$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: znOFqh/ywOrAYLs4rAR1sXAyVFIVkttKRmugKbHTEOY= Subject key identifier: 6D:87:23:00:06:67:8C:37:4D:82:1E:DD:32:4A:2C:05:A8:44:4E:62 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0ECB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0EA9 Signing time: Tue 22 Jul 2025 17:50:57 +0000 Manifest this update: Tue 22 Jul 2025 17:50:56 +0000 Manifest next update: Tue 29 Jul 2025 17:50:56 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: hWIZPu8fMC7hOJI1axgatpwi491f+Zu1Yg36IYLfiZs=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3787 (0xecb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Jul 22 17:50:56 2025 GMT Not After : Jul 29 17:50:56 2025 GMT Subject: CN=687fcf81-f4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:c1:8b:23:3d:36:f2:48:ad:ca:51:3d:e6: e3:ba:8b:b0:2c:49:9c:ab:d0:49:cc:d7:62:dd:03: 81:1c:f7:ba:de:66:b3:1e:a0:8b:2d:a9:90:9e:aa: f5:c0:09:a1:65:fa:d6:38:79:91:23:fe:f0:19:34: c3:db:e8:1c:67:89:b6:22:3a:3b:f9:ab:f1:41:4d: 1d:ce:e5:64:6b:5e:57:97:bf:58:bb:fd:3e:49:c0: 32:3c:70:19:a0:02:5c:e4:56:c0:68:37:2c:73:b1: 6a:46:53:d8:d1:5b:72:ae:7a:65:c2:fb:e8:09:1b: 90:aa:7d:cc:fc:1b:bd:2e:20:42:c9:40:98:6d:de: ac:f7:25:b5:b5:ac:3d:5a:22:e6:3b:ed:8e:48:bb: 8b:84:8d:17:23:a8:73:c2:f8:50:1e:e8:d1:75:01: 43:ef:8e:0a:e5:02:e9:30:60:d8:3e:cc:56:29:aa: 7c:1b:fe:8f:c0:da:cf:71:e9:89:81:3f:71:80:d5: cf:98:f9:b5:49:36:63:5a:12:1a:39:a2:71:58:77: da:60:15:4e:12:ac:85:a6:8f:da:d5:bc:fb:cb:85: 6b:22:7d:2b:2c:31:b4:b2:45:fe:66:ac:10:ae:78: 65:66:5c:c1:1b:ad:e6:bf:a4:49:12:93:17:fe:b5: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:23:00:06:67:8C:37:4D:82:1E:DD:32:4A:2C:05:A8:44:4E:62 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:77:05:b5:40:46:ed:ee:fe:26:6e:a1:bd:2b:91:6c:05:e6: 2b:9a:fc:30:82:57:a7:c7:c0:a2:20:b7:eb:ed:a7:de:0f:20: cf:6e:2a:aa:fe:fd:cc:11:4b:8d:65:98:1a:df:ae:cd:d5:ec: 9b:15:85:f5:9f:f9:c7:fd:0c:85:41:f2:82:38:7a:98:a8:f0: 8d:9e:f2:3b:36:51:14:3c:c1:06:6b:7e:01:f3:87:90:1c:a3: 9c:a4:28:33:8c:21:94:4e:bb:01:c4:c1:3a:f0:17:20:39:19: f7:0a:d4:8d:55:f4:d2:9e:fd:13:e3:d1:53:2e:6a:6e:40:9b: f6:63:22:d5:30:4c:65:23:d4:0f:db:45:6d:85:8b:d6:c2:ae: a3:54:eb:88:01:b1:27:0f:58:f0:1e:fe:50:fc:1b:9b:8d:d9: 27:19:84:1d:90:18:5c:d1:44:c7:e4:f1:ec:cd:5c:86:9d:f2: 5f:20:6f:f6:b1:33:b2:e9:cc:20:bf:0c:69:40:a4:cc:4d:06: bb:4b:0e:dd:26:c5:2c:f0:54:27:b5:bb:99:14:89:f1:89:28: a8:59:4a:9b:0e:1b:16:3f:39:07:53:94:17:22:5a:71:d6:80: 2d:11:4e:9b:f4:bd:5d:b7:95:13:71:2b:f1:82:4d:31:dc:87: 02:3b:b7:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUwNzIyMTc1MDU2WhcNMjUwNzI5MTc1MDU2WjAYMRYwFAYD VQQDEw02ODdmY2Y4MS1mNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UjBiyM9NvJIrcpRPebjuouwLEmcq9BJzNdi3QOBHPe63mazHqCLLamQnqr1 wAmhZfrWOHmRI/7wGTTD2+gcZ4m2Ijo7+avxQU0dzuVka15Xl79Yu/0+ScAyPHAZ oAJc5FbAaDcsc7FqRlPY0VtyrnplwvvoCRuQqn3M/Bu9LiBCyUCYbd6s9yW1taw9 WiLmO+2OSLuLhI0XI6hzwvhQHujRdQFD744K5QLpMGDYPsxWKap8G/6PwNrPcemJ gT9xgNXPmPm1STZjWhIaOaJxWHfaYBVOEqyFpo/a1bz7y4VrIn0rLDG0skX+ZqwQ rnhlZlzBG63mv6RJEpMX/rW9SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2HIwAG Z4w3TYIe3TJKLAWoRE5iMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAedwW1QEbt7v4mbqG9K5FsBeYrmvwwglenx8CiILfr7afeDyDPbiqq /v3MEUuNZZga367N1eybFYX1n/nH/QyFQfKCOHqYqPCNnvI7NlEUPMEGa34B84eQ HKOcpCgzjCGUTrsBxME68BcgORn3CtSNVfTSnv0T49FTLmpuQJv2YyLVMExlI9QP 20VthYvWwq6jVOuIAbEnD1jwHv5Q/BubjdknGYQdkBhc0UTH5PHszVyGnfJfIG/2 sTOy6cwgvwxpQKTMTQa7Sw7dJsUs8FQntbuZFInxiSioWUqbDhsWPzkHU5QXIlpx 1oAtEU6b9L1dt5UTcSvxgk0x3IcCO7ea -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:20 2025 by rpki-client