$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: TW020kV5ZvuaraaD0cwWXXLaMq5ixovIZP9IWJrOdIw= Subject key identifier: B4:85:04:B1:01:7A:7E:14:41:35:D0:51:F9:4D:60:1D:83:45:A0:D9 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 0186 Signing time: Fri 05 Sep 2025 04:05:08 +0000 Manifest this update: Fri 05 Sep 2025 04:05:08 +0000 Manifest next update: Fri 12 Sep 2025 04:05:08 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: 9Yo64jybZXnxaG63vgWdMNk6deEZGXTtNjBPC97y/rA=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: l+Q4St8uGoebFhbj3cnIjNMVXPuxOtW1fo31woffMhU=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: r6PCoelIVct+lAj2WsrBX0BoFYo/9ibJamB/UU4N0xE=) 4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: Iz380y9VTkSUeTgeze9iiFXSZYgaWspRNj6C26VUn2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Sep 5 04:05:08 2025 GMT Not After : Sep 12 04:05:08 2025 GMT Subject: CN=68ba6174-f5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:aa:1f:a7:e2:e3:82:44:0c:31:87:b3:a1: 3d:b4:8b:60:16:54:69:12:91:80:94:7d:d5:12:5f: 31:74:18:05:0c:f7:0c:83:00:ec:10:4c:7c:61:3b: aa:7a:c9:90:74:02:7d:30:24:e4:bb:18:5b:6e:d0: f6:c5:43:47:88:dd:e6:ce:a3:8f:42:11:86:5a:e2: 6c:0b:6c:79:d0:b9:52:e0:73:72:40:0e:e6:4b:af: d7:7c:93:6b:54:92:13:8d:4b:d2:09:5f:d5:c1:02: 7c:7d:ea:88:00:d9:bf:10:fb:93:2b:ea:be:9c:03: dd:a8:ca:e7:76:dc:66:67:64:22:e5:89:c8:fd:27: 67:6e:1c:35:f4:52:a0:f1:2f:7e:a1:0e:27:4b:91: 01:7f:cc:8f:e6:1c:a2:a1:3f:e3:8b:4b:3c:f9:e6: ae:cd:6c:a9:63:dc:1f:34:18:ea:74:ab:37:02:4a: 41:2a:87:e1:7e:0e:97:33:be:92:28:8d:e0:04:f1: b4:04:a3:b6:4b:0d:fb:1e:0c:77:88:12:bc:cc:88: da:84:de:e6:74:53:01:31:6a:d1:79:51:c8:94:df: 8e:49:68:cf:07:22:3f:58:4c:8e:52:f5:a7:59:95: fd:df:d6:e5:f6:9d:87:88:21:53:2b:f1:db:cf:5f: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:04:B1:01:7A:7E:14:41:35:D0:51:F9:4D:60:1D:83:45:A0:D9 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:57:e2:98:7f:4d:8a:04:e5:2a:2d:b8:52:aa:7b:01:42:45: c2:bd:70:e7:1e:1b:e3:e8:ee:85:f9:bc:0a:22:f9:d0:cb:42: ff:26:27:55:f4:6b:0d:01:e6:b3:66:3c:74:90:11:4b:d4:83: 36:6c:8a:58:dd:93:55:1a:05:ea:56:04:7c:41:0a:5e:6a:af: b7:2a:d9:ce:c0:57:b8:af:f4:aa:84:3d:f7:b2:28:26:1a:39: e9:a5:fb:38:f0:36:95:6a:ad:3d:01:fa:11:89:c2:5c:a3:b4: 5d:f8:81:26:bb:55:b1:17:56:2c:06:83:3c:c6:6d:6f:fc:9d: 5d:b8:be:9c:7c:2b:8c:4d:b5:08:f0:3a:b8:e6:bd:9a:56:cd: 00:f6:6c:e9:91:65:a8:bc:df:4e:27:6f:2f:ca:43:32:5b:48: 9b:f7:1a:fd:ec:b8:88:c3:e4:90:39:55:f3:de:b5:2e:ae:70: 5c:76:cb:e2:e2:91:3c:25:93:d9:ab:89:7c:34:22:a5:eb:ec: 8a:52:1f:ea:00:b4:07:1c:b7:e2:2c:f7:99:49:bc:b0:5d:44: cd:f2:e1:f8:5e:64:71:1c:9e:f8:b4:5d:fe:aa:c2:48:04:91: dd:64:01:f4:eb:d6:74:8c:91:90:7a:83:a1:2a:0f:55:95:9d: fd:22:5e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwOTA1MDQwNTA4WhcNMjUwOTEyMDQwNTA4WjAYMRYwFAYD VQQDEw02OGJhNjE3NC1mNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LiqH6fi44JEDDGHs6E9tItgFlRpEpGAlH3VEl8xdBgFDPcMgwDsEEx8YTuq esmQdAJ9MCTkuxhbbtD2xUNHiN3mzqOPQhGGWuJsC2x50LlS4HNyQA7mS6/XfJNr VJITjUvSCV/VwQJ8feqIANm/EPuTK+q+nAPdqMrndtxmZ2Qi5YnI/Sdnbhw19FKg 8S9+oQ4nS5EBf8yP5hyioT/ji0s8+eauzWypY9wfNBjqdKs3AkpBKofhfg6XM76S KI3gBPG0BKO2Sw37Hgx3iBK8zIjahN7mdFMBMWrReVHIlN+OSWjPByI/WEyOUvWn WZX939bl9p2HiCFTK/Hbz1+X6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSFBLEB en4UQTXQUflNYB2DRaDZMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8V+KYf02KBOUqLbhSqnsBQkXCvXDnHhvj6O6F+bwKIvnQy0L/JidV 9GsNAeazZjx0kBFL1IM2bIpY3ZNVGgXqVgR8QQpeaq+3KtnOwFe4r/SqhD33sigm Gjnppfs48DaVaq09AfoRicJco7Rd+IEmu1WxF1YsBoM8xm1v/J1duL6cfCuMTbUI 8Dq45r2aVs0A9mzpkWWovN9OJ28vykMyW0ib9xr97LiIw+SQOVXz3rUurnBcdsvi 4pE8JZPZq4l8NCKl6+yKUh/qALQHHLfiLPeZSbywXUTN8uH4XmRxHJ74tF3+qsJI BJHdZAH069Z0jJGQeoOhKg9VlZ39Il5X -----END CERTIFICATE-----Generated at Sat Sep 6 16:02:10 2025 by rpki-client