$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft File: HLS_2cCnMryPSmDIaUyR-DTKvBM.mft (raw, json) Hash identifier: jdJh8se0WZm//txjeV4sgjSTvOfKdzL9ohBaFuPAcQs= Subject key identifier: D8:0A:7C:6B:8F:B5:D0:9F:C2:65:08:1D:82:7C:52:07:1E:A2:CD:2D Authority key identifier: 1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 Certificate issuer: /CN=A91D83D0/serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Certificate serial: 08FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft Manifest number: 08F4 Signing time: Fri 18 Jul 2025 20:36:31 +0000 Manifest this update: Fri 18 Jul 2025 20:36:30 +0000 Manifest next update: Fri 25 Jul 2025 20:36:30 +0000 Files and hashes: 1: HLS_2cCnMryPSmDIaUyR-DTKvBM.crl (hash: T56qCZZ9mAro1u1YfKyt6xA2EuKBcSvKXH6+C1t2XNk=) 2: 3C52563E781F11EE9787607FC4F9AE02.roa (hash: iGx2/OJLyjhg1Fasnl64EO8+YlI70PVJOH1c6PHse0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2299 (0x8fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=1CB4BFD9C0A732BC8F4A60C8694C91F834CABC13 Validity Not Before: Jul 18 20:36:30 2025 GMT Not After : Jul 25 20:36:30 2025 GMT Subject: CN=687ab04e-a58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:c6:06:7c:3f:d1:13:77:66:17:db:01:0b: 65:6e:0d:37:50:6d:57:a6:07:67:2f:a1:f7:1a:84: 03:cc:65:8e:cf:96:54:db:63:4e:b4:af:b4:ce:c3: 20:b2:60:b9:37:40:46:ab:ad:71:61:4d:00:54:64: 0a:d7:a5:7a:62:9f:6d:a3:20:ae:14:ac:cf:d4:06: 6e:e2:3f:ad:33:54:1a:09:f0:a3:d1:9d:f2:9c:77: 13:a9:60:24:15:8c:ad:87:4c:af:3a:ab:5a:b7:16: b5:b9:98:30:00:5d:bf:f9:b1:ff:95:31:49:5c:4b: cf:61:c7:1e:85:5e:95:11:97:ad:2e:48:6c:50:b3: 90:40:3e:65:9e:22:61:31:35:0f:98:ea:06:3a:82: 3c:a1:3f:46:d2:a0:5a:21:80:4b:27:a0:d5:4c:c9: 65:37:a3:eb:a5:ee:2c:5d:3b:a4:83:62:4b:67:f5: a1:5b:8d:13:2a:84:f7:cb:7a:21:fb:d1:7e:20:0c: 57:76:b1:2b:f0:6c:34:bb:8a:6f:b1:df:ee:cb:7f: 40:93:b0:a7:ab:c6:e1:53:4f:7f:52:22:55:2a:cf: c2:3f:6d:54:9b:3e:ca:03:18:eb:d3:36:0b:46:43: 02:9d:5e:47:54:62:2e:8a:bb:00:99:74:cc:e4:96: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:7C:6B:8F:B5:D0:9F:C2:65:08:1D:82:7C:52:07:1E:A2:CD:2D X509v3 Authority Key Identifier: keyid:1C:B4:BF:D9:C0:A7:32:BC:8F:4A:60:C8:69:4C:91:F8:34:CA:BC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLS_2cCnMryPSmDIaUyR-DTKvBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/03116312AFBC11EAA961CB86C4F9AE02/HLS_2cCnMryPSmDIaUyR-DTKvBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:1f:a2:f4:dd:d0:d4:e8:d0:d6:e8:93:46:d8:c5:5d:71:4f: 