd:32:35:5f:c7:66:2b:cc:c5:96:c8: b9:40:4b:b8:71:0f:f0:04:aa:4c:f7:9c:79:b9:ed: 67:07:e8:42:14:a0:b4:e0:47:2c:4b:69:3e:1e:94: 99:1d:19:0f:ae:fb:8a:a6:cd:80:5d:24:c9:8e:0b: 10:91:a9:2c:5a:2d:ff:12:b3:5c:53:97:af:8c:f9: 75:d2:88:00:b6:ba:9d:8d:25:15:22:59:61:a3:1c: b9:e0:ae:78:d5:4f:dc:34:39:f3:e7:da:3e:9d:0c: 4b:60:7d:60:d3:89:28:01:1c:b8:9d:49:fb:d4:40: bb:98:e1:65:6c:c6:9a:b8:2f:ba:7a:83:47:c3:3b: 92:6f:b9:25:b6:3c:19:68:07:b7:23:3c:c8:02:cd: a4:06:18:87:f5:6c:bc:d1:47:42:04:16:f7:c6:4b: 29:f9:41:ff:eb:50:a8:1a:f7:82:2b:c9:7f:76:b0: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:AE:FE:53:76:4F:C3:71:75:46:DC:8C:DD:B3:83:D0:65:02:3E X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:64:5d:9c:4a:71:51:4a:b3:47:e0:54:1c:3b:6d:9d:f3:ec: e1:87:22:fd:ab:9a:27:0e:2d:86:33:0f:71:78:ef:ec:63:68: 52:52:08:64:69:c9:95:dd:9f:2a:35:ac:33:3e:a3:64:f8:e0: 2f:32:5e:be:84:5a:af:0b:51:c1:ff:b8:4b:b9:0f:66:10:59: 9f:42:33:08:0c:d5:6c:5d:bf:95:6f:f8:59:8d:d1:25:1f:3e: ab:7f:f6:9d:68:d3:c6:0b:fc:9a:62:11:26:22:2a:ca:67:f1: 23:e6:09:6e:24:dc:7c:c2:47:6f:cd:f6:18:b4:c6:48:2b:dd: d7:62:48:9f:75:bc:2f:85:83:f0:aa:fb:c6:6b:7c:40:63:f6: b7:51:b0:2c:e5:be:48:9d:b7:38:99:3d:55:92:75:34:e0:e5: 12:e2:ae:81:82:d9:7c:b9:f6:47:ec:30:c2:1e:4d:1c:4a:56: f1:74:4a:1f:e5:5c:e6:0a:97:b9:68:e4:2f:f7:e5:33:43:a6: c7:7f:44:4a:be:d2:d0:a3:50:de:fa:c2:da:bf:6e:02:6e:e2: a6:7f:5f:f5:42:21:4e:88:69:34:eb:f6:0d:dc:b0:9a:f0:6e: 62:2a:98:ce:42:a6:ad:e4:05:a7:8d:b9:d9:3b:97:f9:71:91: 85:7d:e0:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjUwNzE4MTYxOTMxWhcNMjUwNzI1MTYxOTMxWjAYMRYwFAYD VQQDEw02ODdhNzQxNC03ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWpM9+Qwou9gsRyo+hNh4Md0xVIojNtkh7Ta+id00KC/HH0hwxJQU5xX0p+X tU+Pu0Z/+GTS28MfduIdALEbwQZ8+Iyvs6SIkSAzGVag3TI1X8dmK8zFlsi5QEu4 cQ/wBKpM95x5ue1nB+hCFKC04EcsS2k+HpSZHRkPrvuKps2AXSTJjgsQkaksWi3/ ErNcU5evjPl10ogAtrqdjSUVIllhoxy54K541U/cNDnz59o+nQxLYH1g04koARy4 nUn71EC7mOFlbMaauC+6eoNHwzuSb7kltjwZaAe3IzzIAs2kBhiH9Wy80UdCBBb3 xksp+UH/61CoGveCK8l/drCKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZBrv5T dk/DcXVG3Izds4PQZQI+MB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FFOS8wOERBNjBDNkYxQjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlH Yi1scUtYOTNMdWdMVVlwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHZF2cSnFRSrNH4FQcO22d8+zhhyL9q5onDi2GMw9xeO/sY2hSUghk acmV3Z8qNawzPqNk+OAvMl6+hFqvC1HB/7hLuQ9mEFmfQjMIDNVsXb+Vb/hZjdEl Hz6rf/adaNPGC/yaYhEmIirKZ/Ej5gluJNx8wkdvzfYYtMZIK93XYkifdbwvhYPw qvvGa3xAY/a3UbAs5b5Inbc4mT1VknU04OUS4q6Bgtl8ufZH7DDCHk0cSlbxdEof 5VzmCpe5aOQv9+UzQ6bHf0RKvtLQo1De+sLav24CbuKmf1/1QiFOiGk06/YN3LCa 8G5iKpjOQqat5AWnjbnZO5f5cZGFfeA9 -----END CERTIFICATE-----Generated at Sun Jul 20 12:03:36 2025 by rpki-client