$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: A9IPU5Yd/OvbmVlwtZsaisMNIz+rTHWNhQDOF2TzJds= Subject key identifier: AB:C3:A7:DE:31:39:2A:13:17:F2:A9:BC:40:42:63:8B:A1:95:72:1E Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 0157 Signing time: Sat 23 Aug 2025 04:22:26 +0000 Manifest this update: Sat 23 Aug 2025 04:22:25 +0000 Manifest next update: Sat 30 Aug 2025 04:22:25 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: SnsYPYxdv+ieKnbYIdI5DCEUBVvKrVbxcNj+Hav6yNI=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Aug 23 04:22:25 2025 GMT Not After : Aug 30 04:22:25 2025 GMT Subject: CN=68a94202-356a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:7e:d4:cd:25:8b:53:24:37:b5:fd:85:42: a3:4b:76:39:b3:8c:bb:c5:b4:11:cc:d1:eb:70:2b: e6:ae:b1:4d:e1:2f:d1:e1:cc:a1:89:4b:29:e2:b8: d6:1b:1d:67:c0:b9:0d:37:8b:d1:20:39:63:78:30: f1:9b:3f:e6:98:23:92:52:55:b8:89:d0:a1:0e:4d: a7:ff:d3:39:76:d7:c1:5a:bf:42:f1:96:b7:2a:40: 70:ea:2f:5c:c8:0f:df:ea:f3:f7:c5:be:7b:21:e1: c1:3c:b2:70:7f:ef:e4:4c:d2:db:b9:94:bf:74:7c: 1e:e6:28:9b:69:ce:78:a4:7d:b3:96:11:e3:0f:40: 47:ee:5a:7a:ea:ea:03:9e:44:c7:f5:4b:c0:d0:26: 05:5a:80:b0:ba:ad:7e:0d:fb:27:b8:a0:3e:5d:97: 28:aa:d4:26:19:d7:7d:47:a9:13:56:36:60:77:15: 81:b0:5e:c7:10:c9:fb:9f:1f:f5:fa:93:1a:1e:d1: a4:dc:12:da:f7:d5:18:4c:55:b2:13:9c:66:0c:8d: 06:37:f0:0e:a1:ae:d5:2f:f5:1b:ba:43:04:fc:64: 3e:36:97:cc:85:83:77:bf:fc:8c:cb:4d:b9:7c:af: 21:71:19:17:29:f3:a1:fa:47:af:5d:12:52:04:fa: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C3:A7:DE:31:39:2A:13:17:F2:A9:BC:40:42:63:8B:A1:95:72:1E X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cd:01:40:77:97:26:7b:35:ae:73:80:b3:da:d3:d4:33:2a: 6a:aa:68:65:76:eb:34:0e:96:1a:68:f8:a3:27:3a:b4:0d:87: 9c:00:05:11:cb:b8:d2:9c:ff:a5:7a:c2:35:ef:52:f9:72:b9: fe:58:14:63:e9:bd:c4:72:8f:38:a7:08:df:09:e1:64:38:b6: 17:71:f8:c1:a2:71:f2:7e:29:20:02:ed:a0:54:c7:73:b1:d2: eb:52:41:4c:15:f3:7e:16:1d:19:7d:94:e7:e5:9c:0b:d6:ae: 73:5d:6d:0d:06:46:cc:2e:ad:8d:89:3c:8f:df:48:7e:78:8c: 19:4e:4f:8b:0d:dc:bc:0f:9e:24:72:06:cf:d9:c4:e0:67:1b: 1f:74:c1:d0:1d:2b:57:64:fe:04:c9:88:a4:1c:a5:c1:79:13: ba:0f:96:dc:ad:21:2b:e1:b2:29:95:a9:3c:75:63:be:10:51: dd:6e:8d:d0:11:be:be:b0:fd:bf:32:50:69:9b:f6:00:61:2d: 95:3d:dc:1d:73:d1:65:70:aa:af:fb:c3:4d:65:fa:49:e1:4b: 98:dc:6d:1f:e4:4b:d6:c5:eb:37:4d:dc:a4:da:d6:d4:8c:83: 8a:26:83:52:dd:9b:4f:87:62:e2:a0:9d:79:f6:56:71:77:fe: c2:5a:7d:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUwODIzMDQyMjI1WhcNMjUwODMwMDQyMjI1WjAYMRYwFAYD VQQDEw02OGE5NDIwMi0zNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq5+1M0li1MkN7X9hUKjS3Y5s4y7xbQRzNHrcCvmrrFN4S/R4cyhiUsp4rjW Gx1nwLkNN4vRIDljeDDxmz/mmCOSUlW4idChDk2n/9M5dtfBWr9C8Za3KkBw6i9c yA/f6vP3xb57IeHBPLJwf+/kTNLbuZS/dHwe5iibac54pH2zlhHjD0BH7lp66uoD nkTH9UvA0CYFWoCwuq1+DfsnuKA+XZcoqtQmGdd9R6kTVjZgdxWBsF7HEMn7nx/1 +pMaHtGk3BLa99UYTFWyE5xmDI0GN/AOoa7VL/UbukME/GQ+NpfMhYN3v/yMy025 fK8hcRkXKfOh+kevXRJSBPpDqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvDp94x OSoTF/KpvEBCY4uhlXIeMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKzQFAd5cmezWuc4Cz2tPUMypqqmhldus0DpYaaPijJzq0DYecAAUR y7jSnP+lesI171L5crn+WBRj6b3Eco84pwjfCeFkOLYXcfjBonHyfikgAu2gVMdz sdLrUkFMFfN+Fh0ZfZTn5ZwL1q5zXW0NBkbMLq2NiTyP30h+eIwZTk+LDdy8D54k cgbP2cTgZxsfdMHQHStXZP4EyYikHKXBeRO6D5bcrSEr4bIplak8dWO+EFHdbo3Q Eb6+sP2/MlBpm/YAYS2VPdwdc9FlcKqv+8NNZfpJ4UuY3G0f5EvWxes3Tdyk2tbU jIOKJoNS3ZtPh2LioJ159lZxd/7CWn2v -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:34 2025 by rpki-client