$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft File: Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json) Hash identifier: SotVmAaynDpc72B2VcaYhAgwnGXlSQ+/WUkBkFIqD+0= Subject key identifier: 1D:FA:93:BA:79:0B:AF:4A:E4:FE:3D:11:10:C4:FF:E5:4A:03:06:3F Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft Manifest number: 02DD Signing time: Mon 21 Jul 2025 01:40:33 +0000 Manifest this update: Mon 21 Jul 2025 01:40:33 +0000 Manifest next update: Mon 28 Jul 2025 01:40:33 +0000 Files and hashes: 1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: jWj9jo4vtrgkDGUwkz/YwrcHbwy0VFeav7pPSJwTPMI=) 2: E7923742526311F0986A3A5AC4F9AE02.roa (hash: C1cnMXKGJuTQ/i5MZh9Z6fPastUUu1Swd7Zuw8j4VwM=) 3: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=) 4: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Validity Not Before: Jul 21 01:40:33 2025 GMT Not After : Jul 28 01:40:33 2025 GMT Subject: CN=687d9a91-ac7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:64:23:f3:33:3d:ac:a2:74:58:aa:81:0b: 8a:a8:14:e7:58:ef:3c:35:39:8c:80:e8:ff:75:09: b3:2e:4f:38:dc:42:96:ce:2b:16:84:71:4e:bf:fe: 62:b8:ac:b6:ef:d9:98:11:34:30:f2:a6:86:d2:7a: 25:cc:e7:25:d8:0a:28:cc:f5:ad:d1:28:4d:30:94: d7:fe:21:1b:20:c0:ce:9a:24:4b:e4:64:36:dd:e4: a2:c1:d4:ec:9b:76:3d:32:4d:3f:19:d6:ab:c6:b8: 9b:b5:17:24:d2:27:53:6a:11:4b:cc:27:b5:f6:b2: 51:ea:42:86:27:9d:c4:af:b1:8d:81:ac:87:11:83: 36:84:a7:d2:5e:68:0f:34:6d:c7:35:6d:01:92:d0: c2:09:7e:a0:11:7f:05:65:41:d4:18:b2:a9:62:97: 5d:8d:a1:01:34:61:b9:ef:7b:78:dc:f4:5b:6c:c0: 73:f1:df:07:2a:e2:87:bb:4c:31:ce:92:1c:2d:12: 60:4e:cd:b3:59:67:d3:6e:5b:7f:b5:15:8e:92:77: 3b:c7:ef:87:fd:d5:74:b3:6b:c2:56:e9:db:af:2f: 23:33:bf:c8:be:21:b0:be:c9:4d:73:b0:0f:f0:7a: 94:39:b6:8a:b2:a5:99:f3:6b:05:cf:52:34:80:77: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FA:93:BA:79:0B:AF:4A:E4:FE:3D:11:10:C4:FF:E5:4A:03:06:3F X509v3 Authority Key Identifier: keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:2f:5b:68:1a:13:20:66:a5:49:55:f2:1f:0f:20:cf:54: ed:1a:7d:42:48:09:94:dc:50:54:f5:da:42:00:ed:31:82:16: 58:5a:1d:2c:c7:50:c6:db:cf:ce:05:f0:c9:0a:6e:ec:b0:24: fa:bc:02:d9:16:f3:4d:75:8f:80:d5:ea:7c:52:55:56:96:ea: 19:7a:31:f6:8c:56:b5:97:fe:87:f8:b0:5d:35:ff:15:97:e8: 0e:12:f1:a0:5f:14:33:73:1a:2e:55:65:0b:37:7d:08:fa:60: 3a:f0:bf:74:49:be:36:15:10:5d:18:19:c3:ef:f5:f4:c6:12: 76:a3:27:41:f3:e7:7c:6d:32:7b:05:bb:08:18:c0:14:96:88: 5a:fd:b3:cc:2d:a0:46:6b:7f:f0:1f:44:34:ae:57:22:da:4a: ff:20:c3:c5:8c:b0:2f:92:74:6b:5f:6e:ec:7f:92:69:a9:e5: 52:9a:fb:06:56:b8:14:38:e8:7c:7e:6d:ed:f6:b5:e2:ff:8f: 4d:ef:36:c3:51:51:95:64:d8:8b:18:10:d4:95:8d:f9:8f:46: 7c:06:bd:45:22:20:96:68:66:b0:e0:65:bf:78:0a:74:18:0f: 40:9a:64:1d:9c:25:b0:c0:27:1d:de:32:44:0a:18:db:f1:f3: 66:22:3b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF QzhGQjgyQjUwHhcNMjUwNzIxMDE0MDMzWhcNMjUwNzI4MDE0MDMzWjAYMRYwFAYD VQQDEw02ODdkOWE5MS1hYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnNkI/MzPayidFiqgQuKqBTnWO88NTmMgOj/dQmzLk843EKWzisWhHFOv/5i uKy279mYETQw8qaG0nolzOcl2AoozPWt0ShNMJTX/iEbIMDOmiRL5GQ23eSiwdTs m3Y9Mk0/GdarxribtRck0idTahFLzCe19rJR6kKGJ53Er7GNgayHEYM2hKfSXmgP NG3HNW0BktDCCX6gEX8FZUHUGLKpYpddjaEBNGG573t43PRbbMBz8d8HKuKHu0wx zpIcLRJgTs2zWWfTblt/tRWOknc7x++H/dV0s2vCVunbry8jM7/IviGwvslNc7AP 8HqUObaKsqWZ82sFz1I0gHdABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB36k7p5 C69K5P49ERDE/+VKAwY/MB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2 QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFDNC8xQ0I1M0YzMEY2QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9h VVViU2g5Z1FLeWJzajdnclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFuC9baBoTIGalSVXyHw8gz1TtGn1CSAmU3FBU9dpCAO0xghZYWh0s x1DG28/OBfDJCm7ssCT6vALZFvNNdY+A1ep8UlVWluoZejH2jFa1l/6H+LBdNf8V l+gOEvGgXxQzcxouVWULN30I+mA68L90Sb42FRBdGBnD7/X0xhJ2oydB8+d8bTJ7 BbsIGMAUloha/bPMLaBGa3/wH0Q0rlci2kr/IMPFjLAvknRrX27sf5JpqeVSmvsG VrgUOOh8fm3t9rXi/49N7zbDUVGVZNiLGBDUlY35j0Z8Br1FIiCWaGaw4GW/eAp0 GA9AmmQdnCWwwCcd3jJEChjb8fNmIjsd -----END CERTIFICATE-----Generated at Mon Jul 21 05:45:18 2025 by rpki-client