$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: zZd+4DGJ81Qi/fGbqqRFARzHKc4gS1ihLYebLJWBU+8= Subject key identifier: 5D:F3:21:0A:6F:70:3A:11:32:7F:85:6E:A3:9E:54:4A:BB:1E:FA:5D Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 0623 Signing time: Fri 22 Aug 2025 22:57:01 +0000 Manifest this update: Fri 22 Aug 2025 22:57:01 +0000 Manifest next update: Fri 29 Aug 2025 22:57:01 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: RgWf9Y3SLHvMPfy79w6MEojF6FeIHu0DNrGXjuV+njI=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: pMCjO+dEpym8WZT6FFXX0BN+eJ9YjqXuqC09C9kAxVs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: hc4+KqIoRZD4XQ5nNQcHzKLPhAv34gWPnKJZSG2cyV8=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: l9h/YYAjGjlzLvWP6nij0KuGfxuDVqvEm3iy7SoOZcE=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: 3RUylNRBzlhM6wNTSM7RbhRXATKVFjngYSNzKv1ez60=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: BlXgUYLAQgGHTY4XpWyfRou2YPtS9beWJgAM39FVJwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Aug 22 22:57:01 2025 GMT Not After : Aug 29 22:57:01 2025 GMT Subject: CN=68a8f5bd-e531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:e5:09:7c:02:f8:2d:a8:55:f4:fd:37:58: ad:2e:d8:23:d3:59:b2:d8:a5:dc:97:f8:1b:ea:da: 1e:65:ae:07:b0:02:7e:b7:59:47:05:9f:21:d1:7c: 74:d0:2a:91:e3:36:ad:c1:13:22:40:06:16:95:7e: be:36:39:d2:ac:ac:29:d5:66:ae:76:92:91:68:f3: 70:60:4f:1b:31:cb:01:6b:5d:07:02:30:8b:57:1a: 67:cb:b0:ae:a4:44:c7:ce:bd:2e:08:f4:8b:bf:2b: 1e:a2:f9:ca:4c:df:1d:5c:26:24:3f:43:69:7a:0e: d0:4e:88:0f:0d:05:08:0f:c5:57:54:7a:d9:90:31: b6:cf:55:78:ae:0c:18:4f:bc:98:10:80:5e:e5:34: ce:97:d0:ec:63:8f:dd:20:94:bd:29:bb:25:f5:1a: 93:aa:d2:fb:2b:a7:71:8e:bc:f7:76:07:be:15:c3: ed:9f:57:bd:62:66:de:2f:26:5e:b1:de:9e:23:74: 23:59:da:40:5f:ec:e5:e8:81:38:e5:b2:40:d6:e8: 3a:46:ea:50:b2:27:a3:ae:c7:64:37:bf:18:a1:df: 37:63:23:46:a9:30:22:53:27:1c:fa:f4:66:f4:18: d3:59:39:51:29:37:9d:89:e5:65:af:2b:3e:ee:d0: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F3:21:0A:6F:70:3A:11:32:7F:85:6E:A3:9E:54:4A:BB:1E:FA:5D X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e5:e2:d2:49:16:79:4e:e1:9d:7e:53:3b:8a:49:6e:76:d8: 50:e2:f5:3b:98:0f:aa:75:60:69:59:56:3d:d4:2e:5b:8e:3f: 1e:6b:73:c5:ca:1a:0f:7b:22:4b:7e:50:a2:d3:5a:a8:f8:f6: 11:2b:60:b3:da:5c:11:d1:24:e8:ff:5c:ba:d5:7e:98:a0:cc: 16:28:d8:05:64:06:a7:63:bd:4b:74:41:80:b7:dd:cc:ce:91: 9a:18:95:1a:13:82:a7:23:2c:fe:a4:f2:7c:3f:5c:2a:b3:77: bb:89:fe:d5:d0:ec:91:6a:39:35:09:a9:95:c3:4f:b4:4f:6f: bb:93:dd:53:51:a1:06:f5:37:33:f5:b2:fc:d6:2b:93:de:c0: 9c:ff:f6:53:10:25:4c:b0:e3:4d:3d:5d:52:14:e9:b0:4e:3f: 2f:54:4c:8b:85:dc:0f:5f:c4:90:68:e5:27:59:95:aa:c5:23: db:69:8d:49:bf:b4:0f:20:a1:98:60:85:18:1c:6f:85:3e:9b: 0f:19:9a:2a:dd:f1:58:f1:33:0b:41:c1:ca:34:5d:33:02:40: d9:3a:1d:55:19:23:2c:bb:c8:f4:89:f5:a5:79:72:73:b1:f6: fd:d7:d5:e5:11:fe:4b:f2:0c:0b:fa:37:f9:06:74:90:fe:14: 6c:13:d4:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUwODIyMjI1NzAxWhcNMjUwODI5MjI1NzAxWjAYMRYwFAYD VQQDEw02OGE4ZjViZC1lNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAblCXwC+C2oVfT9N1itLtgj01my2KXcl/gb6toeZa4HsAJ+t1lHBZ8h0Xx0 0CqR4zatwRMiQAYWlX6+NjnSrKwp1WaudpKRaPNwYE8bMcsBa10HAjCLVxpny7Cu pETHzr0uCPSLvyseovnKTN8dXCYkP0Npeg7QTogPDQUID8VXVHrZkDG2z1V4rgwY T7yYEIBe5TTOl9DsY4/dIJS9Kbsl9RqTqtL7K6dxjrz3dge+FcPtn1e9YmbeLyZe sd6eI3QjWdpAX+zl6IE45bJA1ug6RupQsiejrsdkN78Yod83YyNGqTAiUycc+vRm 9BjTWTlRKTedieVlrys+7tBEnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3zIQpv cDoRMn+FbqOeVEq7HvpdMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB55eLSSRZ5TuGdflM7ikludthQ4vU7mA+qdWBpWVY91C5bjj8ea3PF yhoPeyJLflCi01qo+PYRK2Cz2lwR0STo/1y61X6YoMwWKNgFZAanY71LdEGAt93M zpGaGJUaE4KnIyz+pPJ8P1wqs3e7if7V0OyRajk1CamVw0+0T2+7k91TUaEG9Tcz 9bL81iuT3sCc//ZTECVMsONNPV1SFOmwTj8vVEyLhdwPX8SQaOUnWZWqxSPbaY1J v7QPIKGYYIUYHG+FPpsPGZoq3fFY8TMLQcHKNF0zAkDZOh1VGSMsu8j0ifWleXJz sfb919XlEf5L8gwL+jf5BnSQ/hRsE9Qi -----END CERTIFICATE-----Generated at Sat Aug 23 21:23:32 2025 by rpki-client