$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json) Hash identifier: VLYymN/5dorWBxp3rhwLXC0T101GtypR/cpb85lKaeQ= Subject key identifier: 60:43:02:BB:7A:36:8D:C1:8D:25:82:87:A5:20:2F:CF:BB:DC:C9:5E Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft Manifest number: 05FE Signing time: Fri 22 Aug 2025 23:06:27 +0000 Manifest this update: Fri 22 Aug 2025 23:06:27 +0000 Manifest next update: Fri 29 Aug 2025 23:06:27 +0000 Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: ZLk+hsM8XAlLueyOanEUU1imJo0gSBmuVxYYbUqHDQQ=) 2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: fb7qHh5ZQWTTd8VnRA4KyHFCOrkRy8TphWCCGB0gByk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Validity Not Before: Aug 22 23:06:27 2025 GMT Not After : Aug 29 23:06:27 2025 GMT Subject: CN=68a8f7f3-8ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:53:01:5d:6d:20:15:f1:3c:71:3f:61:cc: 46:d7:17:87:1c:dd:f2:30:dc:a1:0c:26:5d:58:63: 03:94:71:88:3a:05:7f:43:bd:71:32:e6:2b:5c:25: 6d:db:7b:10:17:d6:db:7b:21:b6:4e:d5:5d:8e:0b: 8a:70:09:a5:0c:7a:11:51:67:3e:5e:71:db:2a:eb: c0:81:38:63:ee:f5:38:4f:51:0f:48:f3:8c:6a:91: f4:0d:2c:4e:db:22:42:bf:6c:50:e9:7b:41:54:ba: 7d:c4:7e:0a:c8:19:9f:ae:a3:1d:25:a7:e3:47:0e: 5e:c6:d9:db:44:7f:16:ac:c5:71:8c:7f:01:42:7e: ae:b1:5c:00:99:88:5b:ef:f5:cb:07:68:71:8c:6a: cc:8f:91:ef:46:28:91:26:18:1d:a4:b8:11:4d:40: a0:ef:76:76:73:9a:3b:17:69:41:aa:f1:db:ca:4d: ac:f5:d4:12:0f:f2:1a:38:01:e9:be:48:62:5d:a2: 25:ce:7f:dd:14:db:09:f1:03:0d:37:9b:72:45:a2: b5:5e:0a:26:13:38:7c:14:1d:02:e8:80:8c:89:a2: ff:bc:f9:43:f9:49:db:09:4e:32:62:a4:03:74:ab: 1f:c0:8c:ac:28:2f:08:53:4d:3e:f4:6d:bd:05:00: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:43:02:BB:7A:36:8D:C1:8D:25:82:87:A5:20:2F:CF:BB:DC:C9:5E X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:57:07:31:a4:8e:1c:23:83:92:57:f6:e8:38:0e:e8:10:a5: d5:7e:b4:51:db:f6:b6:6c:54:23:a4:57:d4:a3:82:28:0b:ba: 37:53:c4:4f:ca:87:b4:cd:a3:48:1a:42:66:16:1b:5a:1d:a9: 03:9a:8d:39:2a:90:7a:50:f6:fc:6b:99:f9:a2:7c:04:84:52: 11:f7:05:de:43:f1:a3:09:7d:76:1d:ab:e7:8b:fd:89:1e:b6: 14:27:fb:4e:46:3f:7c:77:30:61:bd:c1:fe:3a:c8:82:7b:c8: 0d:46:51:d5:c9:56:aa:74:e9:99:99:cb:db:56:13:bf:38:48: 8f:4c:e3:6e:66:0e:4c:ef:c1:71:53:e5:a8:ba:5a:23:ef:b9: c6:39:69:45:bb:45:f6:da:a5:ca:fc:88:a6:b4:6e:0a:2b:ca: fc:d2:a6:ca:8c:fa:01:4c:1c:85:77:d1:9d:7e:98:f6:7e:bb: d5:e2:ec:af:5d:86:a9:92:fe:c0:93:51:8b:d6:3d:c5:52:01: fa:21:26:97:0f:c0:5d:07:79:c3:23:15:21:cc:0b:4c:30:57: 31:74:9e:89:db:a5:a8:c6:b6:b8:ea:c1:4b:89:30:13:21:a3: 9b:3e:fc:af:49:0a:61:18:39:1d:1d:f5:42:34:18:f0:6b:3e: dc:9d:2d:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjUwODIyMjMwNjI3WhcNMjUwODI5MjMwNjI3WjAYMRYwFAYD VQQDEw02OGE4ZjdmMy04Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYRTAV1tIBXxPHE/YcxG1xeHHN3yMNyhDCZdWGMDlHGIOgV/Q71xMuYrXCVt 23sQF9bbeyG2TtVdjguKcAmlDHoRUWc+XnHbKuvAgThj7vU4T1EPSPOMapH0DSxO 2yJCv2xQ6XtBVLp9xH4KyBmfrqMdJafjRw5extnbRH8WrMVxjH8BQn6usVwAmYhb 7/XLB2hxjGrMj5HvRiiRJhgdpLgRTUCg73Z2c5o7F2lBqvHbyk2s9dQSD/IaOAHp vkhiXaIlzn/dFNsJ8QMNN5tyRaK1XgomEzh8FB0C6ICMiaL/vPlD+UnbCU4yYqQD dKsfwIysKC8IU00+9G29BQDzDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBDArt6 No3BjSWCh6UgL8+73MleMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3 RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuVwcxpI4cI4OSV/boOA7oEKXVfrRR2/a2bFQjpFfUo4IoC7o3U8RP yoe0zaNIGkJmFhtaHakDmo05KpB6UPb8a5n5onwEhFIR9wXeQ/GjCX12Havni/2J HrYUJ/tORj98dzBhvcH+OsiCe8gNRlHVyVaqdOmZmcvbVhO/OEiPTONuZg5M78Fx U+Wouloj77nGOWlFu0X22qXK/IimtG4KK8r80qbKjPoBTByFd9Gdfpj2frvV4uyv XYapkv7Ak1GL1j3FUgH6ISaXD8BdB3nDIxUhzAtMMFcxdJ6J26Woxra46sFLiTAT IaObPvyvSQphGDkdHfVCNBjwaz7cnS3Y -----END CERTIFICATE-----Generated at Sat Aug 23 23:59:51 2025 by rpki-client