$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: bo+UjT+lUmCnkpHtvMfmufCcaxB5Cmk2YsEXoEfYTbI= Subject key identifier: 9F:F6:49:C5:C1:32:25:3C:FA:C6:E4:CB:B9:5E:44:58:0A:2D:06:5D Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0143 Signing time: Wed 17 Sep 2025 05:05:46 +0000 Manifest this update: Wed 17 Sep 2025 05:05:46 +0000 Manifest next update: Wed 24 Sep 2025 05:05:46 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: yYt5OYe5OGIB1XEB5yRIWA/VU6r3APaVaaWoWgABYyM=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Sep 17 05:05:46 2025 GMT Not After : Sep 24 05:05:46 2025 GMT Subject: CN=68ca41aa-f26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:f5:a2:05:83:9e:7c:d7:49:3f:44:e3:bd: 06:2b:71:de:ea:0b:6f:50:90:92:cf:b6:3b:bb:27: 0d:a9:5e:b4:0f:16:41:af:ad:94:9c:99:6e:3f:59: 7c:9c:18:95:43:4c:d3:c7:e9:72:f9:c1:24:4b:0f: d9:0d:f8:d1:5d:67:38:46:1c:f0:0c:e3:9c:a2:22: 9e:30:4d:f0:bc:88:b7:9f:1c:b7:35:78:f3:8a:ee: 15:eb:d0:0d:b0:a7:92:07:0f:8d:e9:f7:9a:94:00: 4c:4b:53:23:10:14:68:f8:59:c7:7c:b9:c2:05:23: d0:7f:52:6f:73:23:ae:47:41:2a:db:32:b0:97:33: fc:d1:67:08:13:2d:a9:17:01:f0:1a:43:b3:fd:d7: 76:d6:11:26:56:84:01:03:13:5f:11:e6:24:33:7d: 11:20:92:12:ef:70:2b:6d:4e:4c:39:96:b7:0b:ab: c5:92:d9:22:0a:a4:7f:99:fe:5b:ca:46:27:9f:b9: 8a:bf:56:9c:26:2d:ef:80:43:3b:69:ac:65:a1:83: 71:c2:16:75:9e:5d:c5:39:00:e8:3a:31:4c:64:12: c8:5e:71:4d:b1:de:f2:7e:3c:c7:46:5a:4c:33:79: 53:ab:8c:4c:0e:78:a4:cd:c8:23:75:f2:88:50:7c: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:49:C5:C1:32:25:3C:FA:C6:E4:CB:B9:5E:44:58:0A:2D:06:5D X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:08:ea:03:7b:4e:fd:c7:e4:27:87:f2:a5:44:e0:f3:7b:15: f1:20:60:19:7d:c1:3d:3d:36:c2:e4:56:99:59:ba:c9:23:38: 3c:1c:59:c0:b1:de:02:b9:c3:a8:0c:43:f3:44:bd:e6:25:36: 3d:54:3e:7e:f5:e4:e8:8f:1d:9c:a5:5d:75:6e:76:93:40:37: 78:bb:b1:fc:e1:fa:e0:6b:84:74:3b:d9:e4:97:d9:03:65:a6: 54:92:c9:a7:8b:7f:26:5a:65:cc:b3:8d:f1:cf:db:73:72:b5: 7e:57:5f:e4:a4:23:f6:a7:3b:96:39:a7:f3:a0:66:d4:54:89: 07:4c:80:1d:b5:c0:3a:70:f4:40:42:c0:03:66:19:76:86:07: 20:eb:ca:a2:f3:7c:93:bf:73:56:98:bb:73:e6:12:cb:81:43: 3a:00:ae:7a:01:de:29:2e:97:82:ff:19:ef:0c:ae:63:c5:e9: 9a:68:7c:89:ca:34:8e:91:8c:5b:90:96:cc:dc:4a:66:6d:8a: 5b:c9:ae:d2:41:c2:ff:49:c0:df:f7:f9:79:89:b9:83:26:b3: 44:90:ee:4b:f2:12:ff:a3:10:87:e9:c9:8f:9c:81:9f:90:49: 67:88:fb:3a:9f:b1:78:16:e4:86:67:be:8a:73:9c:28:d9:ab: 78:4f:f4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwOTE3MDUwNTQ2WhcNMjUwOTI0MDUwNTQ2WjAYMRYwFAYD VQQDEw02OGNhNDFhYS1mMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6/1ogWDnnzXST9E470GK3He6gtvUJCSz7Y7uycNqV60DxZBr62UnJluP1l8 nBiVQ0zTx+ly+cEkSw/ZDfjRXWc4RhzwDOOcoiKeME3wvIi3nxy3NXjziu4V69AN sKeSBw+N6fealABMS1MjEBRo+FnHfLnCBSPQf1JvcyOuR0Eq2zKwlzP80WcIEy2p FwHwGkOz/dd21hEmVoQBAxNfEeYkM30RIJIS73ArbU5MOZa3C6vFktkiCqR/mf5b ykYnn7mKv1acJi3vgEM7aaxloYNxwhZ1nl3FOQDoOjFMZBLIXnFNsd7yfjzHRlpM M3lTq4xMDnikzcgjdfKIUHwbGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/2ScXB MiU8+sbky7leRFgKLQZdMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaCOoDe079x+Qnh/KlRODzexXxIGAZfcE9PTbC5FaZWbrJIzg8HFnA sd4CucOoDEPzRL3mJTY9VD5+9eTojx2cpV11bnaTQDd4u7H84frga4R0O9nkl9kD ZaZUksmni38mWmXMs43xz9tzcrV+V1/kpCP2pzuWOafzoGbUVIkHTIAdtcA6cPRA QsADZhl2hgcg68qi83yTv3NWmLtz5hLLgUM6AK56Ad4pLpeC/xnvDK5jxemaaHyJ yjSOkYxbkJbM3EpmbYpbya7SQcL/ScDf9/l5ibmDJrNEkO5L8hL/oxCH6cmPnIGf kElniPs6n7F4FuSGZ76Kc5wo2at4T/Qa -----END CERTIFICATE-----Generated at Thu Sep 18 20:22:48 2025 by rpki-client