$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: ilB3bOBgVvbtXX0xo8CAr1oTBqQOZbHDcR6bF/6oymI= Subject key identifier: 5B:05:F8:72:2A:00:1A:D5:39:ED:9E:2D:71:FE:F9:F5:7E:46:0C:4A Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 0111 Signing time: Mon 21 Jul 2025 05:09:35 +0000 Manifest this update: Mon 21 Jul 2025 05:09:34 +0000 Manifest next update: Mon 28 Jul 2025 05:09:34 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: n+BlWXi+QoMAswrM3hEQ7dIjw9nG7P+xJRikn6UOcFA=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Jul 21 05:09:34 2025 GMT Not After : Jul 28 05:09:34 2025 GMT Subject: CN=687dcb8e-468d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:d6:8a:46:d7:13:a7:e1:74:89:c2:12:a1: 89:48:a6:4f:b5:dd:b9:4d:54:c8:90:28:d8:95:7e: 8a:c8:dc:12:9d:48:17:06:a8:8f:1e:33:ec:b0:e2: e1:9f:61:6c:71:28:3f:f9:81:f5:15:43:11:56:bc: 4d:7b:d0:3c:13:29:60:32:c0:c6:3c:26:ae:73:cf: 0b:cd:be:0e:4e:fc:69:c2:e3:a9:ab:0f:27:ef:58: 35:95:f3:b1:69:d4:75:7f:0c:d8:36:21:33:33:78: 26:3c:b8:9d:10:8f:cb:a2:72:fd:fc:38:fc:f0:3d: ea:68:3c:00:9e:8d:f0:a1:2e:45:60:38:48:0e:7e: 0b:89:4e:9f:6e:3c:a3:27:f8:8a:9c:d5:d7:d1:bf: 0b:5e:78:ad:aa:d9:8d:ef:26:df:8b:ca:34:48:b9: 92:69:40:d8:b9:f0:62:4a:d1:ac:12:7a:01:8f:70: 2a:d9:14:fd:c9:fd:02:2d:0b:22:80:ab:34:74:70: 30:9d:07:b0:3c:09:91:ca:29:78:40:b2:08:e7:29: 1b:a2:e3:6a:87:70:cb:08:0f:8d:6f:ec:12:1f:1a: 1f:59:e3:82:0d:84:53:4e:a9:fe:eb:24:70:1f:c1: 55:2d:83:46:be:19:32:53:65:8c:f4:75:00:e7:59: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:05:F8:72:2A:00:1A:D5:39:ED:9E:2D:71:FE:F9:F5:7E:46:0C:4A X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:25:6c:a3:4e:db:98:db:8e:9b:83:4a:94:27:5e:08:9d:85: 52:ce:5a:5c:fa:42:e9:d5:76:19:3e:7e:a5:60:26:67:25:58: eb:82:ed:e5:a7:d9:12:25:32:04:b5:61:49:b6:e2:75:04:9b: db:4c:7a:3d:0e:30:b6:91:81:6d:e7:f4:f8:f6:67:a3:1a:97: 24:28:a4:89:f0:f0:38:5a:d5:70:be:12:da:b1:40:1b:a3:60: 0c:83:7e:8f:c9:28:2a:a9:02:fe:2d:66:23:5f:e4:23:97:fd: ba:14:99:c5:c4:54:48:64:af:48:e5:d5:5e:cc:15:c5:c5:2f: 9d:76:9a:8e:92:ae:5a:76:0e:90:b1:3f:e7:66:e2:7e:e9:fa: 7a:cc:92:09:a6:3e:40:91:fa:b1:a5:1b:46:4b:80:68:89:02: dc:3e:b4:6e:54:71:8b:27:e7:19:3d:a9:92:f9:a9:43:93:af: 1a:d0:ef:c2:ab:4b:3f:50:1f:28:ed:9f:55:13:dd:4b:7f:5e: f9:6c:b1:9b:e0:c2:e2:15:7f:00:17:5c:79:60:f8:60:12:b6: c0:0e:2a:88:86:4c:ee:2d:23:d0:5e:32:b4:9e:9f:bd:45:4a: 59:54:1d:e0:9f:1b:67:4f:97:42:e7:f2:d1:18:e1:c5:11:cd: 84:7e:b4:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwNzIxMDUwOTM0WhcNMjUwNzI4MDUwOTM0WjAYMRYwFAYD VQQDEw02ODdkY2I4ZS00NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DjWikbXE6fhdInCEqGJSKZPtd25TVTIkCjYlX6KyNwSnUgXBqiPHjPssOLh n2FscSg/+YH1FUMRVrxNe9A8EylgMsDGPCauc88Lzb4OTvxpwuOpqw8n71g1lfOx adR1fwzYNiEzM3gmPLidEI/LonL9/Dj88D3qaDwAno3woS5FYDhIDn4LiU6fbjyj J/iKnNXX0b8LXnitqtmN7ybfi8o0SLmSaUDYufBiStGsEnoBj3Aq2RT9yf0CLQsi gKs0dHAwnQewPAmRyil4QLII5ykbouNqh3DLCA+Nb+wSHxofWeOCDYRTTqn+6yRw H8FVLYNGvhkyU2WM9HUA51mA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsF+HIq ABrVOe2eLXH++fV+RgxKMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPJWyjTtuY246bg0qUJ14InYVSzlpc+kLp1XYZPn6lYCZnJVjrgu3l p9kSJTIEtWFJtuJ1BJvbTHo9DjC2kYFt5/T49mejGpckKKSJ8PA4WtVwvhLasUAb o2AMg36PySgqqQL+LWYjX+Qjl/26FJnFxFRIZK9I5dVezBXFxS+ddpqOkq5adg6Q sT/nZuJ+6fp6zJIJpj5AkfqxpRtGS4BoiQLcPrRuVHGLJ+cZPamS+alDk68a0O/C q0s/UB8o7Z9VE91Lf175bLGb4MLiFX8AF1x5YPhgErbADiqIhkzuLSPQXjK0np+9 RUpZVB3gnxtnT5dC5/LRGOHFEc2EfrQG -----END CERTIFICATE-----Generated at Wed Jul 23 02:33:07 2025 by rpki-client