$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft File: HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json) Hash identifier: Q+H5f24qtj9YEUCipzqE3Hz3iq9UYxHBv9P9hV1WwkI= Subject key identifier: A2:D3:AF:8B:BE:1E:9B:38:1C:89:07:B6:3F:62:78:51:EF:7A:C7:20 Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 Certificate issuer: /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft Manifest number: 07A9 Signing time: Fri 22 Aug 2025 22:45:50 +0000 Manifest this update: Fri 22 Aug 2025 22:45:49 +0000 Manifest next update: Fri 29 Aug 2025 22:45:49 +0000 Files and hashes: 1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: Gqa2H1dJQISDGf2+pKR/V2AxBcAnONP6oexpeATtWrE=) 2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925 Validity Not Before: Aug 22 22:45:49 2025 GMT Not After : Aug 29 22:45:49 2025 GMT Subject: CN=68a8f31d-9564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:4f:41:74:1c:66:b7:32:13:24:54:a3:d0: 77:b0:9a:fe:e8:7f:5e:0a:dc:50:6a:4c:61:50:2b: 1e:f3:c8:a9:c2:41:cb:70:1b:8c:96:c6:95:66:e7: e4:ec:2a:33:41:5d:53:3f:40:8c:39:dd:71:07:0f: 26:8c:4e:70:23:09:58:e1:02:00:4b:c1:47:5f:1b: a4:13:76:d3:46:3c:7f:67:ac:d9:c3:da:b4:58:be: a5:94:80:f9:01:2e:db:e3:9a:23:c8:51:98:6d:e7: 51:08:3e:50:18:aa:0b:ce:72:1f:0a:1c:ba:3c:24: f3:64:dc:c3:09:ba:15:b9:0c:47:5d:b4:12:f2:62: d6:17:d7:74:2e:a1:63:9c:a9:7f:34:ac:bc:12:b4: 70:5a:f2:a4:86:9e:ef:0b:4b:f1:d9:f1:25:ac:51: 0b:72:97:c9:d3:d8:09:d2:e0:6c:85:27:d6:f8:66: 46:04:fd:b0:a8:1b:67:1e:4b:23:36:66:21:99:a8: 5a:05:91:18:70:96:14:ce:8a:e3:1f:fe:9f:eb:91: 9e:a2:a1:d8:57:47:e8:35:88:8c:2c:99:5a:20:65: 29:7b:99:c4:9b:bd:cc:fd:f2:54:c7:82:22:56:13: 42:44:27:f7:d0:6a:e5:c0:3c:75:06:a5:cf:8e:38: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D3:AF:8B:BE:1E:9B:38:1C:89:07:B6:3F:62:78:51:EF:7A:C7:20 X509v3 Authority Key Identifier: keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1c:de:a6:cc:6d:a7:ac:da:7f:62:bb:7a:ad:52:d0:a1:24: 31:0c:ea:81:c6:c1:99:4e:51:8d:a6:00:1e:8f:52:d8:a9:b0: 58:c6:8a:bc:49:3f:d1:d3:00:1b:bc:b3:d2:bc:8b:83:fb:cc: 3b:fb:13:3f:16:30:2e:04:75:db:f6:2f:15:23:6f:c6:0f:71: 44:eb:0f:eb:c3:bc:e7:55:f0:7e:7f:2e:01:14:7f:b9:58:18: 74:3d:7a:e1:1b:64:6c:77:63:cc:1c:3f:4b:58:b2:ee:5e:a4: 93:90:23:92:c9:62:ad:b2:64:ed:d1:ed:f7:1a:77:ce:9b:e5: 8a:96:8e:18:20:cb:2c:f9:15:1b:9c:db:c0:3c:8d:04:55:18: 70:a7:52:08:cc:14:00:6d:56:a1:76:c7:51:30:b1:0e:a4:ef: 64:5d:b6:34:d4:fc:da:fc:27:e1:b2:80:c4:d0:fb:05:8a:c4: f5:2e:ae:9a:95:ca:9f:33:15:a9:62:35:b2:65:09:83:59:23: 44:46:38:84:ba:be:c6:a6:33:b9:2c:c7:d2:25:88:9a:13:a6: 58:bc:38:7c:22:9e:85:f2:44:ac:7f:1c:c5:52:2f:54:f7:f8: 32:02:33:0e:6c:57:4f:d2:e6:4d:a1:42:27:2b:fe:02:df:87: e0:ed:c7:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ5NjMxMTAvBgNVBAUTKDFENDkyRkEzRjNCMjk1ODA0OTVBNjg4MEQ0MDRFRTBD MzcwQUQ5MjUwHhcNMjUwODIyMjI0NTQ5WhcNMjUwODI5MjI0NTQ5WjAYMRYwFAYD VQQDEw02OGE4ZjMxZC05NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnC5PQXQcZrcyEyRUo9B3sJr+6H9eCtxQakxhUCse88ipwkHLcBuMlsaVZufk 7CozQV1TP0CMOd1xBw8mjE5wIwlY4QIAS8FHXxukE3bTRjx/Z6zZw9q0WL6llID5 AS7b45ojyFGYbedRCD5QGKoLznIfChy6PCTzZNzDCboVuQxHXbQS8mLWF9d0LqFj nKl/NKy8ErRwWvKkhp7vC0vx2fElrFELcpfJ09gJ0uBshSfW+GZGBP2wqBtnHksj NmYhmahaBZEYcJYUzorjH/6f65GeoqHYV0foNYiMLJlaIGUpe5nEm73M/fJUx4Ii VhNCRCf30GrlwDx1BqXPjjhxswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLTr4u+ Hps4HIkHtj9ieFHvescgMB8GA1UdIwQYMBaAFB1JL6PzspWASVpogNQE7gw3Ctkl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3 RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZQkpXbWlBMUFUdUREY0sy U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVa3ZvX095bFlCSldtaUExQVR1RERjSzJTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9IVWt2b19PeWxZ QkpXbWlBMUFUdUREY0syU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8HN6mzG2nrNp/Yrt6rVLQoSQxDOqBxsGZTlGNpgAej1LYqbBYxoq8 ST/R0wAbvLPSvIuD+8w7+xM/FjAuBHXb9i8VI2/GD3FE6w/rw7znVfB+fy4BFH+5 WBh0PXrhG2Rsd2PMHD9LWLLuXqSTkCOSyWKtsmTt0e33GnfOm+WKlo4YIMss+RUb nNvAPI0EVRhwp1IIzBQAbVahdsdRMLEOpO9kXbY01Pza/CfhsoDE0PsFisT1Lq6a lcqfMxWpYjWyZQmDWSNERjiEur7GpjO5LMfSJYiaE6ZYvDh8Ip6F8kSsfxzFUi9U 9/gyAjMObFdP0uZNoUInK/4C34fg7ccV -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:55 2025 by rpki-client