$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: OOZNPLp64XQbBVof19Ns15UKqEYtc5CJSggYAc2c0d0= Subject key identifier: E3:DB:49:4A:CE:29:21:8B:B6:51:4E:40:1A:92:9A:CA:D5:6F:5F:0D Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0444 Signing time: Mon 21 Jul 2025 00:31:14 +0000 Manifest this update: Mon 21 Jul 2025 00:31:14 +0000 Manifest next update: Mon 28 Jul 2025 00:31:14 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: 20/LruR9QXtVE59P93hZiuoy2A3bDGGO2M7MbDAwlE0=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: amJzS7fS0qwVdajHhOHPPRxX4Ss5Ng0s6L0nYbstO78=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 76rKPM4Cl24qOxvpyPfe4PxAfRqCYHAiT0+M4zUtc90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Jul 21 00:31:14 2025 GMT Not After : Jul 28 00:31:14 2025 GMT Subject: CN=687d8a52-520f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:ad:d2:54:89:92:13:3b:b6:ea:72:29:c2: 74:a8:68:2a:61:44:cb:ae:f6:75:6e:9d:c6:ea:2d: ac:54:41:6d:e0:15:3d:d6:dc:f2:67:8a:d0:bb:5b: e6:41:51:ab:bc:8d:15:0f:a6:eb:4e:03:cb:6f:80: 48:ec:c3:89:e0:18:a9:7e:5a:1d:c9:02:08:01:6b: c8:4a:d7:fe:93:9f:23:c5:13:40:77:eb:c4:47:3c: 35:b2:99:a6:88:bd:26:9c:af:0e:90:b1:a5:30:8b: 48:64:ca:f9:bb:ae:73:a0:0f:e1:1a:4b:eb:60:1d: 87:52:29:7f:8d:79:c1:e1:82:4b:01:f8:b4:00:58: 72:88:7f:ee:ec:62:a7:1e:cf:19:af:84:b4:47:be: 47:9d:38:f5:a3:ad:73:81:bc:f6:54:ba:5a:71:76: 41:1e:49:f8:7b:92:11:48:dc:d1:10:dc:6d:48:e9: bc:14:5e:a6:dd:8d:13:96:d2:23:e1:7f:9e:e5:c5: fa:df:79:82:f3:b4:49:41:94:ae:4c:4e:9b:4e:1c: 75:5b:89:0e:0c:57:7a:88:c3:0c:4b:dd:16:83:fa: b7:83:63:3a:ad:30:91:36:69:05:29:95:96:8e:4f: c1:6e:8f:18:cf:b5:93:ac:a8:1e:10:36:64:b7:d2: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:49:4A:CE:29:21:8B:B6:51:4E:40:1A:92:9A:CA:D5:6F:5F:0D X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7a:c8:32:a9:0e:5f:40:c0:d7:1f:e0:9a:d0:32:dd:71:e0: 0f:bb:45:1f:76:91:99:9f:f5:46:08:8b:d6:c6:ac:a9:4b:9b: 0c:d3:cc:78:38:1f:22:ad:be:89:95:36:7b:c8:d5:43:ba:79: 25:ab:2e:0d:00:c8:84:b7:ba:89:13:1d:d5:95:83:62:25:4e: cc:c7:a9:4c:89:ff:48:ab:2e:31:e7:78:23:e6:c3:af:4a:5a: 57:3e:27:29:0d:aa:18:68:da:83:7c:9a:8c:f2:d5:05:16:91: 74:f4:e0:a4:08:2e:71:00:68:70:b1:b7:34:06:19:53:a6:53: 93:ac:5f:75:f9:7a:b7:9e:e8:ac:a2:bf:9e:a7:f4:e0:6a:6a: 7e:e8:5b:38:00:7b:40:59:01:bf:96:0a:f1:ca:23:ba:55:b9: 28:cc:4a:7d:dc:c2:e7:3a:ad:88:95:80:3a:3f:45:78:13:81: 3f:30:8b:a1:db:e8:54:18:84:11:92:af:7c:f6:65:d2:2d:48: da:89:77:21:e3:c4:d7:cb:93:85:fb:bc:ee:1c:16:5d:08:41: 2e:e4:69:e7:62:49:dd:70:ca:c3:10:77:0e:94:67:ad:36:36: 9b:e7:22:45:18:e9:92:66:33:e1:ef:02:ab:96:7f:89:de:3a: 9c:71:0c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwNzIxMDAzMTE0WhcNMjUwNzI4MDAzMTE0WjAYMRYwFAYD VQQDEw02ODdkOGE1Mi01MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHyt0lSJkhM7tupyKcJ0qGgqYUTLrvZ1bp3G6i2sVEFt4BU91tzyZ4rQu1vm QVGrvI0VD6brTgPLb4BI7MOJ4BipflodyQIIAWvIStf+k58jxRNAd+vERzw1spmm iL0mnK8OkLGlMItIZMr5u65zoA/hGkvrYB2HUil/jXnB4YJLAfi0AFhyiH/u7GKn Hs8Zr4S0R75HnTj1o61zgbz2VLpacXZBHkn4e5IRSNzRENxtSOm8FF6m3Y0TltIj 4X+e5cX633mC87RJQZSuTE6bThx1W4kODFd6iMMMS90Wg/q3g2M6rTCRNmkFKZWW jk/Bbo8Yz7WTrKgeEDZkt9IbSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPbSUrO KSGLtlFOQBqSmsrVb18NMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKesgyqQ5fQMDXH+Ca0DLdceAPu0UfdpGZn/VGCIvWxqypS5sM08x4 OB8irb6JlTZ7yNVDunklqy4NAMiEt7qJEx3VlYNiJU7Mx6lMif9Iqy4x53gj5sOv SlpXPicpDaoYaNqDfJqM8tUFFpF09OCkCC5xAGhwsbc0BhlTplOTrF91+Xq3nuis or+ep/Tgamp+6Fs4AHtAWQG/lgrxyiO6VbkozEp93MLnOq2IlYA6P0V4E4E/MIuh 2+hUGIQRkq989mXSLUjaiXch48TXy5OF+7zuHBZdCEEu5GnnYkndcMrDEHcOlGet Njab5yJFGOmSZjPh7wKrln+J3jqccQyH -----END CERTIFICATE-----Generated at Mon Jul 21 07:10:57 2025 by rpki-client