$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft File: HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json) Hash identifier: hU0uQu5lreffWiE0wyVaccAQ/mqSit0PH2fS2IacQH8= Subject key identifier: 2A:78:0B:47:14:BD:9A:15:BD:51:37:49:69:C5:F8:74:BD:E0:1C:CF Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 1386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft Manifest number: 135C Signing time: Fri 18 Jul 2025 17:10:50 +0000 Manifest this update: Fri 18 Jul 2025 17:10:49 +0000 Manifest next update: Fri 25 Jul 2025 17:10:49 +0000 Files and hashes: 1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: Yt8K34PV1XFbcAlPMfgqQWFefUjs3N+QCOfQ0E3/rn8=) 2: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: YO0KSyMg3rhBagYoGztB5o5uMcRrrSiw068DI4yqRmI=) 3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WXuqlnvJ/kQYgmajvkp6WqRXIhVjEPtrsEAuBi7s1vA=) 4: 538F7B12B1D711EBB3C0A24AC4F9AE02.roa (hash: VriM0YGDOfhzo18xUQqToLLJGd+19KKo1Yju23Rp1tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4998 (0x1386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Jul 18 17:10:49 2025 GMT Not After : Jul 25 17:10:49 2025 GMT Subject: CN=687a801a-5a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:0b:92:21:87:5d:3c:63:0f:3e:e6:21:af: 79:6f:52:e1:67:5f:d5:4b:fb:36:9e:e8:73:f2:a0: a7:94:d2:6e:b2:ad:05:8f:74:4c:42:68:ce:ce:bf: 50:3d:64:8f:b1:cf:b2:f6:fb:63:ad:8c:d0:3e:c6: 27:5a:3a:72:cb:eb:3b:e0:e9:18:79:df:30:86:9d: 44:85:34:53:5b:d2:fa:2c:8f:ef:f1:e7:ee:7e:ea: 2a:f9:3c:e3:63:eb:27:22:e7:dc:62:d3:68:b8:5b: 65:df:fa:dc:54:f4:ce:8d:33:45:2f:44:a1:23:b7: 1e:e8:b6:e6:a9:b6:c0:37:18:19:bb:60:39:78:3d: 36:da:e6:d1:9f:fa:aa:52:fe:7f:2b:09:7f:f3:9b: 74:62:e5:f9:89:0b:17:3d:da:d9:95:2b:8c:1c:50: dc:c1:51:9b:b4:90:9d:d2:77:c2:e8:d9:6d:5e:3a: de:3d:34:8c:63:14:73:70:ed:ba:28:1a:d1:f9:dc: 25:28:7f:29:85:75:46:85:ea:48:47:e2:56:7a:cc: fb:01:af:fe:a3:c9:6e:ae:a9:05:8d:9f:a7:84:91: 49:e5:ca:8e:66:bf:ec:18:4b:a4:b3:b6:4b:55:77: 0e:ce:9c:9f:49:26:9e:0c:7d:f6:d3:08:80:3e:3c: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:0B:47:14:BD:9A:15:BD:51:37:49:69:C5:F8:74:BD:E0:1C:CF X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:15:bb:ca:71:c6:a4:be:d8:84:5e:77:7a:d7:0b:34:24:b0: 56:f9:c5:32:d4:3b:7c:18:1a:f9:a9:2b:ee:50:34:af:7e:96: 28:04:fd:cb:d0:27:e2:fd:b6:51:60:c9:aa:77:f4:f9:80:34: 95:63:4f:3f:c5:9d:54:39:aa:cc:58:61:06:4a:a4:6a:70:7c: 86:50:15:7d:28:5f:de:08:31:e4:d6:65:bf:af:16:35:3a:aa: 9b:60:dd:28:6d:c9:6d:41:5c:68:0f:33:cf:cf:6a:6e:9b:30: 25:1d:13:4f:c8:26:25:f4:21:93:e9:31:cd:0e:8c:3c:81:96: d8:ba:ac:a0:8b:8a:c6:b6:ec:4b:92:83:78:25:60:ba:26:3e: 6c:c2:a5:e6:5a:ad:56:c3:2e:42:8b:f1:d0:ec:63:ef:ae:8a: 00:f6:24:a0:49:10:b1:07:38:ad:81:00:b5:57:84:83:09:49: 81:74:4f:95:31:de:ba:1a:a1:48:f6:bd:63:5f:e5:d2:6c:f0: 1c:0d:c8:50:0d:bc:53:70:0b:22:f3:74:32:ea:4a:da:62:74: 64:d9:73:f2:9e:f4:39:cb:8d:a3:d4:f3:f0:f4:5c:e0:6c:7a: 2c:36:6c:b5:d1:27:16:77:d2:59:f6:64:e1:b9:3d:43:9b:21: 68:5b:02:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjUwNzE4MTcxMDQ5WhcNMjUwNzI1MTcxMDQ5WjAYMRYwFAYD VQQDEw02ODdhODAxYS01YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLQLkiGHXTxjDz7mIa95b1LhZ1/VS/s2nuhz8qCnlNJusq0Fj3RMQmjOzr9Q PWSPsc+y9vtjrYzQPsYnWjpyy+s74OkYed8whp1EhTRTW9L6LI/v8efufuoq+Tzj Y+snIufcYtNouFtl3/rcVPTOjTNFL0ShI7ce6LbmqbbANxgZu2A5eD022ubRn/qq Uv5/Kwl/85t0YuX5iQsXPdrZlSuMHFDcwVGbtJCd0nfC6NltXjrePTSMYxRzcO26 KBrR+dwlKH8phXVGhepIR+JWesz7Aa/+o8lurqkFjZ+nhJFJ5cqOZr/sGEuks7ZL VXcOzpyfSSaeDH320wiAPjzYEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp4C0cU vZoVvVE3SWnF+HS94BzPMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9FODYxRkQzQUFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJh UUxvV1cyd0NCQVdpTEdTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsFbvKccakvtiEXnd61ws0JLBW+cUy1Dt8GBr5qSvuUDSvfpYoBP3L 0Cfi/bZRYMmqd/T5gDSVY08/xZ1UOarMWGEGSqRqcHyGUBV9KF/eCDHk1mW/rxY1 OqqbYN0obcltQVxoDzPPz2pumzAlHRNPyCYl9CGT6THNDow8gZbYuqygi4rGtuxL koN4JWC6Jj5swqXmWq1Wwy5Ci/HQ7GPvrooA9iSgSRCxBzitgQC1V4SDCUmBdE+V Md66GqFI9r1jX+XSbPAcDchQDbxTcAsi83Qy6kraYnRk2XPynvQ5y42j1PPw9Fzg bHosNmy10ScWd9JZ9mThuT1DmyFoWwIA -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:19 2025 by rpki-client