$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: 5Wwfc6BFpke+BotFBiGuxBZ4fao75kFkojZSv8oXk50= Subject key identifier: E6:10:1D:15:5C:C1:58:CA:29:D2:CD:76:D5:4D:4E:B8:80:DD:BB:46 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 06E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 06E7 Signing time: Wed 20 Aug 2025 22:02:38 +0000 Manifest this update: Wed 20 Aug 2025 22:02:38 +0000 Manifest next update: Wed 27 Aug 2025 22:02:38 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: /HoFlEJE8FoUZ3FgwBYCXnZq/uZEc0TgCiEN9IfE0dY=) 2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Aug 20 22:02:38 2025 GMT Not After : Aug 27 22:02:38 2025 GMT Subject: CN=68a645fe-6a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:ca:6a:4e:18:75:7b:d9:01:b6:3d:a5:29: 3c:25:d3:55:42:91:dd:fb:fb:ed:e0:ec:11:cd:22: fa:31:55:7f:22:d8:c5:73:7e:de:0c:ca:17:2d:bf: 6c:51:6a:ed:01:73:55:d7:d2:64:f6:ad:59:e8:2e: e7:51:74:28:14:74:5e:f4:01:a4:fa:d6:93:91:44: fa:3e:6a:e3:e5:f2:e3:65:5a:f9:e8:f0:50:1d:db: b8:b6:c2:c2:f6:3d:8e:ce:fc:0c:40:b4:20:d8:b6: 1c:95:48:d3:c8:7e:42:e2:b3:91:49:37:99:6d:c4: 3d:a5:ec:6d:33:81:3f:dc:11:32:4a:92:8a:8d:03: 32:20:ee:49:30:8a:e5:74:2c:fc:af:f1:25:77:71: b6:16:81:9f:a2:f3:e5:8a:7c:85:19:96:1d:a3:31: 7c:c4:ae:72:c0:79:1d:d9:fd:fb:9c:56:cb:fa:4f: 58:9e:77:60:5b:54:dc:86:72:2c:8c:6e:ac:c0:d2: b7:fb:e9:46:89:aa:4f:ba:d1:b2:71:8f:56:34:28: c4:7b:91:dd:fa:92:54:0f:8f:ac:15:66:ae:49:14: eb:b3:22:fd:14:7e:40:19:10:a3:f8:00:51:a0:96: 77:82:ac:61:76:6a:be:aa:7a:dd:cc:15:d3:e8:5d: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:10:1D:15:5C:C1:58:CA:29:D2:CD:76:D5:4D:4E:B8:80:DD:BB:46 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:79:1a:bf:00:22:c4:e7:ac:a7:99:f1:86:aa:b5:cf:53:b1: 66:03:53:10:ef:5b:00:ac:17:c8:59:8b:d6:05:8c:95:43:94: c8:5f:1d:b7:ed:7a:a7:0e:1a:25:6d:f0:9c:72:20:cb:0f:a7: 46:54:cf:ed:85:6d:95:9f:51:72:3d:b8:ba:4d:d6:2b:b8:4c: 00:1a:5a:1a:e3:1c:75:c7:03:dc:68:44:cb:19:f5:ba:a1:ba: 58:d8:bd:fd:25:6d:c4:06:c1:b9:35:34:c1:a8:09:09:f1:87: 5b:e7:73:1d:1a:70:32:6d:b1:a9:85:f3:2d:9f:de:27:d8:c7: cf:93:a9:e2:77:e9:53:5c:61:e6:3b:7c:93:08:3c:4f:b6:06: e6:b4:8d:55:b5:00:59:59:ec:54:4f:b2:8c:d7:82:81:50:a1: e2:d7:c3:9a:5d:5c:cd:15:53:64:45:0e:b1:c0:90:a3:07:2c: 5a:ce:31:c8:1d:bb:c4:96:e7:4c:ab:c3:9e:42:c2:50:d8:0c: 9d:25:90:5f:79:32:f3:c1:da:33:75:70:30:5c:5a:01:18:88: 1c:4c:01:bc:64:9a:16:61:e6:76:e6:c6:b7:12:8d:08:8a:31: 39:b8:45:07:13:9b:6b:42:c9:52:c8:70:04:b6:7c:5c:f1:87: a8:5b:40:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUwODIwMjIwMjM4WhcNMjUwODI3MjIwMjM4WjAYMRYwFAYD VQQDEw02OGE2NDVmZS02YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g3Kak4YdXvZAbY9pSk8JdNVQpHd+/vt4OwRzSL6MVV/ItjFc37eDMoXLb9s UWrtAXNV19Jk9q1Z6C7nUXQoFHRe9AGk+taTkUT6Pmrj5fLjZVr56PBQHdu4tsLC 9j2OzvwMQLQg2LYclUjTyH5C4rORSTeZbcQ9pextM4E/3BEySpKKjQMyIO5JMIrl dCz8r/Eld3G2FoGfovPlinyFGZYdozF8xK5ywHkd2f37nFbL+k9YnndgW1TchnIs jG6swNK3++lGiapPutGycY9WNCjEe5Hd+pJUD4+sFWauSRTrsyL9FH5AGRCj+ABR oJZ3gqxhdmq+qnrdzBXT6F0LdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYQHRVc wVjKKdLNdtVNTriA3btGMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNeRq/ACLE56ynmfGGqrXPU7FmA1MQ71sArBfIWYvWBYyVQ5TIXx23 7XqnDholbfCcciDLD6dGVM/thW2Vn1FyPbi6TdYruEwAGloa4xx1xwPcaETLGfW6 obpY2L39JW3EBsG5NTTBqAkJ8Ydb53MdGnAybbGphfMtn94n2MfPk6nid+lTXGHm O3yTCDxPtgbmtI1VtQBZWexUT7KM14KBUKHi18OaXVzNFVNkRQ6xwJCjByxazjHI HbvEludMq8OeQsJQ2AydJZBfeTLzwdozdXAwXFoBGIgcTAG8ZJoWYeZ25sa3Eo0I ijE5uEUHE5trQslSyHAEtnxc8YeoW0BO -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:50 2025 by rpki-client