$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: k/quqJXxu+L746QocLIRRnpn95ej0BdxYUa+BgkJ3Ns= Subject key identifier: 1B:E5:F8:09:E1:74:E5:B5:D2:21:99:EA:23:11:BD:6F:41:62:B0:29 Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 01B1 Signing time: Sat 19 Jul 2025 03:26:28 +0000 Manifest this update: Sat 19 Jul 2025 03:26:27 +0000 Manifest next update: Sat 26 Jul 2025 03:26:27 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: kHBRAICr/XkDvqGGbmm40C62g4LqTLM+wbtcrWaXDkg=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Jul 19 03:26:27 2025 GMT Not After : Jul 26 03:26:27 2025 GMT Subject: CN=687b1063-240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:8e:a2:fc:95:0c:42:98:7c:a6:cc:2a:c9: 67:6a:83:1b:32:19:ba:ca:a0:75:e1:c8:64:4d:4c: 13:b5:6a:ca:81:82:f4:aa:89:1c:fc:2a:f3:29:a0: 83:c1:bf:fc:30:a8:3b:dd:b0:50:db:71:9d:b4:1f: b8:5b:50:5b:92:45:80:be:2d:9a:30:07:67:65:53: 88:d4:59:de:0f:b7:2f:be:6a:17:76:1c:b2:5d:8d: 13:8b:a4:42:ff:52:a7:20:f7:2c:de:45:96:22:21: d6:22:e7:4f:f4:fb:eb:7d:94:9a:1b:7a:f3:41:03: db:33:bc:d6:ba:13:53:7f:6c:9f:56:1a:e6:27:e9: 5c:32:f7:2c:69:1b:17:41:ce:8d:8a:42:7f:57:2e: 58:bb:cb:8c:d2:b5:e9:35:28:e2:cb:65:e8:85:ce: b0:d0:b3:66:0e:25:4f:06:06:c0:e4:bc:76:39:cf: d6:42:03:d1:cb:20:3e:8f:ec:f3:9d:be:84:1e:89: 77:83:93:7b:f6:b5:17:f7:e8:05:19:31:33:89:3e: e7:28:72:57:32:26:23:0e:42:6b:b5:68:c9:29:a7: df:a1:ec:c1:1d:39:cc:94:b4:c4:63:45:26:a4:b4: 9a:04:3d:45:dc:38:6c:1f:60:cb:8c:f6:39:1b:1f: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E5:F8:09:E1:74:E5:B5:D2:21:99:EA:23:11:BD:6F:41:62:B0:29 X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c0:96:a4:8e:5d:1b:27:2c:6a:dd:fc:db:85:cb:3f:be:a6: ff:55:6e:c0:93:41:cb:c0:51:9f:df:b7:8b:37:b6:f6:c9:34: ae:e1:3b:0a:c5:ae:2b:96:f4:c7:c1:4b:04:42:21:0f:0d:15: 07:65:ea:45:eb:d8:d8:ee:af:67:de:df:12:ac:08:d7:53:7b: bb:ef:fc:a5:f7:1c:24:fa:f0:5c:c3:a0:d5:44:10:d8:5e:5f: 14:41:d9:b8:fc:bf:17:bc:89:20:09:e4:68:39:ed:cb:22:c1: ea:4e:72:ca:33:ca:e4:ac:d4:f4:b4:49:ab:f8:7b:49:69:64: 58:e4:08:a3:fa:f2:2c:ca:8c:5c:74:dc:2a:8a:ce:e8:35:b8: 30:05:24:a5:d0:d6:9e:48:ab:a8:c7:0f:f1:b2:6f:d7:77:e2: f4:ef:cb:b9:95:63:4f:c9:6a:3f:ea:83:cb:00:fe:36:23:3d: c0:fc:13:d6:14:40:5e:fd:93:aa:a1:52:46:37:48:4b:48:92: 0b:c1:22:b7:1a:a7:7f:10:1f:76:97:88:90:60:ad:8e:2f:b4: 3a:18:dd:6c:73:73:89:18:b5:70:9b:1a:1f:2b:bf:c7:c1:d0: 7c:fb:4c:41:b8:59:c1:08:e3:a9:cf:e3:ea:1d:1d:4d:7c:f9: 1a:d7:bb:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUwNzE5MDMyNjI3WhcNMjUwNzI2MDMyNjI3WjAYMRYwFAYD VQQDEw02ODdiMTA2My0yNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT6OovyVDEKYfKbMKslnaoMbMhm6yqB14chkTUwTtWrKgYL0qokc/CrzKaCD wb/8MKg73bBQ23GdtB+4W1BbkkWAvi2aMAdnZVOI1FneD7cvvmoXdhyyXY0Ti6RC /1KnIPcs3kWWIiHWIudP9PvrfZSaG3rzQQPbM7zWuhNTf2yfVhrmJ+lcMvcsaRsX Qc6NikJ/Vy5Yu8uM0rXpNSjiy2Xohc6w0LNmDiVPBgbA5Lx2Oc/WQgPRyyA+j+zz nb6EHol3g5N79rUX9+gFGTEziT7nKHJXMiYjDkJrtWjJKaffoezBHTnMlLTEY0Um pLSaBD1F3DhsH2DLjPY5Gx9f/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvl+Anh dOW10iGZ6iMRvW9BYrApMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLwJakjl0bJyxq3fzbhcs/vqb/VW7Ak0HLwFGf37eLN7b2yTSu4TsK xa4rlvTHwUsEQiEPDRUHZepF69jY7q9n3t8SrAjXU3u77/yl9xwk+vBcw6DVRBDY Xl8UQdm4/L8XvIkgCeRoOe3LIsHqTnLKM8rkrNT0tEmr+HtJaWRY5Aij+vIsyoxc dNwqis7oNbgwBSSl0NaeSKuoxw/xsm/Xd+L078u5lWNPyWo/6oPLAP42Iz3A/BPW FEBe/ZOqoVJGN0hLSJILwSK3Gqd/EB92l4iQYK2OL7Q6GN1sc3OJGLVwmxofK7/H wdB8+0xBuFnBCOOpz+PqHR1NfPka17sE -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:10 2025 by rpki-client