$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: GJTbIRA5W49oqhCZE7S9BUUbpwbnMwJGDJ8ue0NCLFY= Subject key identifier: 69:8E:6E:3C:3C:74:D7:93:EB:FA:36:76:20:60:B3:30:B7:75:F2:F2 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 3530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 3507 Signing time: Fri 22 Aug 2025 14:23:25 +0000 Manifest this update: Fri 22 Aug 2025 14:23:24 +0000 Manifest next update: Fri 29 Aug 2025 14:23:24 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: TIH2T8V3c2NeDnDm4UK/Eb408MtbIFLrE7Oz9jCIB0A=) 2: D750ADC20ACF11F0B4EBA55FC4F9AE02.roa (hash: NL1ARYRNOz8aLxkxUrPpKF6D4wwBVw7q5BCEbZZrFuo=) 3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: I6SN+VthWHNwpn13bC2pRMPfdtmxkMFNn0d1M2WvxFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13616 (0x3530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Aug 22 14:23:24 2025 GMT Not After : Aug 29 14:23:24 2025 GMT Subject: CN=68a87d5d-e13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:8a:5d:57:e4:aa:4d:de:06:03:e1:a1:0a: b1:14:43:f2:97:be:25:3b:8e:df:45:dd:6e:1b:b6: 2c:f7:5b:21:ef:b9:06:1a:45:19:56:41:75:65:30: c9:7f:cf:7a:dd:08:da:f5:32:d5:42:b8:14:d6:2a: aa:75:6a:27:7f:10:73:c7:e5:f4:dc:48:fd:b1:98: f8:f1:69:bf:77:c5:b1:5e:3e:9c:a7:2e:9f:be:c7: 58:14:05:eb:54:13:dc:aa:62:39:df:7e:39:5c:96: 89:1f:f7:23:2f:d6:95:0d:ed:6b:c5:83:3e:d6:57: 55:9c:25:ed:e1:44:a4:08:c5:0e:98:9f:5d:04:e8: 44:26:3c:dd:23:d2:59:44:e5:c4:c8:40:33:c4:cb: ac:8a:4b:ae:b8:05:9c:37:11:03:c3:4b:22:97:91: ad:f6:67:31:0d:91:54:05:33:d1:28:ea:e6:8f:70: eb:d2:71:13:9a:94:c5:f5:21:4a:3c:d6:8e:03:24: c5:d2:fa:ef:c1:48:40:05:00:0c:0a:3a:f2:a1:8c: d4:35:69:19:c9:8d:b3:fa:5b:fb:2b:dd:be:98:e8: fe:19:9a:50:8f:66:66:47:ef:6d:98:69:3d:70:76: 3a:4c:cf:eb:7b:5d:e3:e8:e7:24:65:fa:57:70:c1: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8E:6E:3C:3C:74:D7:93:EB:FA:36:76:20:60:B3:30:B7:75:F2:F2 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ea:a9:6a:46:0b:b6:9c:44:af:06:8b:1a:5c:0f:00:dd:99: 0e:3b:35:50:03:e8:4c:bd:dd:82:bd:ad:c3:29:d1:c1:41:f2: 6a:f2:a9:e7:29:0d:67:cd:98:d1:45:32:51:81:8e:7e:b5:ff: f3:d6:79:8c:e6:b5:42:41:5e:5e:6b:60:a9:9d:1d:e3:3e:70: af:73:02:1b:99:00:38:ef:f0:75:9e:ee:85:5b:1f:5e:ae:b2: 9c:93:62:86:9e:d5:ec:08:75:1f:f9:7d:03:5b:23:cf:b2:01: 0d:28:ef:3c:0a:35:80:85:f2:87:0f:e8:9c:4c:0c:e4:c4:13: 33:9d:f0:6c:31:04:a7:1d:7d:c5:f3:12:6b:3d:74:62:40:3f: 56:e0:2b:1d:66:1c:61:ef:4b:19:ba:51:6c:3f:e6:36:80:82: 61:4a:87:bc:db:fb:19:d0:69:42:49:55:1d:00:e3:52:f7:79: 6d:d6:a6:75:a0:85:1a:73:d3:37:8a:59:98:ce:b1:71:0c:6c: ef:4e:c7:15:46:50:ae:91:f1:ff:93:8d:fb:96:ee:48:61:ba: bf:77:49:36:0b:5f:93:65:ac:b3:9f:5c:65:d9:1c:76:d4:31: f9:e1:b6:28:12:88:78:a9:35:81:01:c3:11:9b:4f:51:f0:0a: bb:c3:01:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjUwODIyMTQyMzI0WhcNMjUwODI5MTQyMzI0WjAYMRYwFAYD VQQDEw02OGE4N2Q1ZC1lMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN2KXVfkqk3eBgPhoQqxFEPyl74lO47fRd1uG7Ys91sh77kGGkUZVkF1ZTDJ f8963Qja9TLVQrgU1iqqdWonfxBzx+X03Ej9sZj48Wm/d8WxXj6cpy6fvsdYFAXr VBPcqmI53345XJaJH/cjL9aVDe1rxYM+1ldVnCXt4USkCMUOmJ9dBOhEJjzdI9JZ ROXEyEAzxMusikuuuAWcNxEDw0sil5Gt9mcxDZFUBTPRKOrmj3Dr0nETmpTF9SFK PNaOAyTF0vrvwUhABQAMCjryoYzUNWkZyY2z+lv7K92+mOj+GZpQj2ZmR+9tmGk9 cHY6TM/re13j6OckZfpXcME8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmObjw8 dNeT6/o2diBgszC3dfLyMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT6qlqRgu2nESvBosaXA8A3ZkOOzVQA+hMvd2Cva3DKdHBQfJq8qnn KQ1nzZjRRTJRgY5+tf/z1nmM5rVCQV5ea2CpnR3jPnCvcwIbmQA47/B1nu6FWx9e rrKck2KGntXsCHUf+X0DWyPPsgENKO88CjWAhfKHD+icTAzkxBMznfBsMQSnHX3F 8xJrPXRiQD9W4CsdZhxh70sZulFsP+Y2gIJhSoe82/sZ0GlCSVUdAONS93lt1qZ1 oIUac9M3ilmYzrFxDGzvTscVRlCukfH/k437lu5IYbq/d0k2C1+TZayzn1xl2Rx2 1DH54bYoEoh4qTWBAcMRm09R8Aq7wwGp -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:10 2025 by rpki-client