$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft File: HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json) Hash identifier: xF4GJLSmia3eUbzl+jaDjNU7Awbq1cP9UyY3HdqQqzo= Subject key identifier: CF:B6:95:5C:D0:FB:57:5D:D6:FF:7B:D0:70:CC:42:9B:CD:95:8E:88 Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1C2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft Manifest number: 1C06 Signing time: Wed 02 Jul 2025 16:19:55 +0000 Manifest this update: Wed 02 Jul 2025 16:19:55 +0000 Manifest next update: Wed 09 Jul 2025 16:19:55 +0000 Files and hashes: 1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: 2pnn+VIb+BsJrYmRCvVMFW5uiWrE45XtRnTbvt++6X4=) 2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: 9EcXEyYQS23lcV2U+HKPELhdNtW+6VqWRslfao0UNEU=) 3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QoTcLfEkEV4sZtEqMQTgGT13hqif8q7yBrWiFwLEqIo=) 4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: ZGC2ZFJHwlq5Ep2j3cd1PYdlRsmipJnSDGQN5BOUcNk=) 5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: dgOhhCgJNmqIABfmqn7RZ7HEHVhf8zRLQCOO0zkoj5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7213 (0x1c2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: Jul 2 16:19:55 2025 GMT Not After : Jul 9 16:19:55 2025 GMT Subject: CN=68655c2b-5305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:15:6b:e3:a1:9e:ec:bb:a5:0f:94:d0:8a: 8a:7f:d7:c6:bd:2f:f7:bf:ef:06:ab:f0:c5:9d:8e: b1:a4:6b:6d:f0:e2:25:12:a4:f8:53:f4:a4:83:45: 52:81:5e:bb:35:0c:cf:aa:75:f4:c6:3a:5b:79:95: 1a:37:62:8e:9e:b9:be:fd:b5:ab:fb:61:b4:94:43: 25:b2:e6:7e:ca:5b:45:0e:63:08:4d:51:da:6f:34: cb:3d:af:76:97:b4:d2:be:66:98:78:5b:6a:70:3d: ff:6e:21:36:a9:f8:06:cf:df:97:c9:e0:a1:d1:5a: c5:45:bb:08:05:62:8e:f4:5a:8c:fe:f5:92:da:0c: bd:d2:02:ed:46:43:af:e7:87:a0:46:6f:61:3c:4b: 66:8a:12:58:9f:96:ac:da:f0:6e:23:e9:1d:c0:f8: 2d:e5:86:a1:36:98:9e:76:af:21:2d:15:96:07:d0: 4f:ae:a2:03:f9:59:4e:1f:10:66:52:9b:60:58:3b: e9:91:7f:a8:66:e0:23:21:e8:5d:87:13:88:f4:f4: 2c:48:97:46:b0:85:95:d4:b2:e1:70:dc:40:bb:6b: 43:e2:7f:af:17:68:62:80:aa:07:3a:e5:42:02:6d: b9:de:c1:e7:08:57:3e:79:75:12:75:0e:11:b9:84: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B6:95:5C:D0:FB:57:5D:D6:FF:7B:D0:70:CC:42:9B:CD:95:8E:88 X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5d:39:19:55:c2:76:75:41:cf:40:fb:42:8d:5a:b5:13:d6: db:86:ee:72:d2:eb:6b:53:cb:e3:fa:b2:b4:1a:be:2d:bc:9e: 12:c9:0c:d5:ed:95:5f:19:8a:37:cf:d5:cf:39:4c:b5:a5:ea: a3:66:af:9a:ec:6b:a3:a9:24:4e:4b:10:29:1f:71:65:e7:b6: 42:19:f8:e2:a5:e7:1a:18:ae:45:ab:1a:01:99:5c:51:cd:3c: 46:90:af:71:67:13:72:e4:b1:13:93:28:c1:2b:b2:ab:71:e3: fc:86:89:2e:83:5b:2e:98:95:46:8d:eb:e4:9d:b1:f1:97:c2: 7c:44:89:00:e6:f6:76:70:94:18:d3:27:fb:b6:35:3a:c1:65: 26:16:88:c7:84:c3:85:de:4b:13:0c:d6:51:43:7d:60:d6:66: e3:55:b0:41:cf:43:74:85:56:04:bb:1f:5d:d2:a1:2f:69:75: 8a:7e:34:56:dd:fd:d5:a2:4e:88:02:c8:be:96:f9:35:16:7e: 4c:85:99:a0:f3:75:7c:7f:f1:69:31:57:4e:6c:6f:73:55:8e: b5:90:67:24:6f:00:96:20:a1:b9:d3:90:62:23:30:fc:94:fd: 73:cf:fd:21:ec:93:06:1a:e0:eb:00:80:e7:c7:8f:90:86:75: 06:53:93:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjUwNzAyMTYxOTU1WhcNMjUwNzA5MTYxOTU1WjAYMRYwFAYD VQQDEw02ODY1NWMyYi01MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5u0Va+Ohnuy7pQ+U0IqKf9fGvS/3v+8Gq/DFnY6xpGtt8OIlEqT4U/Skg0VS gV67NQzPqnX0xjpbeZUaN2KOnrm+/bWr+2G0lEMlsuZ+yltFDmMITVHabzTLPa92 l7TSvmaYeFtqcD3/biE2qfgGz9+XyeCh0VrFRbsIBWKO9FqM/vWS2gy90gLtRkOv 54egRm9hPEtmihJYn5as2vBuI+kdwPgt5YahNpiedq8hLRWWB9BPrqID+VlOHxBm UptgWDvpkX+oZuAjIehdhxOI9PQsSJdGsIWV1LLhcNxAu2tD4n+vF2higKoHOuVC Am253sHnCFc+eXUSdQ4RuYTPRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+2lVzQ +1dd1v970HDMQpvNlY6IMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0FFOS8wOERBNjBDNkYxQjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlH Yi1scUtYOTNMdWdMVVlwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoXTkZVcJ2dUHPQPtCjVq1E9bbhu5y0utrU8vj+rK0Gr4tvJ4SyQzV 7ZVfGYo3z9XPOUy1peqjZq+a7GujqSROSxApH3Fl57ZCGfjipecaGK5FqxoBmVxR zTxGkK9xZxNy5LETkyjBK7KrceP8hokug1sumJVGjevknbHxl8J8RIkA5vZ2cJQY 0yf7tjU6wWUmFojHhMOF3ksTDNZRQ31g1mbjVbBBz0N0hVYEux9d0qEvaXWKfjRW 3f3Vok6IAsi+lvk1Fn5MhZmg83V8f/FpMVdObG9zVY61kGckbwCWIKG505BiIzD8 lP1zz/0h7JMGGuDrAIDnx4+QhnUGU5OV -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:48 2025 by rpki-client