$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft File: HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json) Hash identifier: hG8nCKdIVLLVh92AY8CuVoT6fs4JnbmxkhmpezFZL2A= Subject key identifier: 1D:5F:03:26:6E:20:E1:04:9A:CD:7F:27:34:FC:6C:15:B1:27:02:73 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft Manifest number: 0D8D Signing time: Fri 18 Jul 2025 18:07:22 +0000 Manifest this update: Fri 18 Jul 2025 18:07:22 +0000 Manifest next update: Fri 25 Jul 2025 18:07:22 +0000 Files and hashes: 1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: QPjImCbpDHRjrcbnxrrmijvJh/0vojm68A3iUo4iMgc=) 2: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: u8GCpF3JjtF0fC5bHONBso6P9ZKL07gluzKPfJhmpXI=) 3: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: 9OL0Nn9V+ede9DJf9mkaMrtLaF0tRZO3OAn8HvMuFRw=) 4: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: ccQHTXT/JWlYkUSlrHBZlxj0fPuZnF/MXZqxQxgBSSk=) 5: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: JsvlnopzOaOKTX3AuOnQGEvn3QbobkZ0VGpy6s7Zufs=) 6: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: W9F0AxXLeTRt9akhBBWzGaKX1wJNYfdBQQ5r+SkSiyU=) 7: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: TgzuO7T0sgwTCl2sRbtN58HlHEFkWtWHdI30YEepdig=) 8: F2826A504FCF11EB88444467C4F9AE02.roa (hash: QqSGad7FxeptCh4lzX5ee03GteRq4SxJe8s+1HGe3x4=) 9: D0551B50046411F09760073DC4F9AE02.roa (hash: Ml6MHIFRGUbHxsyGVzTTlekIkq7JzuhUAzoayMJcf6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: Jul 18 18:07:22 2025 GMT Not After : Jul 25 18:07:22 2025 GMT Subject: CN=687a8d5a-6082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:f8:ad:c9:4b:49:20:c6:79:8c:7f:45:69: fa:56:ff:06:67:0e:8a:01:09:56:7e:4d:e5:23:0f: a5:68:2d:78:e2:af:b6:ed:b0:fc:38:a2:e5:61:cb: 6f:3a:d6:2a:bc:6b:00:03:25:55:d8:12:5c:a9:95: 15:5a:9d:26:e3:ae:a5:ff:db:3c:9f:bd:fa:49:d9: ba:af:85:c1:71:d6:ef:47:e2:4c:b4:2d:f4:e0:46: ab:e7:23:5e:51:d1:71:6e:3a:85:16:70:b9:6c:0f: bc:2c:45:ca:5b:23:e2:84:5e:0b:f8:a6:0c:fb:a5: a4:0a:6f:fe:9b:f8:99:bc:77:cf:5b:36:aa:eb:6f: 72:53:e7:fd:5d:0f:d8:4b:67:24:13:3a:07:ff:3f: 79:db:2e:f7:e7:3d:d3:07:8e:a6:0c:48:f4:40:e2: 1e:82:e3:87:ab:34:be:06:0f:43:94:f5:97:b5:45: d2:11:ab:cf:03:62:e3:32:38:a5:92:d2:3c:32:99: cf:f1:4f:c6:70:35:b4:e6:fd:11:74:2e:75:cc:ca: f9:0d:d5:0e:69:75:d4:68:44:29:50:ba:a7:cc:55: a9:5f:3a:c9:e1:98:17:5e:31:0f:c6:f5:48:18:f8: 0f:7d:0d:30:69:32:68:67:bc:4e:e3:82:ca:02:a4: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5F:03:26:6E:20:E1:04:9A:CD:7F:27:34:FC:6C:15:B1:27:02:73 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:87:63:be:0c:ba:b4:2a:89:66:62:4d:d0:ea:a9:f1:22:bb: 1b:2a:63:1b:74:70:ff:cb:54:85:1b:c7:29:d5:98:9f:e0:16: a9:6f:de:6a:79:f2:b6:9e:11:93:fc:ff:72:0f:e4:f6:54:05: 7b:76:4b:2e:c9:6a:f2:88:f1:2e:22:2b:a8:59:e8:b8:a7:bb: 1a:df:42:3d:76:08:16:6f:e7:99:80:a5:57:d5:33:28:ab:6a: e6:21:3f:b7:44:21:e1:4c:0a:46:8f:81:9c:4b:df:89:3f:31: ef:76:89:39:2f:89:de:59:00:c4:cf:dd:7a:41:da:a0:3c:dd: da:22:b0:3e:4f:14:9b:a2:3a:bc:81:31:43:bf:29:58:48:63: a6:9d:d6:1a:d7:9d:b0:18:4b:ee:3f:35:42:91:ab:59:e8:aa: dc:58:7f:9a:4a:69:86:35:80:99:7f:42:5e:d3:81:d7:b7:20: 3f:4b:6a:20:e5:40:4c:81:ef:e5:d2:74:d2:1d:05:d3:70:d1: f4:d1:da:f7:f7:4a:de:c9:1f:97:cb:99:73:69:32:f2:35:53: e4:35:e9:15:6d:ea:00:fe:74:d8:da:09:a6:7c:83:28:65:92: 9b:10:dc:82:a4:13:bc:40:be:cd:09:e9:89:fc:72:73:54:e9: 66:e1:33:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNzE4MTgwNzIyWhcNMjUwNzI1MTgwNzIyWjAYMRYwFAYD VQQDEw02ODdhOGQ1YS02MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDb4rclLSSDGeYx/RWn6Vv8GZw6KAQlWfk3lIw+laC144q+27bD8OKLlYctv OtYqvGsAAyVV2BJcqZUVWp0m466l/9s8n736Sdm6r4XBcdbvR+JMtC304Ear5yNe UdFxbjqFFnC5bA+8LEXKWyPihF4L+KYM+6WkCm/+m/iZvHfPWzaq629yU+f9XQ/Y S2ckEzoH/z952y735z3TB46mDEj0QOIeguOHqzS+Bg9DlPWXtUXSEavPA2LjMjil ktI8MpnP8U/GcDW05v0RdC51zMr5DdUOaXXUaEQpULqnzFWpXzrJ4ZgXXjEPxvVI GPgPfQ0waTJoZ7xO44LKAqSK3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1fAyZu IOEEms1/JzT8bBWxJwJzMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1 bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUh2O+DLq0KolmYk3Q6qnxIrsbKmMbdHD/y1SFG8cp1Zif4Bapb95q efK2nhGT/P9yD+T2VAV7dksuyWryiPEuIiuoWei4p7sa30I9dggWb+eZgKVX1TMo q2rmIT+3RCHhTApGj4GcS9+JPzHvdok5L4neWQDEz916QdqgPN3aIrA+TxSbojq8 gTFDvylYSGOmndYa152wGEvuPzVCkatZ6KrcWH+aSmmGNYCZf0Je04HXtyA/S2og 5UBMge/l0nTSHQXTcNH00dr390reyR+Xy5lzaTLyNVPkNekVbeoA/nTY2gmmfIMo ZZKbENyCpBO8QL7NCemJ/HJzVOlm4TMI -----END CERTIFICATE-----Generated at Sun Jul 20 10:12:00 2025 by rpki-client