$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: eqNJiubv8oDQCwA18WIhzPQFo92ZVcFPyNEdE3LVwUs= Subject key identifier: 41:AC:D0:28:92:48:55:39:E6:17:62:EF:CB:C7:52:77:80:D9:EB:0C Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 7C Signing time: Fri 25 Jul 2025 07:09:26 +0000 Manifest this update: Fri 25 Jul 2025 07:09:25 +0000 Manifest next update: Fri 01 Aug 2025 07:09:25 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: NvD3h1HuyeCG60AK2EjfdoKEbqK/ptScxwl5DnP1gY8=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: 1aGxRTXwu6ybjRU4JNrtMNFs2xwtsiTJtnAFcF9bvmg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: FC93rdM/vdZQAg1QRdAMhOId3DELs7nG9wTwZW4DnWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Jul 25 07:09:25 2025 GMT Not After : Aug 1 07:09:25 2025 GMT Subject: CN=68832da5-bbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:22:c1:db:5c:a7:a3:70:bf:bd:ba:bf:88: fc:bd:c5:3a:23:81:24:63:d8:77:6f:fd:d2:13:2d: 15:1c:9e:ee:03:60:53:8c:24:f1:c4:96:da:4c:9c: 7c:07:52:3d:73:c9:86:e3:bc:9f:bb:8a:d8:3e:e1: 45:19:69:20:bd:7c:75:7d:85:44:32:30:29:5a:03: d3:07:d1:43:d3:07:10:2a:ae:b7:4d:70:01:25:88: 65:d2:86:6a:99:87:b1:e7:fd:6d:d7:71:4e:e9:9e: 57:1e:bf:67:60:9b:dd:05:69:21:0c:ca:8a:36:12: 8a:c6:c0:b6:e4:ce:a6:26:0b:bf:4d:4c:9c:9a:13: 26:5a:e3:2e:d4:7f:2b:37:4f:79:4b:3e:ea:cc:38: 1e:45:64:e2:13:f9:50:03:87:f3:9b:be:d4:c0:37: 47:ec:e1:bd:08:5a:dc:80:ef:b8:d9:62:8b:df:5a: 5e:7f:a6:82:8b:03:c0:8b:73:c8:2a:05:9e:f0:49: 3f:a7:2b:b2:fa:8b:6c:34:f8:ba:a3:dd:af:c8:8c: 3f:67:b8:b3:10:2c:01:2e:d6:c0:c1:89:3a:39:9f: 99:9e:08:d7:0d:00:85:37:6f:b2:28:a1:38:02:f6: 2e:8f:df:33:e1:b8:ef:07:df:8a:0d:9c:4b:a5:28: 1c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AC:D0:28:92:48:55:39:E6:17:62:EF:CB:C7:52:77:80:D9:EB:0C X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ed:b6:2c:1e:cb:e0:d4:0e:e0:e4:db:c8:38:92:97:c9:41: e8:24:1d:60:d1:d7:45:a6:4c:bc:74:3c:1f:f3:5c:8d:3d:d9: ca:26:b1:a1:fd:d3:0b:53:2b:99:ac:3c:d8:71:df:68:57:90: 58:25:64:38:51:af:4e:87:f9:81:e0:16:1d:fa:7d:f2:bd:e1: 71:30:4c:2e:fd:33:c7:12:51:1b:d0:3b:a0:09:26:f2:cb:ba: 29:ae:6c:6a:8c:c6:94:20:4a:9c:40:38:bb:14:b1:58:cf:03: 14:ef:c0:62:a1:d2:bb:08:09:5a:b0:82:43:16:5b:9e:9a:80: ed:5d:8e:d4:98:81:85:a5:f1:15:9c:1f:83:9b:3a:f7:c8:04: 71:66:60:0a:04:72:14:0d:69:e1:34:58:09:2e:f2:72:78:b6: 1c:8b:b7:aa:63:30:e5:3c:ce:89:5b:e4:11:6e:ff:08:68:7e: aa:5a:27:9a:48:49:e7:e7:f3:32:13:51:3b:7f:a6:60:13:8d: 80:9f:34:44:4d:dd:75:94:df:37:90:10:c8:c6:88:11:73:ee: 42:c3:bd:ea:de:d6:25:83:35:a1:c5:a5:e4:8e:5a:0f:af:b6: 95:ec:26:eb:bc:3a:df:f2:5a:5e:82:57:52:0a:76:6d:0d:2b: bb:29:04:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjUwNzI1MDcwOTI1WhcNMjUwODAxMDcwOTI1WjAYMRYwFAYD VQQDEw02ODgzMmRhNS1iYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wEiwdtcp6Nwv726v4j8vcU6I4EkY9h3b/3SEy0VHJ7uA2BTjCTxxJbaTJx8 B1I9c8mG47yfu4rYPuFFGWkgvXx1fYVEMjApWgPTB9FD0wcQKq63TXABJYhl0oZq mYex5/1t13FO6Z5XHr9nYJvdBWkhDMqKNhKKxsC25M6mJgu/TUycmhMmWuMu1H8r N095Sz7qzDgeRWTiE/lQA4fzm77UwDdH7OG9CFrcgO+42WKL31pef6aCiwPAi3PI KgWe8Ek/pyuy+otsNPi6o92vyIw/Z7izECwBLtbAwYk6OZ+ZngjXDQCFN2+yKKE4 AvYuj98z4bjvB9+KDZxLpSgczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGs0CiS SFU55hdi78vHUneA2esMMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC07bYsHsvg1A7g5NvIOJKXyUHoJB1g0ddFpky8dDwf81yNPdnKJrGh /dMLUyuZrDzYcd9oV5BYJWQ4Ua9Oh/mB4BYd+n3yveFxMEwu/TPHElEb0DugCSby y7oprmxqjMaUIEqcQDi7FLFYzwMU78BiodK7CAlasIJDFluemoDtXY7UmIGFpfEV nB+Dmzr3yARxZmAKBHIUDWnhNFgJLvJyeLYci7eqYzDlPM6JW+QRbv8IaH6qWiea SEnn5/MyE1E7f6ZgE42AnzRETd11lN83kBDIxogRc+5Cw73q3tYlgzWhxaXkjloP r7aV7CbrvDrf8lpegldSCnZtDSu7KQSK -----END CERTIFICATE-----Generated at Sat Jul 26 17:31:41 2025 by rpki-client