$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: B+PtyX9D6D6U8ULiF1V/pH3R6W9ktVBw8G98w7X0bJk= Subject key identifier: 7B:49:7D:D8:8B:81:F1:55:5D:53:73:A8:72:C6:4C:19:9F:94:02:E4 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0AB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A51 Signing time: Sat 06 Sep 2025 20:04:47 +0000 Manifest this update: Sat 06 Sep 2025 20:04:47 +0000 Manifest next update: Sat 13 Sep 2025 20:04:47 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: LwP0FFdIMJJEceci06Flb6x/TKU/2KHAgMlBnvDvEo0=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2739 (0xab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Sep 6 20:04:47 2025 GMT Not After : Sep 13 20:04:47 2025 GMT Subject: CN=68bc93df-4bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:9e:28:55:5c:b5:36:26:9b:63:94:60:db: 31:c8:46:25:56:56:a2:88:a0:53:53:1d:24:72:59: 7c:5c:fb:7a:69:24:7f:7e:d2:21:a3:b9:b5:6c:6e: 11:51:db:65:a7:65:a5:81:ce:76:1d:ef:2d:d9:10: c8:f1:53:24:2a:7a:f0:11:95:67:b9:5d:ac:37:72: 46:b9:29:50:b8:83:95:b4:09:a8:b8:c5:a2:87:04: 2c:48:50:4d:d2:39:ab:cb:f5:11:df:e2:de:98:f0: d2:a3:0a:51:a3:f7:36:54:8e:cc:9f:e1:88:8c:bb: 26:47:ef:b7:c5:12:a0:9b:ee:ec:48:82:cf:f4:db: 1a:9b:b1:56:76:4d:8e:e4:9f:a9:b1:a5:d0:03:04: 09:d0:f4:12:69:ca:da:c2:b9:9a:32:14:07:d0:77: 8e:1f:86:5e:3a:52:37:97:f9:ff:2d:4b:39:b8:01: ea:4f:07:85:c3:17:f4:de:ed:0a:32:04:42:18:80: f2:ec:bb:e3:f5:de:e8:f2:1d:32:60:ea:f9:fb:09: ef:26:2f:61:61:3f:25:60:6c:bf:bf:2a:30:7c:3f: 74:0d:53:f4:fd:62:db:36:27:9d:75:eb:f8:62:4e: 1e:da:76:29:b2:6a:8a:c5:fb:37:37:1b:b1:f8:6a: bc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:7D:D8:8B:81:F1:55:5D:53:73:A8:72:C6:4C:19:9F:94:02:E4 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:08:c0:60:70:87:94:2c:fe:3a:e1:b0:cd:a7:ae:b2:6b:11: 0c:ae:6d:7a:93:59:5c:04:14:b2:40:45:54:06:a0:fa:18:27: 16:07:4e:c5:fd:27:ee:00:f2:e3:74:6e:b9:a2:e0:44:ba:5b: 40:a2:1a:18:7b:ec:a2:d9:33:92:ce:05:22:44:89:60:08:d8: a1:1e:6a:67:55:42:46:9e:5e:fb:77:f0:13:32:ec:8b:10:36: a1:fc:26:21:75:fb:b4:0c:48:81:16:b9:19:e4:1d:0d:78:13: e7:61:f8:44:6d:f3:74:10:15:45:e9:b5:5a:d7:14:e8:4e:17: 7f:a3:b4:4a:42:7c:f4:1c:12:9c:6c:a0:37:d3:b4:1d:1b:e9: ca:d4:23:5e:90:77:4b:c6:c6:5c:46:f7:7f:c9:7d:1b:b4:42: 40:1c:41:30:e3:16:39:93:79:91:b0:b0:d7:6e:92:6e:a8:aa: 62:af:9e:34:13:48:49:53:9a:55:64:15:1b:53:49:f7:c3:09: a8:ff:63:a9:31:7e:b2:55:3e:b7:69:11:78:ec:42:14:ec:d8: a5:f0:71:ce:02:de:68:c5:60:29:93:c3:c1:5a:c4:ea:ec:2b: 71:05:d6:99:f7:93:60:14:f8:68:71:11:c4:41:8d:4c:ae:7f: ae:b4:6e:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwOTA2MjAwNDQ3WhcNMjUwOTEzMjAwNDQ3WjAYMRYwFAYD VQQDEw02OGJjOTNkZi00YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/KeKFVctTYmm2OUYNsxyEYlVlaiiKBTUx0kcll8XPt6aSR/ftIho7m1bG4R Udtlp2Wlgc52He8t2RDI8VMkKnrwEZVnuV2sN3JGuSlQuIOVtAmouMWihwQsSFBN 0jmry/UR3+LemPDSowpRo/c2VI7Mn+GIjLsmR++3xRKgm+7sSILP9Nsam7FWdk2O 5J+psaXQAwQJ0PQSacrawrmaMhQH0HeOH4ZeOlI3l/n/LUs5uAHqTweFwxf03u0K MgRCGIDy7Lvj9d7o8h0yYOr5+wnvJi9hYT8lYGy/vyowfD90DVP0/WLbNieddev4 Yk4e2nYpsmqKxfs3Nxux+Gq8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtJfdiL gfFVXVNzqHLGTBmflALkMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKCMBgcIeULP464bDNp66yaxEMrm16k1lcBBSyQEVUBqD6GCcWB07F /SfuAPLjdG65ouBEultAohoYe+yi2TOSzgUiRIlgCNihHmpnVUJGnl77d/ATMuyL EDah/CYhdfu0DEiBFrkZ5B0NeBPnYfhEbfN0EBVF6bVa1xToThd/o7RKQnz0HBKc bKA307QdG+nK1CNekHdLxsZcRvd/yX0btEJAHEEw4xY5k3mRsLDXbpJuqKpir540 E0hJU5pVZBUbU0n3wwmo/2OpMX6yVT63aRF47EIU7Nil8HHOAt5oxWApk8PBWsTq 7CtxBdaZ95NgFPhocRHEQY1Mrn+utG4w -----END CERTIFICATE-----Generated at Mon Sep 8 08:48:05 2025 by rpki-client