$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: kd81dCAM1DEL3IFh1PHK7+N5D+ZTB24aXLPv2yIW6EY= Subject key identifier: 53:53:85:EB:83:E5:C4:94:93:F9:1E:22:0C:40:EB:78:AF:08:35:D2 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 06E8 Signing time: Fri 22 Aug 2025 22:07:21 +0000 Manifest this update: Fri 22 Aug 2025 22:07:21 +0000 Manifest next update: Fri 29 Aug 2025 22:07:21 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: 1i4FBltfOr28Ahoy2GKc4rIve2T8p5wVF7SFZSgRW9E=) 2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Aug 22 22:07:21 2025 GMT Not After : Aug 29 22:07:21 2025 GMT Subject: CN=68a8ea19-15c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:00:c8:61:05:00:2b:b2:79:21:a8:f8:e2: b3:68:7f:6f:0a:04:28:c5:a3:4c:10:56:b6:34:64: 2e:05:bb:0c:9e:c7:48:70:4c:27:c5:1c:37:01:7e: b7:4c:35:70:c1:84:1a:89:95:be:e3:d8:b4:8d:15: 59:db:a1:21:58:dd:62:64:5e:87:9a:8d:96:c6:d3: c6:c8:f8:91:7e:58:97:84:60:cb:f1:78:77:9a:98: f4:f0:93:62:4b:0f:af:2e:f4:8b:81:d1:07:fb:73: 52:f1:64:35:36:d7:b3:67:4c:12:6e:a2:bf:87:5c: af:2d:ef:85:c8:33:b3:f5:e3:f1:65:08:39:4b:e0: 5e:29:46:4a:4c:ab:42:8e:d4:76:62:4e:e7:9b:b5: 82:57:ca:92:39:8e:58:1c:f9:22:9e:e6:1e:61:60: 91:cb:e7:62:70:44:b4:21:da:c2:8b:b2:74:6f:fe: e6:3e:3b:9e:0f:27:58:0d:38:0b:76:c9:05:b9:a9: b3:15:d2:c0:22:dc:dc:2e:fb:23:36:5d:74:88:3e: 1c:2a:bf:d3:3a:d6:7e:db:ae:f1:de:d6:28:21:80: d0:a1:df:ba:e3:e2:e2:bd:38:a8:10:26:a7:4c:b2: a2:b2:9a:fb:a2:f6:aa:d7:39:5e:36:be:c2:4e:07: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:85:EB:83:E5:C4:94:93:F9:1E:22:0C:40:EB:78:AF:08:35:D2 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1f:dd:b1:bc:8f:8d:16:87:1e:cf:43:03:ee:7a:30:36:22: c5:3f:09:a0:fb:88:4c:f8:84:6e:6d:d4:18:14:b3:2c:14:83: 3b:1c:bc:7e:76:8c:ca:06:db:a1:f5:b1:6e:63:96:bc:55:07: a8:57:bd:26:6e:66:26:eb:dd:09:6e:c9:ea:74:2e:32:aa:5d: c3:1c:4e:aa:b6:38:0d:36:f4:52:11:ca:d3:23:19:68:6a:23: c0:45:25:94:2a:5d:3f:4d:7f:77:73:56:ec:6c:42:ca:d2:4e: 0f:05:8e:22:0e:b9:7d:fe:d5:01:c9:d6:30:c3:b2:a4:f6:e8: 29:f0:94:01:d5:69:33:0f:44:e8:1e:ee:77:6f:b9:94:6c:ab: 5f:c3:81:ab:e5:f5:1d:bd:a1:f8:83:eb:1c:07:f5:0c:3f:ec: 36:ea:b1:fc:69:f1:26:e0:02:f8:22:1f:81:87:1e:e6:2a:3a: d7:fa:a4:3d:57:c1:2d:57:0f:6e:5f:a6:56:be:fc:1a:3d:ca: 71:b7:27:2e:3b:38:92:2a:a7:6e:da:e8:5a:e8:cf:5f:c5:31: 48:3d:2e:f3:2c:22:74:51:09:13:9f:3f:39:83:4a:6d:24:dd: 84:f6:14:9e:0a:8b:8f:17:d2:bc:0d:73:f5:8e:b3:8c:86:f2: 6e:2b:c1:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUwODIyMjIwNzIxWhcNMjUwODI5MjIwNzIxWjAYMRYwFAYD VQQDEw02OGE4ZWExOS0xNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxkAyGEFACuyeSGo+OKzaH9vCgQoxaNMEFa2NGQuBbsMnsdIcEwnxRw3AX63 TDVwwYQaiZW+49i0jRVZ26EhWN1iZF6Hmo2WxtPGyPiRfliXhGDL8Xh3mpj08JNi Sw+vLvSLgdEH+3NS8WQ1NtezZ0wSbqK/h1yvLe+FyDOz9ePxZQg5S+BeKUZKTKtC jtR2Yk7nm7WCV8qSOY5YHPkinuYeYWCRy+dicES0IdrCi7J0b/7mPjueDydYDTgL dskFuamzFdLAItzcLvsjNl10iD4cKr/TOtZ+267x3tYoIYDQod+64+LivTioECan TLKispr7ovaq1zleNr7CTgdYCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNTheuD 5cSUk/keIgxA63ivCDXSMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeH92xvI+NFocez0MD7nowNiLFPwmg+4hM+IRubdQYFLMsFIM7HLx+ dozKBtuh9bFuY5a8VQeoV70mbmYm690JbsnqdC4yql3DHE6qtjgNNvRSEcrTIxlo aiPARSWUKl0/TX93c1bsbELK0k4PBY4iDrl9/tUBydYww7Kk9ugp8JQB1WkzD0To Hu53b7mUbKtfw4Gr5fUdvaH4g+scB/UMP+w26rH8afEm4AL4Ih+Bhx7mKjrX+qQ9 V8EtVw9uX6ZWvvwaPcpxtycuOziSKqdu2uha6M9fxTFIPS7zLCJ0UQkTnz85g0pt JN2E9hSeCouPF9K8DXP1jrOMhvJuK8Ez -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:13 2025 by rpki-client