$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json) Hash identifier: YSaeZTKzvQ7HoVxCqmG4lCK0yxKEDA8J8pOSiBZcdVs= Subject key identifier: B4:6D:B0:7F:FF:6D:C2:F8:56:4B:BE:F0:2F:FD:43:68:DB:EE:AB:42 Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft Manifest number: 0787 Signing time: Sun 20 Jul 2025 22:48:25 +0000 Manifest this update: Sun 20 Jul 2025 22:48:24 +0000 Manifest next update: Sun 27 Jul 2025 22:48:24 +0000 Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: rwUbvyM9saFAVf7zl6utTr7aE86exLmjLE2sPKnfmMU=) 2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Validity Not Before: Jul 20 22:48:24 2025 GMT Not After : Jul 27 22:48:24 2025 GMT Subject: CN=687d7239-9e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:bd:0c:69:31:91:f8:c5:91:a6:74:82:e8: a2:fb:e9:50:42:41:8c:58:07:2d:a4:48:a0:54:ec: 83:9a:79:3a:55:fa:5e:48:a0:40:68:1f:9f:9e:46: 47:68:e0:09:52:27:09:c6:30:86:9c:86:12:a8:67: 8d:73:b2:c2:40:77:e1:d0:d8:d7:cb:47:bc:bb:b4: 77:3d:35:c5:82:e2:8e:64:2c:7a:be:da:3e:5f:df: 5a:1e:01:a6:c1:62:7c:ad:50:49:24:a3:d2:4b:7b: a9:5b:3b:da:b6:dc:11:60:5b:74:be:4a:78:09:15: 46:03:59:55:e1:c8:1b:68:5f:0f:fe:ac:33:a6:92: 53:ce:80:93:95:84:68:27:1f:85:8b:ac:c9:a4:30: 14:88:5e:0e:c0:e2:54:82:db:89:9d:86:e9:1a:53: 2b:bf:a6:85:71:75:4d:38:e3:f5:27:94:1b:63:ea: ed:3e:44:0b:3b:ae:e2:97:f0:db:ac:86:87:a4:c8: 34:83:c8:6c:94:38:a3:4c:c5:88:b3:0b:4a:73:05: 26:b9:ec:5c:7f:d6:65:ae:1a:de:a4:41:02:44:d8: 99:11:d7:d6:14:78:40:33:41:af:ca:0c:75:3c:b6: 0a:8f:45:ae:2e:51:26:eb:09:75:14:62:ee:37:c3: b4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:B0:7F:FF:6D:C2:F8:56:4B:BE:F0:2F:FD:43:68:DB:EE:AB:42 X509v3 Authority Key Identifier: keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:c2:f5:dc:32:d0:14:64:bf:16:0f:df:43:a9:af:dc:c1: 98:ae:dd:11:48:ec:c5:00:e9:97:a5:63:8f:35:df:79:c3:2c: a3:94:57:b7:dc:99:60:84:d3:d5:86:43:3a:be:b0:3f:40:42: 23:c3:d9:f2:d2:e5:66:35:b6:d2:5f:9b:5b:9d:cb:ad:6a:bb: f5:6d:62:2a:0c:9f:19:d2:0e:39:1f:79:51:22:07:41:6e:f4: 44:54:74:fc:5e:d7:09:4e:a3:6b:a0:ff:80:94:bb:7c:73:33: 26:71:e0:74:3f:2a:8d:e6:84:68:e0:fe:fb:27:74:97:d5:5c: db:7d:2e:dc:b2:9d:62:e9:50:47:cd:b7:60:53:bd:61:3f:af: 02:31:66:7d:d2:37:52:30:5f:e9:cc:91:ca:84:28:50:aa:70: 47:6f:e2:8b:80:e6:7a:68:fd:33:24:fe:00:4e:24:63:dd:13: 0d:0b:ec:7f:97:0b:bc:29:fc:d7:b5:fc:fd:e6:0c:e4:34:6d: 9b:f6:39:66:a4:cb:03:27:7f:e1:d6:db:c7:ad:45:76:c5:30: 70:61:1f:1a:12:ed:bc:c4:40:03:2e:83:dd:bd:f4:23:1c:a6: 60:1f:36:48:d3:8b:51:17:8c:e7:b6:24:fb:78:08:36:ec:78: d8:a7:42:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5NjMxMTAvBgNVBAUTKDFENDkyRkEzRjNCMjk1ODA0OTVBNjg4MEQ0MDRFRTBD MzcwQUQ5MjUwHhcNMjUwNzIwMjI0ODI0WhcNMjUwNzI3MjI0ODI0WjAYMRYwFAYD VQQDEw02ODdkNzIzOS05ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Gq9DGkxkfjFkaZ0guii++lQQkGMWActpEigVOyDmnk6VfpeSKBAaB+fnkZH aOAJUicJxjCGnIYSqGeNc7LCQHfh0NjXy0e8u7R3PTXFguKOZCx6vto+X99aHgGm wWJ8rVBJJKPSS3upWzvattwRYFt0vkp4CRVGA1lV4cgbaF8P/qwzppJTzoCTlYRo Jx+Fi6zJpDAUiF4OwOJUgtuJnYbpGlMrv6aFcXVNOOP1J5QbY+rtPkQLO67il/Db rIaHpMg0g8hslDijTMWIswtKcwUmuexcf9ZlrhrepEECRNiZEdfWFHhAM0Gvygx1 PLYKj0WuLlEm6wl1FGLuN8O0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRtsH// bcL4Vku+8C/9Q2jb7qtCMB8GA1UdIwQYMBaAFB1JL6PzspWASVpogNQE7gw3Ctkl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3 RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZQkpXbWlBMUFUdUREY0sy U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVa3ZvX095bFlCSldtaUExQVR1RERjSzJTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZ QkpXbWlBMUFUdUREY0syU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgML13DLQFGS/Fg/fQ6mv3MGYrt0RSOzFAOmXpWOPNd95wyyjlFe3 3JlghNPVhkM6vrA/QEIjw9ny0uVmNbbSX5tbncutarv1bWIqDJ8Z0g45H3lRIgdB bvREVHT8XtcJTqNroP+AlLt8czMmceB0PyqN5oRo4P77J3SX1VzbfS7csp1i6VBH zbdgU71hP68CMWZ90jdSMF/pzJHKhChQqnBHb+KLgOZ6aP0zJP4ATiRj3RMNC+x/ lwu8KfzXtfz95gzkNG2b9jlmpMsDJ3/h1tvHrUV2xTBwYR8aEu28xEADLoPdvfQj HKZgHzZI04tRF4zntiT7eAg27HjYp0Lg -----END CERTIFICATE-----Generated at Mon Jul 21 07:13:11 2025 by rpki-client