$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: mhuYbDdYXW0+qPrhww0b8BIoki+XKTBJyp+glNRDSeA= Subject key identifier: A7:84:42:F2:11:70:B0:3A:FD:B6:1A:97:92:F1:66:AD:F1:F0:6E:6A Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 80 Signing time: Mon 21 Jul 2025 07:03:02 +0000 Manifest this update: Mon 21 Jul 2025 07:03:02 +0000 Manifest next update: Mon 28 Jul 2025 07:03:02 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: bpxMJseMb2TaH/JpVTvQsa2SHihUPUmvzaq+xQEeKfo=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Jul 21 07:03:02 2025 GMT Not After : Jul 28 07:03:02 2025 GMT Subject: CN=687de626-025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:38:92:b5:94:e5:4f:df:9d:65:61:42:d1:c9: 94:dc:4d:5d:8c:6e:50:53:35:dc:be:61:9a:43:7b: b1:e7:b5:d7:d0:8e:44:29:ba:6b:b0:3a:84:27:07: bd:f8:ac:26:eb:bc:68:17:67:ae:8e:d0:36:a9:0d: dc:b7:f1:77:49:4c:d5:49:85:e9:35:1a:08:8c:48: ee:b7:91:7a:82:f3:ae:2f:3c:3f:aa:3e:46:a6:2e: c2:e3:05:eb:69:20:f5:00:33:c9:b5:98:8a:36:87: f5:2e:0d:3c:bf:c8:ea:ac:2e:f6:96:6f:e8:26:2b: 88:5d:a1:d6:04:8a:e9:6a:50:a4:5f:bf:c7:ee:24: 91:18:25:88:c9:ca:9d:c1:64:5f:fb:b3:16:9a:a7: bb:fd:9a:ae:c2:11:35:f1:49:94:f7:b2:77:81:43: e4:03:2f:1e:6e:17:65:14:ab:6c:7c:e1:1b:60:67: b0:c5:6f:0a:1d:56:c1:52:c7:57:af:67:1d:89:c0: 69:1d:7f:ae:b8:85:49:c7:87:b8:7f:73:45:dc:e2: b8:18:87:91:9e:25:54:3a:1c:ca:f2:39:59:24:5b: d4:a3:b9:1f:ee:c5:0c:dd:b3:a6:c2:cc:82:63:33: 1a:9b:86:7f:97:7c:0b:dc:68:7f:00:ed:07:bb:98: 5e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:42:F2:11:70:B0:3A:FD:B6:1A:97:92:F1:66:AD:F1:F0:6E:6A X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f6:35:51:3b:44:ba:e3:d5:f0:b5:2e:d2:04:7f:39:30:0b: 2e:08:b5:fc:2c:94:ef:93:ef:69:75:1d:bf:09:d3:d0:20:7f: b9:dd:11:a7:a1:c7:88:9c:20:f5:be:4a:cd:79:f6:d6:e0:50: b1:c9:72:ba:7a:d3:55:62:7b:44:52:b7:93:ac:40:59:1e:de: 5a:2f:98:12:37:88:cf:b9:e0:8f:09:7c:14:10:f5:2e:52:0e: b3:3c:72:3f:18:b0:f9:fd:e7:fc:31:1f:31:16:e2:9f:65:60: 30:19:f2:31:92:e4:bb:4e:b3:6f:44:b6:65:85:7c:2e:cb:cd: 92:7f:3a:d1:2d:d1:38:99:46:58:db:b9:18:0e:4d:d7:2e:7d: b6:64:36:99:8f:22:cd:5c:ec:de:07:c7:bd:c1:af:eb:22:14: 6a:e1:43:ff:31:0f:3c:0c:4b:69:6f:fc:00:42:81:c1:64:cd: ce:03:12:78:ce:a0:f1:d2:fc:d0:bb:bf:55:65:74:f2:77:1f: 11:ff:9e:b1:69:8d:00:c8:b9:21:c5:aa:60:35:57:6b:b5:b8: 97:41:ee:d1:89:e5:83:ec:0e:fe:a1:b2:63:ee:72:7b:00:71: 9e:da:fb:bd:b7:fd:09:fa:27:da:ed:cc:37:50:70:2f:72:b8: 38:62:7f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjUwNzIxMDcwMzAyWhcNMjUwNzI4MDcwMzAyWjAYMRYwFAYD VQQDEw02ODdkZTYyNi0wMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DiStZTlT9+dZWFC0cmU3E1djG5QUzXcvmGaQ3ux57XX0I5EKbprsDqEJwe9 +Kwm67xoF2eujtA2qQ3ct/F3SUzVSYXpNRoIjEjut5F6gvOuLzw/qj5Gpi7C4wXr aSD1ADPJtZiKNof1Lg08v8jqrC72lm/oJiuIXaHWBIrpalCkX7/H7iSRGCWIycqd wWRf+7MWmqe7/ZquwhE18UmU97J3gUPkAy8ebhdlFKtsfOEbYGewxW8KHVbBUsdX r2cdicBpHX+uuIVJx4e4f3NF3OK4GIeRniVUOhzK8jlZJFvUo7kf7sUM3bOmwsyC YzMam4Z/l3wL3Gh/AO0Hu5heQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeEQvIR cLA6/bYal5LxZq3x8G5qMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY9jVRO0S649XwtS7SBH85MAsuCLX8LJTvk+9pdR2/CdPQIH+53RGn oceInCD1vkrNefbW4FCxyXK6etNVYntEUreTrEBZHt5aL5gSN4jPueCPCXwUEPUu Ug6zPHI/GLD5/ef8MR8xFuKfZWAwGfIxkuS7TrNvRLZlhXwuy82SfzrRLdE4mUZY 27kYDk3XLn22ZDaZjyLNXOzeB8e9wa/rIhRq4UP/MQ88DEtpb/wAQoHBZM3OAxJ4 zqDx0vzQu79VZXTydx8R/56xaY0AyLkhxapgNVdrtbiXQe7RieWD7A7+obJj7nJ7 AHGe2vu9t/0J+ifa7cw3UHAvcrg4Yn9U -----END CERTIFICATE-----Generated at Mon Jul 21 23:51:02 2025 by rpki-client