$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: Zodfk98+nIFFVwHVxKDhBaI3LzjlCDcMTzBTkQ3zje4= Subject key identifier: DE:CA:AE:01:E9:04:97:56:21:C7:93:B4:62:D0:A5:0D:93:36:AF:44 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0136 Signing time: Sat 23 Aug 2025 04:48:01 +0000 Manifest this update: Sat 23 Aug 2025 04:48:01 +0000 Manifest next update: Sat 30 Aug 2025 04:48:01 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: CJmJyhhF817aLfG6KGXxG8kh8ZfaFpa7+yR5U96hDJE=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Aug 23 04:48:01 2025 GMT Not After : Aug 30 04:48:01 2025 GMT Subject: CN=68a94801-fc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:83:01:5f:c2:52:7d:88:a4:fc:da:dc:df: 49:72:f0:63:2c:bf:14:09:32:31:7f:f2:26:24:03: 86:62:a8:d6:5a:f0:be:dc:83:87:30:ff:1e:08:4f: 65:38:9d:5b:eb:9b:8d:54:32:d8:8b:0c:62:85:88: 08:97:0a:82:a3:cc:4a:1e:ed:5e:b7:0e:38:63:2d: a0:3c:b7:47:ed:8d:7b:49:07:dc:0e:56:61:7e:9f: e1:19:93:03:45:54:a3:ff:91:34:ee:d9:21:4d:65: ff:25:eb:95:2a:31:28:fc:d9:e2:0c:c1:31:a5:68: 9c:a3:e6:a6:ea:15:19:12:99:5f:e0:ac:c5:65:ba: 3d:ba:51:76:50:ad:19:18:c3:0b:3e:dc:05:aa:31: ae:70:3a:25:26:28:9b:62:72:e6:8e:46:e1:9d:05: eb:b8:ad:16:23:07:8c:88:88:c7:5b:e2:4e:37:30: 1b:e7:3d:3b:e6:40:b6:50:a7:95:86:8c:da:f5:6d: 90:c3:61:f6:63:86:50:aa:ad:32:93:cd:89:ab:4d: a4:b6:ad:c6:cc:c8:b1:7d:41:92:ff:d9:62:8a:fc: 30:7f:93:d4:a6:0c:a1:e5:7b:60:d2:57:20:d6:18: 3e:07:f2:30:41:be:70:8d:df:5d:16:c1:f2:d1:b5: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CA:AE:01:E9:04:97:56:21:C7:93:B4:62:D0:A5:0D:93:36:AF:44 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:62:e7:35:af:ad:bb:d1:45:74:db:44:13:15:c1:d3:dc:cc: f0:66:e3:73:bd:94:4f:73:6a:98:9d:1d:e5:c2:b2:3c:82:a6: c6:5d:30:2c:b6:b6:aa:a3:75:f1:bf:ba:be:9d:9f:c8:60:13: 4b:f8:f7:c7:72:43:80:2f:84:35:3a:47:4f:a3:2a:53:f3:29: e1:53:c4:7a:22:33:a9:0d:7e:9f:83:e9:d6:43:d7:9c:29:c8: 36:4b:ed:db:1b:b9:76:c1:83:53:1b:28:10:2e:15:5b:ac:fc: 84:42:d7:b5:85:17:aa:e2:6e:70:b6:1e:6a:58:1e:b6:28:64: 35:99:6a:35:21:f9:2e:2d:31:6c:92:cc:e5:7d:69:2e:24:dd: 93:d2:35:5b:9d:c5:e3:e9:72:04:e3:be:5b:46:bd:84:cf:44: ee:52:60:22:32:20:51:58:b2:4f:fb:98:5b:83:c8:55:de:f0: c9:01:5c:21:ee:01:4a:bb:3f:17:7c:dd:0f:b8:e9:58:ff:fb: b9:65:d8:27:6d:6f:da:d1:17:67:aa:00:88:84:63:b0:65:47: 69:65:97:49:0e:e0:7e:bd:9b:b2:4e:39:86:df:43:e7:da:44: cb:f5:d5:da:4e:a9:e0:ab:d1:8a:c3:cf:f4:be:ac:bc:84:49: 93:17:56:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUwODIzMDQ0ODAxWhcNMjUwODMwMDQ0ODAxWjAYMRYwFAYD VQQDEw02OGE5NDgwMS1mYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SyDAV/CUn2IpPza3N9JcvBjLL8UCTIxf/ImJAOGYqjWWvC+3IOHMP8eCE9l OJ1b65uNVDLYiwxihYgIlwqCo8xKHu1etw44Yy2gPLdH7Y17SQfcDlZhfp/hGZMD RVSj/5E07tkhTWX/JeuVKjEo/NniDMExpWico+am6hUZEplf4KzFZbo9ulF2UK0Z GMMLPtwFqjGucDolJiibYnLmjkbhnQXruK0WIweMiIjHW+JONzAb5z075kC2UKeV hoza9W2Qw2H2Y4ZQqq0yk82Jq02ktq3GzMixfUGS/9liivwwf5PUpgyh5Xtg0lcg 1hg+B/IwQb5wjd9dFsHy0bWVdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7KrgHp BJdWIceTtGLQpQ2TNq9EMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFYuc1r6270UV020QTFcHT3MzwZuNzvZRPc2qYnR3lwrI8gqbGXTAs traqo3Xxv7q+nZ/IYBNL+PfHckOAL4Q1OkdPoypT8ynhU8R6IjOpDX6fg+nWQ9ec Kcg2S+3bG7l2wYNTGygQLhVbrPyEQte1hReq4m5wth5qWB62KGQ1mWo1IfkuLTFs kszlfWkuJN2T0jVbncXj6XIE475bRr2Ez0TuUmAiMiBRWLJP+5hbg8hV3vDJAVwh 7gFKuz8XfN0PuOlY//u5ZdgnbW/a0RdnqgCIhGOwZUdpZZdJDuB+vZuyTjmG30Pn 2kTL9dXaTqngq9GKw8/0vqy8hEmTF1ao -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:12 2025 by rpki-client