$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft File: Hwkr8ONn_aUUbSh9gQKybsj7grU.mft (raw, json) Hash identifier: jhAXVzARnWEnO38jTkgQd/AHAk8xENhkd81rLS1o4DU= Subject key identifier: E8:D4:51:9F:4F:7A:A2:B5:F9:64:FB:99:EB:73:40:BF:2B:40:91:0C Authority key identifier: 1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 Certificate issuer: /CN=A91A1AC4/serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Certificate serial: 030C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft Manifest number: 02F5 Signing time: Fri 05 Sep 2025 01:38:24 +0000 Manifest this update: Fri 05 Sep 2025 01:38:23 +0000 Manifest next update: Fri 12 Sep 2025 01:38:23 +0000 Files and hashes: 1: Hwkr8ONn_aUUbSh9gQKybsj7grU.crl (hash: nK09B4YDdr7LvDM+F1+fE+ylEmPNGuYI8IpRit6PrKc=) 2: E7923742526311F0986A3A5AC4F9AE02.roa (hash: C1cnMXKGJuTQ/i5MZh9Z6fPastUUu1Swd7Zuw8j4VwM=) 3: 26B54DD8326911ED9A685C1AC4F9AE02.roa (hash: TmDws7WheFOESe1yv//UWdgV37JOyUYHp5qinnrseq8=) 4: 2E56630C741611EE98997122C4F9AE02.roa (hash: f1I70aR9/6jQvTXHflDUxz1+wxpkM6Pj3ynFhb0cXfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 780 (0x30c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1AC4, serialNumber=1F092BF0E367FDA5146D287D8102B26EC8FB82B5 Validity Not Before: Sep 5 01:38:23 2025 GMT Not After : Sep 12 01:38:23 2025 GMT Subject: CN=68ba3f0f-22c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:3e:14:42:b3:93:59:eb:23:63:1e:3e:60: 9b:58:9e:99:97:5f:7d:65:fb:60:ed:3c:ac:b0:ef: 3a:2e:3c:a3:66:7e:7c:b8:cd:fa:e1:a1:da:85:ed: 5d:85:b5:6e:d5:6b:bc:42:c7:14:63:d0:2b:f1:11: 47:47:34:ad:ab:4b:70:bc:4d:cb:97:50:b9:22:a5: 46:3d:86:cf:ed:1d:a2:8d:3b:26:ce:e4:3c:1b:ac: 27:83:a0:25:d6:7e:fb:d5:c2:1f:f2:a1:d0:c3:6e: 0c:d4:70:f8:7e:77:42:45:9e:1e:7d:c6:da:24:0e: f5:31:30:fb:bf:4b:17:e8:e8:76:af:e9:a6:da:f7: db:54:2f:18:2a:c1:5f:0a:96:5e:35:c8:30:25:90: a8:46:0c:7e:e6:0a:3d:e0:75:6b:21:56:b4:c1:39: 96:a9:17:a3:3c:de:ad:a9:ae:87:41:57:ce:b1:c6: 75:81:58:b5:6a:0f:67:ac:35:88:a1:07:d6:98:11: 49:8d:29:be:0f:9b:6c:92:a5:74:95:f0:b8:14:3a: 48:86:7f:53:84:10:76:a1:a5:4e:4a:9d:dc:0f:68: 94:0d:65:47:c5:1c:7b:22:e2:2b:23:2e:d2:6d:46: 56:11:12:f9:67:b0:a5:6c:ac:6c:78:05:b5:4a:54: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D4:51:9F:4F:7A:A2:B5:F9:64:FB:99:EB:73:40:BF:2B:40:91:0C X509v3 Authority Key Identifier: