$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft File: r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json) Hash identifier: 3kLugyvzbM8WMa5ANO3ZiCT43Tgojj4o+7bhj88YRDk= Subject key identifier: 1A:83:4C:13:5E:52:9B:BF:62:6F:C1:A8:57:6C:25:36:AD:E0:CE:0B Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F Certificate issuer: /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft Manifest number: 01CC Signing time: Tue 09 Sep 2025 03:01:20 +0000 Manifest this update: Tue 09 Sep 2025 03:01:19 +0000 Manifest next update: Tue 16 Sep 2025 03:01:19 +0000 Files and hashes: 1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: at9RUV12CepIjIdq0tvUtRk43VUDOVDmsCFNwySJyiw=) 2: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: MnDi5zIly9ESguHuvmf3VgR/9XTexkHTRfRhiBCHX8Q=) 3: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: IrYN/pS7dnASKDxXmePvjb6bA3nISZUXgp/s+ESuDSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F Validity Not Before: Sep 9 03:01:19 2025 GMT Not After : Sep 16 03:01:19 2025 GMT Subject: CN=68bf987f-c76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:80:1e:db:0d:55:24:6b:4b:9b:c1:1b:01: 12:c5:e2:cf:d0:1a:cd:82:05:14:54:c3:a1:09:9d: 8d:c7:0f:17:60:0a:67:6b:62:e2:37:b8:9f:a3:84: 55:fd:15:57:42:db:87:26:88:ec:1b:9d:dc:90:bc: fe:e5:92:45:e6:19:41:27:ea:a0:8b:db:56:7d:f9: 4e:a0:69:59:bd:d7:b3:1d:ca:05:1d:b7:09:14:d1: 96:c6:61:fb:4d:30:a8:61:fb:e5:7f:a8:ff:9b:78: 27:e1:4e:e2:92:5e:93:5b:af:f0:86:1e:e8:98:05: 8e:36:ec:d3:f1:23:a2:f9:c5:f2:21:6e:99:69:42: b1:27:0b:55:60:f2:b8:dc:be:ef:f9:2d:b6:85:d3: 06:a0:41:dc:5c:bd:02:2a:b6:ca:49:2f:5c:21:c4: ec:dc:12:f7:00:2e:2f:e4:2c:d8:21:aa:ad:19:54: ff:86:5f:25:fa:fc:32:d7:ae:02:25:2e:06:66:4c: 92:70:d1:76:54:32:32:ed:99:7b:29:63:70:73:17: 68:8a:ac:58:47:f8:a7:ba:19:0c:41:25:14:5d:8c: 2e:e2:f5:dc:11:c2:33:fd:d7:a9:1e:72:eb:31:bf: 28:ea:65:78:23:4b:34:64:4b:ce:0b:d2:b8:6f:ee: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:4C:13:5E:52:9B:BF:62:6F:C1:A8:57:6C:25:36:AD:E0:CE:0B X509v3 Authority Key Identifier: keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:27:05:14:0b:9f:9c:82:be:d9:57:e9:7f:8b:11:02:30:d1: d8:37:f4:2b:92:f6:70:dc:ee:8e:17:62:70:9e:42:91:a1:73: 47:3d:a6:53:88:29:00:cf:fa:f1:c2:57:7b:dd:d5:cb:a1:ea: e5:2b:89:ad:ce:74:09:f8:25:4f:95:75:7a:da:47:da:92:14: 9f:d4:87:47:e4:0f:3f:ae:71:fa:11:2c:f3:1a:2e:62:60:c2: 0d:e6:e0:d4:3e:fe:b0:6b:4b:79:51:16:33:22:68:7f:9e:94: 63:b3:43:17:90:68:b8:28:22:ab:28:af:44:25:dc:0f:c6:67: 2a:8a:b0:81:95:00:4f:8c:f8:74:e4:68:a2:13:f9:06:b9:05: f3:c4:7d:82:b7:41:bf:f1:8a:3e:89:d6:4b:04:c9:c5:f7:64: ea:d6:cc:f7:b8:60:d7:c9:ff:f5:f7:39:1c:3a:cf:f1:d8:e7: 49:c7:41:93:23:4e:29:2f:15:8c:c8:d1:2e:d3:37:5f:ee:14: 4f:f6:11:3e:44:15:e5:e3:0a:9f:35:ec:c0:db:29:76:ed:ff: c1:32:1e:a7:c3:ae:d7:e2:ff:c3:2d:9b:0f:b1:1e:b2:3a:e3: 1c:1a:d7:28:34:2b:5d:db:17:6d:ce:48:4c:3c:26:b1:76:11: a6:77:62:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1RjYxMTAvBgNVBAUTKEFGRjg1RjdFRjNEQTU4ODc0MzhERDIwNjFGMkU5RUUw QjJERDBBN0YwHhcNMjUwOTA5MDMwMTE5WhcNMjUwOTE2MDMwMTE5WjAYMRYwFAYD VQQDEw02OGJmOTg3Zi1jNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oSAHtsNVSRrS5vBGwESxeLP0BrNggUUVMOhCZ2Nxw8XYApna2LiN7ifo4RV /RVXQtuHJojsG53ckLz+5ZJF5hlBJ+qgi9tWfflOoGlZvdezHcoFHbcJFNGWxmH7 TTCoYfvlf6j/m3gn4U7ikl6TW6/whh7omAWONuzT8SOi+cXyIW6ZaUKxJwtVYPK4 3L7v+S22hdMGoEHcXL0CKrbKSS9cIcTs3BL3AC4v5CzYIaqtGVT/hl8l+vwy164C JS4GZkyScNF2VDIy7Zl7KWNwcxdoiqxYR/inuhkMQSUUXYwu4vXcEcIz/depHnLr Mb8o6mV4I0s0ZEvOC9K4b+4nvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqDTBNe Upu/Ym/BqFdsJTat4M4LMB8GA1UdIwQYMBaAFK/4X37z2liHQ43SBh8unuCy3Qp/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVGNi9CQ0E2NkI3RURB OEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJZERqZElHSHk2ZTRMTGRD bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JfaGZmdlBhV0lkRGpkSUdIeTZlNExMZENuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTVGNi9CQ0E2NkI3RURBOEUxMUVEODM1QzM5MjVDNEY5QUUwMi9yX2hmZnZQYVdJ ZERqZElHSHk2ZTRMTGRDbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmJwUUC5+cgr7ZV+l/ixECMNHYN/QrkvZw3O6OF2JwnkKRoXNHPaZT iCkAz/rxwld73dXLoerlK4mtznQJ+CVPlXV62kfakhSf1IdH5A8/rnH6ESzzGi5i YMIN5uDUPv6wa0t5URYzImh/npRjs0MXkGi4KCKrKK9EJdwPxmcqirCBlQBPjPh0 5GiiE/kGuQXzxH2Ct0G/8Yo+idZLBMnF92Tq1sz3uGDXyf/19zkcOs/x2OdJx0GT I04pLxWMyNEu0zdf7hRP9hE+RBXl4wqfNezA2yl27f/BMh6nw67X4v/DLZsPsR6y OuMcGtcoNCtd2xdtzkhMPCaxdhGmd2Ls -----END CERTIFICATE-----Generated at Tue Sep 9 17:37:39 2025 by rpki-client