$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft File: HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json) Hash identifier: mvuJj/+2xh3BBX0+OG1I1/hkRalJio2hJ1sgese2XEo= Subject key identifier: 70:2A:20:58:B4:3E:B9:C4:F8:1B:03:0A:5F:33:BC:FA:2D:01:28:F4 Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft Manifest number: 4A Signing time: Fri 25 Jul 2025 07:42:32 +0000 Manifest this update: Fri 25 Jul 2025 07:42:31 +0000 Manifest next update: Fri 01 Aug 2025 07:42:31 +0000 Files and hashes: 1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: ER+V7Uy0V+9prEgKA+uW390Shyz/XImeab335DyInNQ=) 2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: UFgylA3DVYfccb8XdgcDubKXiQ2Mtm89Z4YEW6R99s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Validity Not Before: Jul 25 07:42:31 2025 GMT Not After : Aug 1 07:42:31 2025 GMT Subject: CN=68833567-1741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:c1:92:5e:af:cf:43:42:e3:2f:38:16:ae: fa:86:bc:33:dd:0e:eb:35:2e:89:93:af:c3:7e:ea: 8c:00:bf:9e:59:05:a3:9a:62:16:5d:bc:d3:de:c3: 4a:72:b9:fe:57:98:5a:14:71:5b:4c:f8:a0:1c:f6: bc:57:93:11:21:90:03:fa:ec:9e:52:3c:2c:ec:0c: 94:10:86:ac:ff:0e:5d:df:a6:8d:62:11:6c:b7:66: c2:0a:04:e8:87:77:75:a0:d2:58:93:33:4b:9a:e7: 62:15:9b:6d:5f:54:1e:03:ff:8f:64:5e:fb:1b:be: 29:24:d8:ac:61:0e:17:84:d5:51:17:10:83:dd:e8: fd:14:b3:fe:9e:60:b3:bf:81:c0:61:9e:f1:e3:15: 8c:0b:1a:a9:f3:26:bb:8e:17:e0:9e:fe:08:64:9c: dc:a5:5a:fa:77:55:18:39:55:99:cd:38:99:81:dc: df:40:5f:fe:5a:e1:a7:12:e9:f6:d1:12:30:18:22: 89:09:09:e3:09:6e:50:e0:e0:50:7f:63:cc:48:ce: 76:5f:f3:09:42:46:be:eb:08:62:7f:5f:78:33:f7: 6e:92:5e:91:ab:2d:60:73:7d:f8:32:87:fa:19:01: 8a:60:7c:86:e8:5a:fc:99:b7:ee:e5:22:32:41:eb: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2A:20:58:B4:3E:B9:C4:F8:1B:03:0A:5F:33:BC:FA:2D:01:28:F4 X509v3 Authority Key Identifier: keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d7:14:d7:15:61:70:b6:63:a7:de:95:c8:14:00:9a:ea:19: 5e:60:a5:a5:6d:85:95:9b:1a:48:44:54:8c:ac:7e:ae:89:9c: e2:ec:2a:28:7e:e7:1a:40:bc:6f:b3:c0:33:8d:99:cf:5d:1e: ba:3d:07:fc:ea:43:ba:f2:14:e6:11:5b:0d:0a:3d:c9:c8:60: 7a:19:f7:81:1d:c1:dc:b5:67:fb:c6:69:81:2d:7a:c1:8d:f0: fa:2e:ea:f3:fd:32:59:ac:38:07:33:f2:9f:be:fb:b4:6a:14: 5f:09:19:61:b8:11:ae:4b:9b:e4:15:58:b3:94:72:cc:43:96: 4c:cb:2c:d8:51:e5:36:1d:06:23:8d:30:0b:8f:db:0b:5d:bf: a1:ac:62:71:b9:c6:25:ca:67:66:a7:3e:a1:c4:f0:4b:52:e3: 8f:ea:7e:f1:19:2a:4f:12:d0:8e:19:19:d2:22:83:2a:0c:b6: 58:5b:29:dd:bd:15:87:87:db:41:00:89:f3:06:6b:ca:a6:5d: 44:77:bd:42:5a:30:f8:3d:c9:16:44:27:8c:5b:88:83:05:b4: bb:e0:7a:f9:b8:db:9a:1a:d8:a7:f9:ba:61:92:d6:e3:56:23: bc:57:6b:4d:55:63:c8:77:d7:0d:52:df:d2:98:9c:bf:ac:e0: df:80:e5:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTQ5ODExMC8GA1UEBRMoMUNERTEyNDRDQkJCOTY1NDJFNkM4QjA5QTNEQUMxQzFC NDQzNjhENzAeFw0yNTA3MjUwNzQyMzFaFw0yNTA4MDEwNzQyMzFaMBgxFjAUBgNV BAMTDTY4ODMzNTY3LTE3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDidsGSXq/PQ0LjLzgWrvqGvDPdDus1LomTr8N+6owAv55ZBaOaYhZdvNPew0py uf5XmFoUcVtM+KAc9rxXkxEhkAP67J5SPCzsDJQQhqz/Dl3fpo1iEWy3ZsIKBOiH d3Wg0liTM0ua52IVm21fVB4D/49kXvsbvikk2KxhDheE1VEXEIPd6P0Us/6eYLO/ gcBhnvHjFYwLGqnzJruOF+Ce/ghknNylWvp3VRg5VZnNOJmB3N9AX/5a4acS6fbR EjAYIokJCeMJblDg4FB/Y8xIznZf8wlCRr7rCGJ/X3gz926SXpGrLWBzffgyh/oZ AYpgfIboWvyZt+7lIjJB6ykzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcCogWLQ+ ucT4GwMKXzO8+i0BKPQwHwYDVR0jBBgwFoAUHN4SRMu7llQubIsJo9rBwbRDaNcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNDk4L0QyREVEMzQ2Rjgw OTExRUZBNTI4MUIxNkM0RjlBRTAyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFO Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSE40U1JNdTdsbFF1YklzSm85ckJ3YlJEYU5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NDk4L0QyREVEMzQ2RjgwOTExRUZBNTI4MUIxNkM0RjlBRTAyL0hONFNSTXU3bGxR dWJJc0pvOXJCd2JSRGFOYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMjXFNcVYXC2Y6felcgUAJrqGV5gpaVthZWbGkhEVIysfq6JnOLsKih+ 5xpAvG+zwDONmc9dHro9B/zqQ7ryFOYRWw0KPcnIYHoZ94Edwdy1Z/vGaYEtesGN 8Pou6vP9MlmsOAcz8p+++7RqFF8JGWG4Ea5Lm+QVWLOUcsxDlkzLLNhR5TYdBiON MAuP2wtdv6GsYnG5xiXKZ2anPqHE8EtS44/qfvEZKk8S0I4ZGdIigyoMtlhbKd29 FYeH20EAifMGa8qmXUR3vUJaMPg9yRZEJ4xbiIMFtLvgevm425oa2Kf5umGS1uNW I7xXa01VY8h31w1S39KYnL+s4N+A5cg= -----END CERTIFICATE-----Generated at Sat Jul 26 05:45:11 2025 by rpki-client