$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: 1Gmv78XTHPw/PUa0sVYLHTzPrtHz92lw3ZqLLXOGMyA= Subject key identifier: 91:84:11:C2:56:BD:2F:6D:DD:40:FE:B4:9A:EF:57:09:35:4F:2C:FF Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 016C Signing time: Mon 21 Jul 2025 04:05:07 +0000 Manifest this update: Mon 21 Jul 2025 04:05:06 +0000 Manifest next update: Mon 28 Jul 2025 04:05:06 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: yYe2wx/hPk37T7anfMn3aQ2pgB22l27JpwePpP6e+3A=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: COduvcn03AcqXsB04vyV+PFYTFyroxeZoB1Buoefevg=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=) 4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Jul 21 04:05:06 2025 GMT Not After : Jul 28 04:05:06 2025 GMT Subject: CN=687dbc73-f34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e0:3b:08:fb:1d:ea:37:8e:b6:71:4b:b0:e4: 63:a7:73:9b:ed:e4:b9:d4:ab:0d:44:65:69:72:ad: 31:07:b5:d1:ee:02:0f:20:63:f9:bd:c4:b6:bf:af: 38:54:fc:38:bd:f4:c5:e4:30:b9:5a:29:bb:2b:8b: d8:49:40:20:57:a9:c0:eb:25:d4:67:45:58:f1:ba: 5b:3d:30:89:aa:6d:3b:70:0e:9e:75:55:67:db:0a: 96:a7:d3:56:3d:26:10:1c:92:91:6a:03:fd:58:24: 26:08:c1:76:90:78:b6:31:7a:1b:64:73:04:bb:9f: a3:b3:c6:1b:a8:e8:a4:b4:58:8d:85:c4:a3:fd:0b: fc:8d:a5:f9:e1:c1:8d:5c:16:3a:56:98:1a:ae:e4: 2b:a1:f4:11:6c:d2:03:05:0a:2e:e7:10:fe:d9:95: 39:e7:d1:62:68:40:4e:c3:34:a8:dd:ae:f1:b9:e0: c3:db:23:55:e6:49:bb:f8:2c:2d:ed:65:96:ae:cb: 60:53:28:6f:4b:3d:75:e3:5a:c2:9b:14:1f:20:4e: 75:e6:56:7d:af:db:44:08:48:98:26:61:f6:1c:cc: 5b:a9:90:b1:6b:9b:9d:5f:e0:58:ea:b1:c6:7e:f7: 3f:1a:4c:f1:cd:69:d7:08:23:16:49:f9:69:32:54: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:11:C2:56:BD:2F:6D:DD:40:FE:B4:9A:EF:57:09:35:4F:2C:FF X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a9:50:f1:f4:2a:70:7c:20:ba:8b:c5:b0:bd:0d:96:d9:c0: c9:6e:93:66:ce:d8:26:f7:92:58:c4:4f:a9:02:ec:a9:0f:58: 59:b4:8c:af:e4:a8:4f:c5:72:a1:d1:9c:bc:9c:f9:06:9b:97: 9e:91:30:a6:03:cf:bc:ae:f7:f1:c4:ee:da:cf:14:dd:24:f2: b8:1a:f0:53:96:a0:ae:35:b6:2a:ea:b8:eb:2c:79:6a:92:de: 54:23:b3:7d:b8:75:aa:9f:1d:ec:12:5e:71:52:2a:0d:ca:c4: 20:b3:36:1f:39:18:52:27:4b:72:96:c7:73:91:bc:39:fe:f1: 79:e6:b1:64:45:c7:0a:72:5b:a1:84:67:80:b6:f2:10:c6:77: 8d:86:15:d8:2b:b2:29:8c:1f:51:22:2e:8d:85:5c:93:2a:fc: 2c:e3:9f:84:59:11:46:42:3c:6b:22:9e:14:8b:f1:5b:2e:12: ae:60:83:b3:1a:c0:a5:b0:77:7e:8c:a4:54:d6:2e:e3:2f:23: 25:10:74:8c:68:7e:89:c2:c7:05:0b:a2:1f:f7:96:93:ce:25: 9c:07:a1:61:92:c3:ec:79:89:6f:cd:b9:26:2a:b4:41:cb:a6: 94:fe:0e:49:d8:a3:2e:64:ff:2e:89:e1:d1:72:c9:aa:23:03: e3:b9:36:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwNzIxMDQwNTA2WhcNMjUwNzI4MDQwNTA2WjAYMRYwFAYD VQQDEw02ODdkYmM3My1mMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+A7CPsd6jeOtnFLsORjp3Ob7eS51KsNRGVpcq0xB7XR7gIPIGP5vcS2v684 VPw4vfTF5DC5Wim7K4vYSUAgV6nA6yXUZ0VY8bpbPTCJqm07cA6edVVn2wqWp9NW PSYQHJKRagP9WCQmCMF2kHi2MXobZHMEu5+js8YbqOiktFiNhcSj/Qv8jaX54cGN XBY6VpgaruQrofQRbNIDBQou5xD+2ZU559FiaEBOwzSo3a7xueDD2yNV5km7+Cwt 7WWWrstgUyhvSz1141rCmxQfIE515lZ9r9tECEiYJmH2HMxbqZCxa5udX+BY6rHG fvc/GkzxzWnXCCMWSflpMlQflwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGEEcJW vS9t3UD+tJrvVwk1Tyz/MB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpqVDx9CpwfCC6i8WwvQ2W2cDJbpNmztgm95JYxE+pAuypD1hZtIyv 5KhPxXKh0Zy8nPkGm5eekTCmA8+8rvfxxO7azxTdJPK4GvBTlqCuNbYq6rjrLHlq kt5UI7N9uHWqnx3sEl5xUioNysQgszYfORhSJ0tylsdzkbw5/vF55rFkRccKcluh hGeAtvIQxneNhhXYK7IpjB9RIi6NhVyTKvws45+EWRFGQjxrIp4Ui/FbLhKuYIOz GsClsHd+jKRU1i7jLyMlEHSMaH6JwscFC6If95aTziWcB6FhksPseYlvzbkmKrRB y6aU/g5J2KMuZP8uieHRcsmqIwPjuTYD -----END CERTIFICATE-----Generated at Tue Jul 22 04:51:49 2025 by rpki-client