$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: 38txcljrveQH8ZuJCMAJle6UxMLvzwFJMNJmmwQ0MhU= Subject key identifier: 7E:FD:CD:70:27:76:1D:71:95:B0:F1:AE:42:94:B4:2F:C3:C2:FC:E8 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01F4 Signing time: Sat 19 Jul 2025 02:49:30 +0000 Manifest this update: Sat 19 Jul 2025 02:49:29 +0000 Manifest next update: Sat 26 Jul 2025 02:49:29 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: cxKukXgD8NCGxodUT1g+K8CtWVMsHYnsgcj96MB/4D0=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OxFOcvwColoaxplUUzeWODF1QwobCLhtGfjV874lFQM=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: QHxe/wWqzwNVIDLAM9edUwMUGE9Cp2KpjH57VB1iuhs=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Jul 19 02:49:29 2025 GMT Not After : Jul 26 02:49:29 2025 GMT Subject: CN=687b07ba-5ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:17:be:8a:a3:f5:c6:43:0b:35:58:7b:80: 48:60:96:ff:5a:bb:19:17:ac:7e:64:d5:fd:f5:ce: 71:6a:40:50:3e:99:9e:73:04:a3:58:bc:a2:b1:77: b1:47:7e:a4:54:99:2e:67:6b:f6:9f:1c:bd:fa:7d: 5b:0e:7e:50:47:33:fd:21:a8:62:68:83:b1:41:79: f3:0e:74:cd:17:47:32:96:cd:fe:2b:ea:56:e0:e2: 52:b7:b2:fc:26:3e:16:25:aa:bf:99:e5:4f:64:31: f5:4a:68:3e:b2:11:77:7c:cc:a1:1b:ce:be:aa:9a: 89:57:db:6f:6a:4b:f2:f6:30:e6:81:a8:86:40:3d: 47:4e:aa:46:d0:28:53:cf:45:90:f4:49:2b:4a:31: d9:7c:1f:93:7c:80:6c:6c:5b:23:b2:15:26:5a:2d: 90:32:9b:00:17:cc:b0:be:45:a9:d2:6d:b6:2f:1e: 9e:1b:52:86:ca:b4:53:d1:83:3f:0f:ab:cc:1d:9a: b3:b5:e8:6f:d2:64:ab:b4:a0:6b:bc:d2:6b:d7:0d: 1d:70:50:e3:34:cd:da:3e:f4:fc:a5:08:34:6a:a7: e2:4f:fc:44:9f:df:ca:0a:e1:c7:e9:03:bd:d1:7c: e5:7d:d3:2c:fb:85:07:89:65:de:b0:e3:8e:e3:13: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FD:CD:70:27:76:1D:71:95:B0:F1:AE:42:94:B4:2F:C3:C2:FC:E8 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:f6:f0:76:fe:2f:c7:c7:fb:b4:45:74:06:e6:e7:a8:a3: 0e:c7:e8:a0:6e:ed:f1:61:b3:bd:88:5b:b6:0c:7a:9d:35:b6: 00:73:15:88:59:60:c7:2e:ef:a8:33:fd:a7:9d:2c:0f:e0:ea: c4:e4:11:a9:be:26:cf:f8:dc:88:c3:45:1c:9f:53:42:5a:8c: b4:e6:79:ce:15:ad:80:b3:e3:48:cf:8b:50:32:5a:ab:de:b5: 4f:5d:8e:eb:9f:a7:63:0d:a6:c9:33:e7:03:15:bd:d7:26:9f: 72:e7:49:1e:bf:7f:8e:96:e3:9d:bf:e8:2f:7c:7d:08:0b:9e: 13:dd:a3:1b:58:46:f4:f6:f6:f6:90:bd:78:dc:d9:e1:83:b7: 7b:1b:dd:77:1c:53:79:d7:42:24:e0:8b:ae:5d:8d:06:50:87: 0a:08:aa:0a:7d:29:92:d1:53:5c:1d:8f:d7:ab:04:f1:82:be: 31:04:6c:c6:bf:e7:3f:0e:91:68:88:4a:a4:d6:69:8f:c5:27: 1d:af:c5:57:1c:1c:11:7f:1b:58:94:bb:a5:bb:84:fd:02:89: 3c:a1:30:3e:20:82:9f:3a:b9:e6:34:b6:b6:68:21:b2:6c:31: 1c:08:d6:43:ca:4b:71:77:e0:ba:73:c7:3f:1e:54:1e:07:3e: 98:5f:d3:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwNzE5MDI0OTI5WhcNMjUwNzI2MDI0OTI5WjAYMRYwFAYD VQQDEw02ODdiMDdiYS01ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz74Xvoqj9cZDCzVYe4BIYJb/WrsZF6x+ZNX99c5xakBQPpmecwSjWLyisXex R36kVJkuZ2v2nxy9+n1bDn5QRzP9IahiaIOxQXnzDnTNF0cyls3+K+pW4OJSt7L8 Jj4WJaq/meVPZDH1Smg+shF3fMyhG86+qpqJV9tvakvy9jDmgaiGQD1HTqpG0ChT z0WQ9EkrSjHZfB+TfIBsbFsjshUmWi2QMpsAF8ywvkWp0m22Lx6eG1KGyrRT0YM/ D6vMHZqztehv0mSrtKBrvNJr1w0dcFDjNM3aPvT8pQg0aqfiT/xEn9/KCuHH6QO9 0XzlfdMs+4UHiWXesOOO4xN+TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH79zXAn dh1xlbDxrkKUtC/DwvzoMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiXfbwdv4vx8f7tEV0BubnqKMOx+igbu3xYbO9iFu2DHqdNbYAcxWI WWDHLu+oM/2nnSwP4OrE5BGpvibP+NyIw0Ucn1NCWoy05nnOFa2As+NIz4tQMlqr 3rVPXY7rn6djDabJM+cDFb3XJp9y50kev3+OluOdv+gvfH0IC54T3aMbWEb09vb2 kL143Nnhg7d7G913HFN510Ik4IuuXY0GUIcKCKoKfSmS0VNcHY/XqwTxgr4xBGzG v+c/DpFoiEqk1mmPxScdr8VXHBwRfxtYlLulu4T9Aok8oTA+IIKfOrnmNLa2aCGy bDEcCNZDyktxd+C6c8c/HlQeBz6YX9NM -----END CERTIFICATE-----Generated at Sun Jul 20 17:26:45 2025 by rpki-client