$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: Mi7sDY3GQR1QMYWr8ixhKwIF7WNub40hgGSn0XxP4Yc= Subject key identifier: 86:0A:E5:C8:5F:F8:FC:DC:01:A9:9E:EF:DF:BA:F7:89:43:F3:66:6F Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0164 Signing time: Thu 21 Aug 2025 04:06:00 +0000 Manifest this update: Thu 21 Aug 2025 04:06:00 +0000 Manifest next update: Thu 28 Aug 2025 04:06:00 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: wN/d2sx3PtKkV3t5PPez8DGQ8vncyS9fsv4uDU/Umx0=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Aug 21 04:06:00 2025 GMT Not After : Aug 28 04:06:00 2025 GMT Subject: CN=68a69b28-27ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:44:d6:a4:12:63:8f:d6:a0:1c:d3:67:0c:91: ce:0b:f8:95:c5:ba:41:ee:26:77:40:30:a2:3e:ec: 38:86:53:45:b9:fa:da:c5:bf:a5:3b:66:75:ac:fa: 07:37:36:3d:67:fd:82:55:42:36:a4:2a:8b:62:5d: 1e:58:de:7a:67:86:bb:96:fc:8e:24:73:db:8b:ad: 89:c2:8b:2c:c7:cf:62:83:09:89:a6:67:38:74:10: b2:84:fc:03:c5:d6:80:3a:31:30:43:12:f9:b4:34: 88:f9:55:97:51:f2:9a:ad:12:97:6f:f7:b2:cc:99: dc:a5:3f:27:2b:28:63:4d:04:fb:00:1b:71:68:64: d7:e0:f6:b6:b8:18:5f:9e:8b:a4:3c:75:33:78:fc: 46:b8:2a:57:49:3e:ad:eb:1f:a9:f7:e4:ec:43:9c: e0:23:92:c8:b4:9f:fd:f6:95:7a:d5:d9:0c:6f:1b: b0:94:c2:ce:75:6f:61:05:a3:11:23:97:c0:7f:16: b0:c9:91:a9:a0:2b:34:36:5c:70:a1:91:7c:fa:92: bd:ce:61:41:a9:70:59:e4:4e:47:85:0a:ec:e7:85: 5e:51:a6:c5:de:f1:88:f4:24:cd:08:1d:59:17:23: e6:5e:44:b1:22:09:c2:87:9a:bb:fd:37:bc:77:87: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:E5:C8:5F:F8:FC:DC:01:A9:9E:EF:DF:BA:F7:89:43:F3:66:6F X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:86:52:d4:31:a3:9c:27:eb:3e:3c:fe:cf:ba:26:25:ac: 33:c2:cd:30:f1:11:5d:57:a9:3c:80:a8:f4:a5:35:c5:c2:91: 62:f5:1c:da:37:4b:fc:7c:c7:98:3c:6b:be:ae:c0:ba:08:f3: 40:fc:4e:2a:1d:ca:ab:01:a3:cd:03:44:c6:b4:83:21:89:77: 71:90:c6:f3:26:2e:1b:2a:0a:63:32:f5:9e:14:ca:bd:16:ba: d4:ed:8e:7c:29:72:08:dc:73:28:69:0e:c1:64:1b:dd:95:dd: 76:8b:04:92:95:74:e9:17:ce:38:89:88:73:c0:0a:13:b6:af: f8:f9:7d:6d:a0:39:15:79:38:ff:4f:d7:03:93:bd:2a:5b:e3: 82:af:6d:f1:41:c8:2f:e6:bd:ab:30:04:6e:ee:64:13:4b:b4: 36:c3:88:7d:57:b8:e9:b6:54:77:08:33:08:6e:b8:87:8f:7f: a1:21:a5:b4:47:e5:2f:b4:55:4c:fb:c6:0d:b8:4a:6a:fc:42: 97:f1:2b:63:2f:91:3d:88:e1:24:1a:b3:11:6e:bd:c0:53:df: 96:58:1c:b0:a9:45:15:06:e8:b9:ed:2e:9a:ac:c5:73:03:40: e4:80:5d:20:65:bc:5d:f9:62:88:f8:aa:f4:d7:04:15:2f:c3: f2:08:ea:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwODIxMDQwNjAwWhcNMjUwODI4MDQwNjAwWjAYMRYwFAYD VQQDEw02OGE2OWIyOC0yN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5kTWpBJjj9agHNNnDJHOC/iVxbpB7iZ3QDCiPuw4hlNFufraxb+lO2Z1rPoH NzY9Z/2CVUI2pCqLYl0eWN56Z4a7lvyOJHPbi62Jwossx89igwmJpmc4dBCyhPwD xdaAOjEwQxL5tDSI+VWXUfKarRKXb/eyzJncpT8nKyhjTQT7ABtxaGTX4Pa2uBhf noukPHUzePxGuCpXST6t6x+p9+TsQ5zgI5LItJ/99pV61dkMbxuwlMLOdW9hBaMR I5fAfxawyZGpoCs0NlxwoZF8+pK9zmFBqXBZ5E5HhQrs54VeUabF3vGI9CTNCB1Z FyPmXkSxIgnCh5q7/Te8d4f/vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYK5chf +PzcAame79+694lD82ZvMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsFYZS1DGjnCfrPjz+z7omJawzws0w8RFdV6k8gKj0pTXFwpFi9Rza N0v8fMeYPGu+rsC6CPNA/E4qHcqrAaPNA0TGtIMhiXdxkMbzJi4bKgpjMvWeFMq9 FrrU7Y58KXII3HMoaQ7BZBvdld12iwSSlXTpF844iYhzwAoTtq/4+X1toDkVeTj/ T9cDk70qW+OCr23xQcgv5r2rMARu7mQTS7Q2w4h9V7jptlR3CDMIbriHj3+hIaW0 R+UvtFVM+8YNuEpq/EKX8StjL5E9iOEkGrMRbr3AU9+WWBywqUUVBui57S6arMVz A0DkgF0gZbxd+WKI+Kr01wQVL8PyCOp4 -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:40 2025 by rpki-client