$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: +51RaqCIMrZlhwOKQ59ua21hVV66ukrUpnXRmpFYndc= Subject key identifier: 3C:BC:78:E2:58:9B:23:C7:23:DF:E8:C4:81:03:F5:4C:26:ED:7C:7F Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 173E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 1733 Signing time: Sun 24 Aug 2025 16:36:15 +0000 Manifest this update: Sun 24 Aug 2025 16:36:15 +0000 Manifest next update: Sun 31 Aug 2025 16:36:15 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: hhczLFFMEBnBmTLa40ecVWcG+8CfJCl5ZF2HbHLOvZM=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: QoI3M9VOUs5JmUvtm4ggvS0vOfMTJHqMj+I41B3uqls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5950 (0x173e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: Aug 24 16:36:15 2025 GMT Not After : Aug 31 16:36:15 2025 GMT Subject: CN=68ab3f7f-6722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:53:a1:83:c3:80:fa:ff:bf:65:b7:d7:5f:96: 6f:7a:09:78:5d:37:45:f0:24:c7:5b:6f:e4:bd:0f: 5b:38:c8:0f:b1:1f:0f:03:12:e1:cc:cd:f1:63:fa: 44:de:0c:4f:d9:a6:fa:48:1d:aa:36:d8:bd:4e:74: e9:90:9a:5d:65:eb:3f:0d:14:73:be:34:57:99:25: a7:bd:89:15:ce:9d:a4:c6:8b:ab:ac:7a:2a:cd:f7: 5a:2d:76:34:ab:6d:ad:0e:28:8e:78:2d:95:8c:db: 00:ed:b4:17:74:4c:65:c3:c5:d8:45:b6:67:8f:d7: 8b:a7:03:fd:75:08:c1:83:33:5e:27:5b:f3:b2:37: a3:fa:3b:1b:c8:7f:1e:e9:77:63:f5:e1:7d:31:4b: 39:6f:e5:2c:87:bd:f5:2f:74:7a:99:9a:bb:28:90: 54:a6:90:c0:e1:6b:bf:92:37:94:b8:07:3e:3d:11: 0a:53:69:8c:d9:93:19:ff:62:33:28:68:e4:85:bb: cc:76:d2:36:89:19:7a:33:19:90:2b:cf:09:43:8e: 7d:04:06:8b:cf:98:17:69:7e:f8:60:6e:8d:0f:d0: 0a:d9:7d:77:b3:0a:19:8f:09:79:7a:26:85:6e:4b: 1b:a2:cd:c1:81:e8:cc:6b:b2:c4:7d:0c:31:17:30: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BC:78:E2:58:9B:23:C7:23:DF:E8:C4:81:03:F5:4C:26:ED:7C:7F X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3b:15:eb:4c:4b:3f:92:06:7d:98:f6:50:5e:ea:20:14:35: 54:3b:55:43:18:f6:32:70:d0:8d:2f:0b:7b:86:4c:a5:31:2b: b2:95:91:b2:5f:96:18:ed:37:ea:37:05:c9:a1:08:9f:3b:1c: 3f:0d:da:11:80:4b:c9:38:51:67:67:18:a8:76:2a:b5:df:79: 6a:0d:3b:aa:3b:77:80:8d:05:f9:10:e0:ac:b7:fa:9c:dc:1b: d1:97:92:86:79:7e:b2:5e:1b:26:26:70:7c:ab:1c:3b:bc:a6: a3:65:6a:a4:26:6c:df:66:82:95:48:1c:1d:f9:3d:3d:51:0d: a2:2c:ab:41:61:95:4f:96:d2:8a:80:ef:44:24:2e:a0:e5:8a: f6:f0:c6:78:15:2d:6f:ba:81:59:2d:88:3f:05:4a:7a:eb:aa: 2f:69:e3:76:68:9a:5a:49:d9:e9:8d:32:08:bf:66:4a:98:75: 2b:64:84:47:0d:31:57:7c:a8:7d:85:22:de:51:25:27:e7:39: 8e:03:ec:a5:97:49:17:5a:f5:47:29:8b:f8:19:43:8d:6e:d0: fb:5e:83:c0:3b:79:fe:ba:40:8c:c9:35:ef:cf:46:90:f6:5b: 10:7d:49:b9:dd:85:d3:82:11:23:97:ac:86:64:8c:bd:85:d8: 98:0c:12:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjUwODI0MTYzNjE1WhcNMjUwODMxMTYzNjE1WjAYMRYwFAYD VQQDEw02OGFiM2Y3Zi02NzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71Ohg8OA+v+/ZbfXX5Zvegl4XTdF8CTHW2/kvQ9bOMgPsR8PAxLhzM3xY/pE 3gxP2ab6SB2qNti9TnTpkJpdZes/DRRzvjRXmSWnvYkVzp2kxourrHoqzfdaLXY0 q22tDiiOeC2VjNsA7bQXdExlw8XYRbZnj9eLpwP9dQjBgzNeJ1vzsjej+jsbyH8e 6Xdj9eF9MUs5b+Ush731L3R6mZq7KJBUppDA4Wu/kjeUuAc+PREKU2mM2ZMZ/2Iz KGjkhbvMdtI2iRl6MxmQK88JQ459BAaLz5gXaX74YG6ND9AK2X13swoZjwl5eiaF bksbos3BgejMa7LEfQwxFzCM+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDy8eOJY myPHI9/oxIED9Uwm7Xx/MB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OxXrTEs/kgZ9mPZQXuogFDVUO1VDGPYycNCNLwt7hkylMSuylZGy X5YY7TfqNwXJoQifOxw/DdoRgEvJOFFnZxiodiq133lqDTuqO3eAjQX5EOCst/qc 3BvRl5KGeX6yXhsmJnB8qxw7vKajZWqkJmzfZoKVSBwd+T09UQ2iLKtBYZVPltKK gO9EJC6g5Yr28MZ4FS1vuoFZLYg/BUp666ovaeN2aJpaSdnpjTIIv2ZKmHUrZIRH DTFXfKh9hSLeUSUn5zmOA+yll0kXWvVHKYv4GUONbtD7XoPAO3n+ukCMyTXvz0aQ 9lsQfUm53YXTghEjl6yGZIy9hdiYDBJb -----END CERTIFICATE-----Generated at Sun Aug 24 21:48:16 2025 by rpki-client