$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: Mz6jXN7T+UlMtI5EmScQVQ810wn6gAfk2I7J0TyqdRA= Subject key identifier: 95:84:19:6C:B5:3D:28:B1:D1:41:01:AE:DC:CD:25:37:67:15:7B:2B Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1E01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1DF2 Signing time: Sun 24 Aug 2025 16:05:00 +0000 Manifest this update: Sun 24 Aug 2025 16:05:00 +0000 Manifest next update: Sun 31 Aug 2025 16:05:00 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: RrGs8yLuZpTvLQ8xD7bBa6o9HnvPbmPhQBnXnBDbFAM=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7681 (0x1e01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Aug 24 16:05:00 2025 GMT Not After : Aug 31 16:05:00 2025 GMT Subject: CN=68ab382c-b973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:e6:12:cf:b7:7a:22:99:f7:85:f1:3b:e4: df:65:c1:04:a1:aa:c3:be:b5:7c:7c:57:ec:09:f7: 31:ae:ad:7f:5d:e7:1f:27:2d:23:27:a4:32:e9:c6: 0c:8b:24:72:b4:2f:07:0c:08:0d:36:fe:c3:d9:88: cb:43:1a:07:4f:ec:3e:47:7d:6f:5f:ea:20:bf:9b: 39:29:75:03:37:13:57:fe:97:64:da:60:2a:d6:a5: 93:65:f2:16:0b:0d:25:c4:44:73:4b:61:9d:e9:7b: 54:08:6b:0d:32:be:fb:d1:4a:e3:b8:9a:5d:b7:b2: 05:40:f5:3a:dc:41:94:06:37:a7:c3:ca:14:dc:61: ab:89:39:4f:14:54:7a:b7:04:a9:09:79:59:41:47: e7:14:bd:f4:a9:54:e2:a6:97:6e:f8:38:d4:1c:1e: eb:d8:e0:aa:92:b7:34:d6:95:cc:f5:e1:3e:0d:97: 3c:84:32:be:ce:42:34:cb:b8:54:9b:b6:e1:e1:dc: 99:9d:0b:73:57:83:7f:a9:81:97:2b:67:86:0b:39: 2f:bf:db:46:63:a3:7f:84:94:63:a8:7f:5c:35:ea: 48:29:b8:8d:f8:9f:1c:17:1e:7e:45:d4:4a:c5:d0: 64:9f:64:01:6c:65:76:99:06:b8:16:e0:6a:b2:28: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:84:19:6C:B5:3D:28:B1:D1:41:01:AE:DC:CD:25:37:67:15:7B:2B X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2c:30:d9:3b:b9:fc:d2:a8:0e:01:35:c8:4a:80:b4:85:f6: b7:9a:a2:09:38:8a:4e:57:ba:c7:21:b1:9c:a6:27:97:5a:fb: 52:0c:20:33:1d:2e:9a:07:8c:16:24:b2:e1:d7:ad:3b:19:e9: 58:ee:ad:54:4f:ab:d4:3a:61:b3:33:5d:a7:73:f4:c8:4c:b2: 9b:44:67:0c:32:09:30:ff:e5:08:fd:dc:46:ee:3a:fe:dd:90: 2a:ed:7d:76:79:ac:b1:4d:cf:ac:37:c8:d7:fd:98:05:dc:e1: f5:24:b6:37:e6:c1:bb:b7:f9:79:81:f3:2a:ad:04:b3:4d:6e: 99:29:84:ca:9e:63:28:5a:83:21:99:e6:af:6b:fe:d0:fd:8b: 8c:81:8e:74:f1:c9:04:f4:55:c9:d3:30:ed:97:1b:35:0b:cb: 08:ed:67:70:95:92:22:91:53:ca:0c:e0:3d:5a:c5:d3:c0:7a: 6a:4a:31:7a:d8:79:44:e3:7c:e8:3a:3a:68:81:7f:30:dd:e7: e1:2c:e9:91:b3:58:c2:30:e9:9a:5b:c8:ca:01:90:30:16:48: 54:27:63:43:69:97:1c:ad:d1:c0:9c:4b:87:27:2c:28:48:a2: 76:7c:51:9a:54:2f:e4:8a:55:66:ee:a2:e4:13:71:ba:f9:a4: 7a:2a:0e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwODI0MTYwNTAwWhcNMjUwODMxMTYwNTAwWjAYMRYwFAYD VQQDEw02OGFiMzgyYy1iOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3PmEs+3eiKZ94XxO+TfZcEEoarDvrV8fFfsCfcxrq1/XecfJy0jJ6Qy6cYM iyRytC8HDAgNNv7D2YjLQxoHT+w+R31vX+ogv5s5KXUDNxNX/pdk2mAq1qWTZfIW Cw0lxERzS2Gd6XtUCGsNMr770UrjuJpdt7IFQPU63EGUBjenw8oU3GGriTlPFFR6 twSpCXlZQUfnFL30qVTippdu+DjUHB7r2OCqkrc01pXM9eE+DZc8hDK+zkI0y7hU m7bh4dyZnQtzV4N/qYGXK2eGCzkvv9tGY6N/hJRjqH9cNepIKbiN+J8cFx5+RdRK xdBkn2QBbGV2mQa4FuBqsihLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWEGWy1 PSix0UEBrtzNJTdnFXsrMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOLDDZO7n80qgOATXISoC0hfa3mqIJOIpOV7rHIbGcpieXWvtSDCAz HS6aB4wWJLLh1607GelY7q1UT6vUOmGzM12nc/TITLKbRGcMMgkw/+UI/dxG7jr+ 3ZAq7X12eayxTc+sN8jX/ZgF3OH1JLY35sG7t/l5gfMqrQSzTW6ZKYTKnmMoWoMh meava/7Q/YuMgY508ckE9FXJ0zDtlxs1C8sI7WdwlZIikVPKDOA9WsXTwHpqSjF6 2HlE43zoOjpogX8w3efhLOmRs1jCMOmaW8jKAZAwFkhUJ2NDaZccrdHAnEuHJywo SKJ2fFGaVC/kilVm7qLkE3G6+aR6Kg74 -----END CERTIFICATE-----Generated at Sun Aug 24 21:52:09 2025 by rpki-client