$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: i1ZA0YFF7gqFyRawrQplwxIh21KaHrU5B4Y3Pnc+h7k= Subject key identifier: D4:EC:E5:7D:A3:FC:D4:08:A7:06:E4:76:C1:0E:5A:04:51:53:4B:75 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 350B Signing time: Thu 04 Sep 2025 14:39:55 +0000 Manifest this update: Thu 04 Sep 2025 14:39:54 +0000 Manifest next update: Thu 11 Sep 2025 14:39:54 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: lbuoAfRglO407nxzLy0OcniKnK3R4zsAVjgbEa04izM=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13652 (0x3554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Sep 4 14:39:54 2025 GMT Not After : Sep 11 14:39:54 2025 GMT Subject: CN=68b9a4ba-f21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:3c:a2:72:32:8d:39:3e:10:97:53:94:ab: 87:7b:6f:bb:bc:c3:31:99:cb:8f:94:5c:a2:e9:52: 03:72:75:f3:c1:af:c6:a3:42:1a:37:1d:2f:f9:63: 0a:f9:e2:10:2a:d7:09:8d:f7:d7:92:30:36:b8:96: 44:15:c3:0d:7f:6e:f8:2b:83:4c:47:50:cf:34:cd: 97:06:cb:1c:c2:ae:e5:8a:c9:db:30:b5:5c:3f:8a: 73:75:7a:e2:a8:29:27:79:15:a9:ee:01:41:8c:7d: 1c:c4:ab:0d:04:53:8c:04:59:9a:0e:28:e8:73:54: 32:4d:05:51:0a:a2:a4:9d:84:c4:3b:fc:e8:e7:57: 13:7f:05:f8:f7:7c:69:6e:0b:0f:62:5d:63:a9:06: 24:94:f8:6a:9f:d1:a3:cb:15:47:30:b5:5d:a2:d3: 30:8e:3f:f7:f2:e8:e2:30:b1:a1:6e:ee:c0:22:7e: f2:d1:c4:f8:e1:66:4c:92:e1:0f:42:e0:c0:ec:1c: 41:20:46:42:f9:5b:5f:76:23:3f:43:b2:03:cc:64: 6c:db:0f:1c:ef:17:1e:d6:10:6a:6e:31:96:f9:28: c5:91:67:22:5c:64:21:5e:8a:70:9b:6b:13:88:91: a8:b8:c9:fc:0a:3a:f9:ae:f3:5e:ab:20:71:cf:06: a3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EC:E5:7D:A3:FC:D4:08:A7:06:E4:76:C1:0E:5A:04:51:53:4B:75 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ab:43:25:e3:b7:68:c1:8f:58:05:10:6c:fd:c5:43:82:f0: 25:73:7e:45:fc:71:c3:62:fd:c3:26:3b:37:9c:af:35:58:10: 78:3f:8a:93:58:ee:af:75:e2:d0:f9:a4:fb:17:1f:d7:e2:92: 57:8e:a5:97:85:89:7c:a2:b3:ab:fd:1c:40:fd:28:ef:f7:27: a2:02:1d:33:d6:3b:d2:a4:04:c4:1f:58:67:4a:f3:c8:d3:12: ad:20:7f:36:c4:15:57:20:98:62:16:14:54:38:61:72:b7:c0: dc:7f:06:7d:02:36:18:0e:fa:aa:94:9d:3f:b9:2b:e9:d2:7b: e1:bf:7b:c9:0f:4c:a9:e0:66:d5:0a:c8:3e:df:bb:b4:e3:d7: 47:ca:fb:99:52:6f:08:fd:2b:bb:ae:34:c9:5f:a9:35:fd:7c: 28:f1:44:f4:d2:a4:73:c4:e0:67:24:55:1d:de:9c:76:b6:ef: 7f:c6:da:ea:71:12:1d:73:fe:fc:1c:61:95:d8:60:22:0a:4b: ee:88:87:6e:2f:fa:5a:1f:25:90:18:5f:e9:18:85:f3:92:7a: 32:38:89:e9:62:e1:3a:2b:ef:2e:76:fb:87:66:0c:05:f9:c5: 0b:89:e4:df:30:a3:ec:14:5a:8c:fb:c4:1e:59:1d:fa:2b:c9: 96:f0:9e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUwOTA0MTQzOTU0WhcNMjUwOTExMTQzOTU0WjAYMRYwFAYD VQQDEw02OGI5YTRiYS1mMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnI8onIyjTk+EJdTlKuHe2+7vMMxmcuPlFyi6VIDcnXzwa/Go0IaNx0v+WMK +eIQKtcJjffXkjA2uJZEFcMNf274K4NMR1DPNM2XBsscwq7lisnbMLVcP4pzdXri qCkneRWp7gFBjH0cxKsNBFOMBFmaDijoc1QyTQVRCqKknYTEO/zo51cTfwX493xp bgsPYl1jqQYklPhqn9GjyxVHMLVdotMwjj/38ujiMLGhbu7AIn7y0cT44WZMkuEP QuDA7BxBIEZC+VtfdiM/Q7IDzGRs2w8c7xce1hBqbjGW+SjFkWciXGQhXopwm2sT iJGouMn8Cjr5rvNeqyBxzwajzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTs5X2j /NQIpwbkdsEOWgRRU0t1MB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUq0Ml47dowY9YBRBs/cVDgvAlc35F/HHDYv3DJjs3nK81WBB4P4qT WO6vdeLQ+aT7Fx/X4pJXjqWXhYl8orOr/RxA/Sjv9yeiAh0z1jvSpATEH1hnSvPI 0xKtIH82xBVXIJhiFhRUOGFyt8DcfwZ9AjYYDvqqlJ0/uSvp0nvhv3vJD0yp4GbV Csg+37u049dHyvuZUm8I/Su7rjTJX6k1/Xwo8UT00qRzxOBnJFUd3px2tu9/xtrq cRIdc/78HGGV2GAiCkvuiIduL/paHyWQGF/pGIXzknoyOInpYuE6K+8udvuHZgwF +cULieTfMKPsFFqM+8QeWR36K8mW8J5b -----END CERTIFICATE-----Generated at Sat Sep 6 08:14:48 2025 by rpki-client