$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: A/9QpJmrmLaAaAaInfa1JPSdmdkfcdEmM1BKSW/kgUo= Subject key identifier: D1:DC:CF:56:4A:D9:B0:66:03:F3:97:1F:43:A5:EE:5A:70:E6:AF:09 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1DF1 Signing time: Fri 22 Aug 2025 16:09:40 +0000 Manifest this update: Fri 22 Aug 2025 16:09:40 +0000 Manifest next update: Fri 29 Aug 2025 16:09:40 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: 9JIwbpjcblFL+E1hWTOlMpVrWOU5PjDZpTbYUisrhq4=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7680 (0x1e00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Aug 22 16:09:40 2025 GMT Not After : Aug 29 16:09:40 2025 GMT Subject: CN=68a89644-bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:da:ec:c5:fd:0a:8f:cd:46:d8:c8:5a:42: 08:16:37:1c:68:2b:be:42:49:7f:e7:8f:5f:26:05: b5:c5:00:d9:8f:a6:be:6e:4e:9b:1c:b9:f6:50:2b: 7c:d2:ee:85:95:12:66:0d:eb:3a:de:d5:92:db:34: 97:28:33:16:38:eb:d5:c1:86:66:ea:2d:ce:41:52: b3:89:23:a8:7c:d9:a9:1b:eb:ad:2c:c1:de:91:33: 95:d8:c9:8d:75:d2:3c:01:7c:15:df:ff:bf:61:35: 98:51:1a:31:38:1b:b9:fc:3e:4b:48:15:bd:6e:14: 38:db:5a:df:91:ca:f5:a8:11:47:f6:8c:68:23:6a: 0e:cb:9a:09:0f:f7:b3:9a:28:6d:f4:7e:60:fc:4b: ee:2c:ae:e9:f4:c4:80:8e:2f:ce:c5:21:fb:54:46: 24:a2:65:e0:e3:78:b0:d7:47:98:ca:59:ac:0d:ae: b5:be:16:3c:10:30:12:82:be:f8:d1:c4:f4:0c:e5: e8:97:5a:66:83:af:b9:31:42:a5:ed:41:77:4d:85: b1:9e:42:36:f9:9e:ac:e8:90:10:bc:83:59:b6:d3: fb:ba:44:82:bf:25:d9:7d:37:44:b4:31:12:c2:81: cc:b0:ba:9c:e9:a2:03:82:76:fe:62:48:8c:bc:79: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DC:CF:56:4A:D9:B0:66:03:F3:97:1F:43:A5:EE:5A:70:E6:AF:09 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:77:08:c5:4a:6d:cf:1f:16:b3:44:f9:fd:b5:23:01:49:1a: 80:16:b9:e6:d1:e9:7b:cd:37:2f:5b:e0:b4:59:29:b3:4c:99: e3:f0:67:dc:bf:22:f2:61:ea:dd:6c:0f:7e:04:3e:f9:56:97: a4:ef:54:32:7b:83:40:09:e9:59:b0:db:e4:04:8d:f1:5e:43: 76:fd:3d:eb:4b:e7:55:f1:e9:8a:a2:9d:f5:e7:b0:d0:6e:be: b0:e4:b2:f3:d5:9d:56:61:29:35:5f:d1:cb:26:ad:18:47:0d: 7f:04:89:38:a7:d8:d2:29:10:15:4b:6a:5b:86:9e:9c:48:c6: f1:3e:c8:c0:c8:ff:09:af:9c:ac:ff:fe:33:f9:aa:9c:1e:98: 4e:fa:66:94:2d:64:04:9a:6e:ac:e7:f4:0d:ca:f3:91:ab:fd: bb:19:f7:41:3b:be:e9:9d:67:8f:ce:0a:9b:d3:fc:e7:02:cc: 6b:be:42:c4:e1:fe:94:52:a3:3b:40:9c:9e:fb:5c:28:8a:01: 90:78:bd:c9:a8:22:07:b7:cf:f1:14:c8:a9:42:00:6e:1a:7f: a9:53:a5:6c:d9:c8:5d:62:99:5b:05:05:01:bb:8b:6f:31:89: 8b:cb:4b:b5:1b:ca:10:26:60:26:13:86:e8:3c:be:10:b4:46: 96:ea:eb:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwODIyMTYwOTQwWhcNMjUwODI5MTYwOTQwWjAYMRYwFAYD VQQDEw02OGE4OTY0NC1iYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR/a7MX9Co/NRtjIWkIIFjccaCu+Qkl/549fJgW1xQDZj6a+bk6bHLn2UCt8 0u6FlRJmDes63tWS2zSXKDMWOOvVwYZm6i3OQVKziSOofNmpG+utLMHekTOV2MmN ddI8AXwV3/+/YTWYURoxOBu5/D5LSBW9bhQ421rfkcr1qBFH9oxoI2oOy5oJD/ez miht9H5g/EvuLK7p9MSAji/OxSH7VEYkomXg43iw10eYylmsDa61vhY8EDASgr74 0cT0DOXol1pmg6+5MUKl7UF3TYWxnkI2+Z6s6JAQvINZttP7ukSCvyXZfTdEtDES woHMsLqc6aIDgnb+YkiMvHkYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHcz1ZK 2bBmA/OXH0Ol7lpw5q8JMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHdwjFSm3PHxazRPn9tSMBSRqAFrnm0el7zTcvW+C0WSmzTJnj8Gfc vyLyYerdbA9+BD75Vpek71Qye4NACelZsNvkBI3xXkN2/T3rS+dV8emKop3157DQ br6w5LLz1Z1WYSk1X9HLJq0YRw1/BIk4p9jSKRAVS2pbhp6cSMbxPsjAyP8Jr5ys //4z+aqcHphO+maULWQEmm6s5/QNyvORq/27GfdBO77pnWePzgqb0/znAsxrvkLE 4f6UUqM7QJye+1woigGQeL3JqCIHt8/xFMipQgBuGn+pU6Vs2chdYplbBQUBu4tv MYmLy0u1G8oQJmAmE4boPL4QtEaW6ust -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:49 2025 by rpki-client