keyid:1F:09:2B:F0:E3:67:FD:A5:14:6D:28:7D:81:02:B2:6E:C8:FB:82:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hwkr8ONn_aUUbSh9gQKybsj7grU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1AC4/1CB53F30F6B111EC9CAAB34DC4F9AE02/Hwkr8ONn_aUUbSh9gQKybsj7grU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e5:a2:53:27:4b:75:e4:dc:19:93:52:8a:ba:b1:88:e1:28: c5:05:54:c0:e4:18:2c:81:db:2e:45:da:b2:db:5c:e0:bd:97: 44:c7:2c:cf:a9:a4:eb:f8:02:77:ce:21:38:91:9e:89:88:47: 95:ab:5b:92:a6:ed:65:5e:0d:72:47:69:c5:17:df:bb:b0:f9: 31:12:4c:1d:4d:b8:73:5b:13:b7:94:42:b8:34:0f:71:47:98: 84:67:e8:24:25:83:d4:fe:1a:dd:f5:17:e1:74:c5:2a:86:ff: 7f:81:04:cf:bd:e2:1c:83:43:3e:9d:b1:30:26:50:57:da:9a: 6b:da:48:5e:eb:00:b9:ee:7a:54:6a:52:49:13:5f:8e:8e:9d: 48:7d:25:2d:bd:50:0f:c2:8c:88:96:b9:3c:11:c8:19:0c:06: 87:3f:1f:f9:71:86:db:63:68:6b:90:bf:b8:2b:3c:e9:a9:72: 2f:5f:f6:77:04:73:c5:f1:a1:9c:8f:4f:19:1f:4d:9e:c5:dc: fe:52:44:06:4f:45:36:36:a8:a8:0f:a1:93:f2:d4:c1:9b:c3: a1:e1:6d:d8:7d:4d:0e:6c:46:3e:79:fa:42:5f:67:e9:8c:4f: 0e:4d:cc:4a:53:ef:cf:5e:24:86:1c:6a:a9:3c:4f:3d:a3:b4: a3:ad:96:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFBQzQxMTAvBgNVBAUTKDFGMDkyQkYwRTM2N0ZEQTUxNDZEMjg3RDgxMDJCMjZF QzhGQjgyQjUwHhcNMjUwOTA1MDEzODIzWhcNMjUwOTEyMDEzODIzWjAYMRYwFAYD VQQDEw02OGJhM2YwZi0yMmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA8+FEKzk1nrI2MePmCbWJ6Zl199Zftg7TyssO86LjyjZn58uM364aHahe1d hbVu1Wu8QscUY9Ar8RFHRzStq0twvE3Ll1C5IqVGPYbP7R2ijTsmzuQ8G6wng6Al 1n771cIf8qHQw24M1HD4fndCRZ4efcbaJA71MTD7v0sX6Oh2r+mm2vfbVC8YKsFf CpZeNcgwJZCoRgx+5go94HVrIVa0wTmWqRejPN6tqa6HQVfOscZ1gVi1ag9nrDWI oQfWmBFJjSm+D5tskqV0lfC4FDpIhn9ThBB2oaVOSp3cD2iUDWVHxRx7IuIrIy7S bUZWERL5Z7ClbKxseAW1SlRDeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjUUZ9P eqK1+WT7metzQL8rQJEMMB8GA1UdIwQYMBaAFB8JK/DjZ/2lFG0ofYECsm7I+4K1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUFDNC8xQ0I1M0YzMEY2 QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9hVVViU2g5Z1FLeWJzajdn clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h3a3I4T05uX2FVVWJTaDlnUUt5YnNqN2dyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUFDNC8xQ0I1M0YzMEY2QjExMUVDOUNBQUIzNERDNEY5QUUwMi9Id2tyOE9Obl9h VVViU2g5Z1FLeWJzajdnclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs5aJTJ0t15NwZk1KKurGI4SjFBVTA5BgsgdsuRdqy21zgvZdExyzP qaTr+AJ3ziE4kZ6JiEeVq1uSpu1lXg1yR2nFF9+7sPkxEkwdTbhzWxO3lEK4NA9x R5iEZ+gkJYPU/hrd9RfhdMUqhv9/gQTPveIcg0M+nbEwJlBX2ppr2khe6wC57npU alJJE1+Ojp1IfSUtvVAPwoyIlrk8EcgZDAaHPx/5cYbbY2hrkL+4KzzpqXIvX/Z3 BHPF8aGcj08ZH02exdz+UkQGT0U2NqioD6GT8tTBm8Oh4W3YfU0ObEY+efpCX2fp jE8OTcxKU+/PXiSGHGqpPE89o7SjrZZI -----END CERTIFICATE-----Generated at Sat Sep 6 07:41:30 2025 by rpki-client