47:f8:22:96:1d:5d:e1:24:13:00:37:bb:80:56:11:d8:92:a4: 59:32:e0:ab:f1:d0:d9:70:bc:06:14:fc:5f:a1:c5:03:f5:70: 25:9c:68:44:96:55:fb:34:59:3a:1c:16:da:10:db:4b:ff:ca: ba:c0:07:74:3f:d8:bf:dd:85:89:22:ab:23:0a:01:35:13:9c: 0f:98:3e:3f:78:3d:78:6d:5f:8f:f7:98:38:82:82:17:31:36: de:ad:6d:a2:24:c1:b8:b8:04:72:c7:b3:f7:4b:09:a4:a2:d8: 67:5a:8d:56:48:47:85:b2:bb:75:4d:5e:3a:92:6b:d1:c2:43: 5b:6d:88:0c:f0:b0:45:1d:40:c8:f6:80:b5:fa:64:08:c8:6b: e0:6f:95:f2:69:10:ae:ed:9c:9e:33:5c:8a:a4:c3:f6:5d:6b: 5b:ca:43:a2:36:5d:32:96:c2:e2:5c:ff:43:49:1c:99:dd:36: 28:65:93:9b:5d:1d:67:43:91:90:f9:c4:37:e1:b8:7d:8d:bd: c3:d6:48:29:7f:df:7c:a7:29:c9:9e:90:1a:8c:01:19:06:7a: b6:cd:af:88:81:5a:6a:88:6f:1e:5f:c5:4a:dd:c1:dc:d4:3d: a5:e8:9b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKDFDQjRCRkQ5QzBBNzMyQkM4RjRBNjBDODY5NEM5MUY4 MzRDQUJDMTMwHhcNMjUwNzE4MjAzNjMwWhcNMjUwNzI1MjAzNjMwWjAYMRYwFAYD VQQDEw02ODdhYjA0ZS1hNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23nGBnw/0RN3ZhfbAQtlbg03UG1XpgdnL6H3GoQDzGWOz5ZU22NOtK+0zsMg smC5N0BGq61xYU0AVGQK16V6Yp9toyCuFKzP1AZu4j+tM1QaCfCj0Z3ynHcTqWAk FYyth0yvOqtatxa1uZgwAF2/+bH/lTFJXEvPYccehV6VEZetLkhsULOQQD5lniJh MTUPmOoGOoI8oT9G0qBaIYBLJ6DVTMllN6Prpe4sXTukg2JLZ/WhW40TKoT3y3oh +9F+IAxXdrEr8Gw0u4pvsd/uy39Ak7Cnq8bhU09/UiJVKs/CP21Umz7KAxjr0zYL RkMCnV5HVGIuirsAmXTM5JZLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgKfGuP tdCfwmUIHYJ8Ugceos0tMB8GA1UdIwQYMBaAFBy0v9nApzK8j0pgyGlMkfg0yrwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wMzExNjMxMkFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1yeVBTbURJYVV5Ui1EVEt2 Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hMU18yY0NuTXJ5UFNtRElhVXlSLURUS3ZCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wMzExNjMxMkFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi9ITFNfMmNDbk1y eVBTbURJYVV5Ui1EVEt2Qk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTH6L03dDU6NDW6JNG2MVdcU9H+CKWHV3hJBMAN7uAVhHYkqRZMuCr 8dDZcLwGFPxfocUD9XAlnGhEllX7NFk6HBbaENtL/8q6wAd0P9i/3YWJIqsjCgE1 E5wPmD4/eD14bV+P95g4goIXMTberW2iJMG4uARyx7P3SwmkothnWo1WSEeFsrt1 TV46kmvRwkNbbYgM8LBFHUDI9oC1+mQIyGvgb5XyaRCu7ZyeM1yKpMP2XWtbykOi Nl0ylsLiXP9DSRyZ3TYoZZObXR1nQ5GQ+cQ34bh9jb3D1kgpf998pynJnpAajAEZ Bnq2za+IgVpqiG8eX8VK3cHc1D2l6JsC -----END CERTIFICATE-----Generated at Sun Jul 20 02:02:57 2025 by rpki-client