$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: H0GQRpxwIuhwUWp0DHLxna+cT/rObEO28GdzsYWlnIU= Subject key identifier: 65:28:40:71:0B:B6:D1:A2:9D:AB:A3:8C:68:EB:00:91:DD:69:1D:5E Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: FE Signing time: Sat 23 Aug 2025 05:20:19 +0000 Manifest this update: Sat 23 Aug 2025 05:20:18 +0000 Manifest next update: Sat 30 Aug 2025 05:20:18 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: eWP/8XXu+A3Op7auz/YoD5+CKX+2LBpJmMVJMPDAdUQ=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: FsP9VYFAICAa71awQKv/xp4WMIgY/BZLf1PogGiTuE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Aug 23 05:20:18 2025 GMT Not After : Aug 30 05:20:18 2025 GMT Subject: CN=68a94f93-21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:54:ca:3e:b2:9f:70:d7:61:e3:bb:ae:24: da:af:e0:c4:98:81:da:46:83:da:73:08:67:8a:90: 2b:18:2f:f5:f8:46:aa:05:ad:33:a7:0d:85:68:df: 17:8f:b1:4d:45:54:41:5c:03:2d:5d:d0:93:cf:28: e9:c8:43:03:43:96:6c:47:7a:1a:4e:f1:e8:e9:82: f6:2b:dc:9b:6d:f4:bb:9a:cc:e5:b5:cf:d7:6c:06: 53:96:c0:17:14:20:46:35:8e:0b:9b:f9:f8:fd:a2: 74:f8:41:cf:f2:c7:54:7d:cd:66:7e:97:bc:f8:c6: f7:87:7e:14:fa:c8:27:d2:84:49:29:90:35:a0:58: 6b:56:d4:c5:38:71:c9:0f:cc:99:ad:99:f4:8f:df: 63:e7:f8:5e:09:e5:4a:cd:6e:56:b0:2f:32:99:6e: c9:af:e1:bc:ed:d5:42:6c:c6:50:91:92:48:42:a7: 35:84:6d:24:30:8e:ce:46:ae:33:80:73:a6:0e:d9: 74:a8:3f:7d:91:70:1c:bf:07:5b:40:63:5a:be:0e: 31:47:6a:be:29:e7:12:37:db:dd:b8:5d:b9:2c:a6: c6:cb:cf:26:17:93:e0:63:9b:c5:00:e9:74:80:89: 5d:b7:a5:59:87:37:c9:54:50:10:4f:7b:63:ac:f8: af:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:40:71:0B:B6:D1:A2:9D:AB:A3:8C:68:EB:00:91:DD:69:1D:5E X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:3f:68:f3:59:80:de:5d:53:a6:9a:5d:5e:6a:3b:47:0c:56: 6e:cb:5f:ee:73:dd:4f:5e:fd:f9:a3:97:94:68:5e:ac:f0:49: eb:9d:45:ea:9d:f9:68:f4:07:e2:de:4c:a4:51:ff:d5:f6:95: c5:02:36:7b:3e:2f:de:11:c7:2a:a3:ec:cf:ed:61:fe:ae:b3: 67:9a:7d:16:70:d9:16:77:4e:74:fa:e5:b4:98:0e:b8:cb:91: ad:12:32:60:d4:f6:08:8b:98:d1:84:8a:a2:5b:e9:6d:3c:af: 50:19:77:e7:83:d1:ad:4f:07:db:fa:3c:df:c0:0e:4d:30:21: cb:19:89:74:64:b3:87:2a:f6:56:40:e7:74:0e:bb:85:14:08: 4e:e7:f3:52:e4:68:ac:69:9c:89:21:9a:c1:8d:7d:62:2c:07: 30:17:c8:40:49:42:27:eb:67:ce:38:18:0b:c9:04:a3:99:80: 2c:f7:e2:22:eb:7a:ee:7c:2e:52:84:db:59:47:b1:a1:75:34: 7d:e2:9d:77:f5:ef:d6:c2:90:96:ec:5c:53:5a:39:fd:28:85: 8a:94:e6:3a:f7:bf:72:09:73:c4:76:a4:45:48:b4:e6:a9:ba: 27:f4:e6:b2:5a:1f:c8:46:a0:6a:7d:5c:4f:ea:a5:04:5c:b7: 4d:8a:d0:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUwODIzMDUyMDE4WhcNMjUwODMwMDUyMDE4WjAYMRYwFAYD VQQDEw02OGE5NGY5My0yMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ZUyj6yn3DXYeO7riTar+DEmIHaRoPacwhnipArGC/1+EaqBa0zpw2FaN8X j7FNRVRBXAMtXdCTzyjpyEMDQ5ZsR3oaTvHo6YL2K9ybbfS7mszltc/XbAZTlsAX FCBGNY4Lm/n4/aJ0+EHP8sdUfc1mfpe8+Mb3h34U+sgn0oRJKZA1oFhrVtTFOHHJ D8yZrZn0j99j5/heCeVKzW5WsC8ymW7Jr+G87dVCbMZQkZJIQqc1hG0kMI7ORq4z gHOmDtl0qD99kXAcvwdbQGNavg4xR2q+KecSN9vduF25LKbGy88mF5PgY5vFAOl0 gIldt6VZhzfJVFAQT3tjrPivCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUoQHEL ttGinaujjGjrAJHdaR1eMB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGP2jzWYDeXVOmml1eajtHDFZuy1/uc91PXv35o5eUaF6s8EnrnUXq nflo9Afi3kykUf/V9pXFAjZ7Pi/eEccqo+zP7WH+rrNnmn0WcNkWd050+uW0mA64 y5GtEjJg1PYIi5jRhIqiW+ltPK9QGXfng9GtTwfb+jzfwA5NMCHLGYl0ZLOHKvZW QOd0DruFFAhO5/NS5GisaZyJIZrBjX1iLAcwF8hASUIn62fOOBgLyQSjmYAs9+Ii 63rufC5ShNtZR7GhdTR94p139e/WwpCW7FxTWjn9KIWKlOY6979yCXPEdqRFSLTm qbon9OayWh/IRqBqfVxP6qUEXLdNitCG -----END CERTIFICATE-----Generated at Sat Aug 23 21:37:59 2025 by rpki-client