$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: ErHGmwZ0wiIpHkdmMff1ourgDjdg8FDGVKURFn1Ubd0= Subject key identifier: B9:A8:AF:A2:C9:77:A9:6F:59:B3:E8:EE:3A:9C:DC:9A:22:18:90:E9 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 1497 Signing time: Sun 20 Jul 2025 16:55:07 +0000 Manifest this update: Sun 20 Jul 2025 16:55:07 +0000 Manifest next update: Sun 27 Jul 2025 16:55:07 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: ZfQH6h22h6Jp5TtzIhSx5BNJqWrr4x5Hhydxcfqoaoc=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5295 (0x14af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Jul 20 16:55:07 2025 GMT Not After : Jul 27 16:55:07 2025 GMT Subject: CN=687d1f6b-1021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:9b:fc:7d:b7:f4:78:58:ab:1a:ba:7e:dc: 65:ab:ce:05:f9:99:eb:b1:9c:7d:62:2b:7b:b5:b9: 2d:b6:e7:68:70:1c:a4:c6:4d:7b:7c:f0:66:14:d6: 41:e9:37:c8:6e:70:6d:e3:8d:4b:74:09:46:d5:8e: 59:45:93:a1:99:fa:12:ad:c1:bc:1e:2e:08:64:ee: 01:3d:2a:71:bd:3a:ce:3e:6d:a9:20:d1:4a:3d:79: d5:93:1e:80:7b:39:a5:ac:49:06:0d:21:de:ca:2e: c4:37:41:aa:8f:0b:24:78:df:74:65:24:c3:84:ec: 76:51:e2:60:d6:b9:71:4d:10:de:2c:4a:1d:c1:74: c9:58:9d:85:ec:99:71:73:c5:6d:d0:9a:b0:7f:b3: a9:16:4c:af:04:40:6f:89:c0:8f:8f:00:c2:3d:a8: 76:79:f7:ad:e1:b6:15:9c:11:44:67:3d:05:4b:35: 19:4b:ea:39:c1:61:9c:97:7b:5d:81:cb:9b:5c:41: f1:62:8a:1a:b3:46:5a:68:cd:40:60:6c:0b:80:63: 6d:e0:23:d0:fe:b6:1e:cb:4b:ca:03:f0:3b:c8:75: c0:6c:86:c1:e5:20:d5:df:42:48:73:e2:bd:53:e2: 04:58:10:32:c4:26:1c:7e:c3:c2:cd:0d:d8:f6:76: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A8:AF:A2:C9:77:A9:6F:59:B3:E8:EE:3A:9C:DC:9A:22:18:90:E9 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e7:e3:10:84:23:18:63:15:7d:42:a2:9f:fa:31:bc:71:b4: b4:82:bd:4b:e3:ab:b8:09:48:bd:a6:e7:d5:e2:c7:99:55:ce: 60:b4:af:68:ac:11:a7:98:fb:31:02:b6:e8:15:32:33:8d:9c: a0:95:20:d2:93:e4:ed:72:04:dd:8e:20:a6:6c:5f:e9:b1:ac: d1:96:23:74:c1:c1:e0:6e:be:a1:fe:49:71:e9:fe:96:3c:56: 33:91:70:09:7d:01:a0:7d:49:46:99:a0:8f:bb:77:fe:b7:42: 73:a6:08:30:7a:a1:b3:94:e2:43:20:5b:09:c3:7e:63:eb:68: 0e:5b:c4:89:38:bf:44:e5:e6:1f:69:c1:60:4f:bf:33:f3:21: b0:fc:ef:92:15:f2:90:79:75:74:97:4b:6a:d6:c3:0d:e5:5a: 37:5e:34:54:0d:27:cb:34:a2:63:dd:54:b4:39:80:c9:72:ad: 1f:8d:76:e8:f4:63:9d:7a:4c:d8:d0:74:30:d2:71:dd:14:78: 73:e5:76:75:94:bd:59:e6:91:6d:d9:98:c5:74:f5:84:17:22: bb:f9:8d:52:56:ce:13:15:a9:b9:b4:2e:05:5e:7c:3e:a2:0c: 9c:f9:10:fe:a4:cb:93:e7:98:5d:3d:ac:98:09:45:2d:54:34: 7d:6c:42:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNzIwMTY1NTA3WhcNMjUwNzI3MTY1NTA3WjAYMRYwFAYD VQQDEw02ODdkMWY2Yi0xMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5yb/H239HhYqxq6ftxlq84F+ZnrsZx9Yit7tbkttudocBykxk17fPBmFNZB 6TfIbnBt441LdAlG1Y5ZRZOhmfoSrcG8Hi4IZO4BPSpxvTrOPm2pINFKPXnVkx6A ezmlrEkGDSHeyi7EN0GqjwskeN90ZSTDhOx2UeJg1rlxTRDeLEodwXTJWJ2F7Jlx c8Vt0Jqwf7OpFkyvBEBvicCPjwDCPah2efet4bYVnBFEZz0FSzUZS+o5wWGcl3td gcubXEHxYooas0ZaaM1AYGwLgGNt4CPQ/rYey0vKA/A7yHXAbIbB5SDV30JIc+K9 U+IEWBAyxCYcfsPCzQ3Y9nZ+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmor6LJ d6lvWbPo7jqc3JoiGJDpMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk5+MQhCMYYxV9QqKf+jG8cbS0gr1L46u4CUi9pufV4seZVc5gtK9o rBGnmPsxArboFTIzjZyglSDSk+TtcgTdjiCmbF/psazRliN0wcHgbr6h/klx6f6W PFYzkXAJfQGgfUlGmaCPu3f+t0JzpggweqGzlOJDIFsJw35j62gOW8SJOL9E5eYf acFgT78z8yGw/O+SFfKQeXV0l0tq1sMN5Vo3XjRUDSfLNKJj3VS0OYDJcq0fjXbo 9GOdekzY0HQw0nHdFHhz5XZ1lL1Z5pFt2ZjFdPWEFyK7+Y1SVs4TFam5tC4FXnw+ ogyc+RD+pMuT55hdPayYCUUtVDR9bEIS -----END CERTIFICATE-----Generated at Mon Jul 21 08:10:39 2025 by rpki-client