$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft File: HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json) Hash identifier: J3z6FiJ+wLtXtqXffgxCUR/AqJ+pENci47lyOATaBZ4= Subject key identifier: 09:CF:D8:05:D4:10:87:AD:68:84:1E:BA:C5:49:7C:60:9E:F3:12:79 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft Manifest number: 015E Signing time: Tue 01 Jul 2025 04:35:36 +0000 Manifest this update: Tue 01 Jul 2025 04:35:35 +0000 Manifest next update: Tue 08 Jul 2025 04:35:35 +0000 Files and hashes: 1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: 6frVdUB/7HOxfduBY27IbzUo8NpjOCVWJSeXVbxUePg=) 2: F9F53948599011EEB54F7158C4F9AE02.roa (hash: kdsA/bny2SyuYzwYvWjWWNRHht/7GqZqRAtQE/oZ56I=) 3: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: cx7TKtd7HmL3zJOKMMAUN+RPjHatKrphbZ1mWSuR5eI=) 4: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: jLjyxuzoihO6U4uZj4lE+4ZXFm13Tj1cLNw88yjt4fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Jul 1 04:35:35 2025 GMT Not After : Jul 8 04:35:35 2025 GMT Subject: CN=68636597-bca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8a:6e:e4:ad:4c:1c:0d:93:a4:4e:0c:5e:d0: 3f:a2:bc:14:bf:71:a7:4f:45:cc:0a:6a:8d:02:9f: 15:e0:03:9d:98:f0:5f:9e:f6:c9:e1:17:0e:8b:09: 47:04:11:1b:40:76:02:72:61:cb:2b:e1:46:ba:4f: d9:bf:aa:1d:62:98:7b:c5:c4:9e:26:81:ab:85:92: ae:da:29:1f:37:d0:0b:90:d3:06:3f:6b:1e:65:35: 14:d7:f1:8f:e5:b5:f3:de:b9:87:e5:56:1e:64:81: 03:ae:ed:f8:12:48:7f:d5:60:96:47:81:f5:a5:33: c3:d1:23:a9:6a:7c:95:97:5c:9e:59:e5:89:b5:3f: 2b:7c:1c:5d:9b:b3:bd:9e:43:ef:35:21:36:dd:83: 76:dc:1e:30:01:34:3f:29:3f:09:e2:41:aa:f2:5c: 0e:1e:b8:6c:ed:8a:58:f7:ae:6f:4b:f7:b2:1a:6d: 38:c6:33:f2:0f:be:de:bc:76:fc:37:b6:5c:c1:c0: 6d:30:14:8c:8d:c2:49:3f:e6:f5:b5:89:66:b3:1e: 83:64:c1:c8:0a:28:0e:9d:4c:3e:d6:0e:08:b8:35: c6:25:da:f3:7c:2b:21:41:f6:a4:ff:98:e6:b1:e1: 1e:e1:17:34:4b:48:ec:a8:c8:54:9b:7c:78:a8:d5: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:D8:05:D4:10:87:AD:68:84:1E:BA:C5:49:7C:60:9E:F3:12:79 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:e6:0f:b2:51:85:59:0d:c5:f1:6c:fb:34:5f:a1:b7:10: 03:96:f3:b6:a6:be:f4:6e:9a:23:29:1c:a1:26:e1:a0:2f:7f: 7b:9b:f1:d9:fd:03:74:d0:a6:d4:1f:33:07:83:58:83:c3:cf: e4:6e:a1:6a:a9:29:e9:6b:dc:eb:2d:4b:0a:f5:07:0b:2f:28: bc:d7:8b:c9:63:46:c5:c9:be:4c:05:00:9b:fb:fc:6f:85:8b: f3:e6:7d:9d:70:03:7d:59:4a:30:45:b0:d4:de:b3:16:27:1a: 3e:31:74:8e:93:97:ce:60:92:e6:d9:aa:7c:c3:b7:06:69:ba: 23:da:ae:8e:0b:ac:48:d2:2d:09:6f:7a:3b:a1:54:a4:65:e7: de:50:b1:91:99:fd:fb:01:62:a7:1c:d4:55:b6:6b:d3:34:49: d4:28:24:31:b8:df:51:46:7f:6d:17:0e:b2:70:0f:fc:d0:91: 75:30:b2:61:2a:97:d9:08:4d:2c:1d:f0:0c:5a:1d:63:46:57: 84:91:ad:67:e9:1f:51:84:0f:70:22:c9:f9:93:bc:74:49:aa: 0d:ea:d6:55:3f:f5:35:fd:7a:f9:bb:65:c4:7c:e6:ac:dd:93: c3:1a:6c:99:5b:a2:0b:85:63:73:42:64:f8:35:fc:fa:c9:47: 4a:a3:ee:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwNzAxMDQzNTM1WhcNMjUwNzA4MDQzNTM1WjAYMRYwFAYD VQQDEw02ODYzNjU5Ny1iY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ypu5K1MHA2TpE4MXtA/orwUv3GnT0XMCmqNAp8V4AOdmPBfnvbJ4RcOiwlH BBEbQHYCcmHLK+FGuk/Zv6odYph7xcSeJoGrhZKu2ikfN9ALkNMGP2seZTUU1/GP 5bXz3rmH5VYeZIEDru34Ekh/1WCWR4H1pTPD0SOpanyVl1yeWeWJtT8rfBxdm7O9 nkPvNSE23YN23B4wATQ/KT8J4kGq8lwOHrhs7YpY965vS/eyGm04xjPyD77evHb8 N7ZcwcBtMBSMjcJJP+b1tYlmsx6DZMHICigOnUw+1g4IuDXGJdrzfCshQfak/5jm seEe4Rc0S0jsqMhUm3x4qNUkTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnP2AXU EIetaIQeusVJfGCe8xJ5MB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBX N0xQcTduOHNxWDYzZ1FVSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7K+YPslGFWQ3F8Wz7NF+htxADlvO2pr70bpojKRyhJuGgL397m/HZ /QN00KbUHzMHg1iDw8/kbqFqqSnpa9zrLUsK9QcLLyi814vJY0bFyb5MBQCb+/xv hYvz5n2dcAN9WUowRbDU3rMWJxo+MXSOk5fOYJLm2ap8w7cGaboj2q6OC6xI0i0J b3o7oVSkZefeULGRmf37AWKnHNRVtmvTNEnUKCQxuN9RRn9tFw6ycA/80JF1MLJh KpfZCE0sHfAMWh1jRleEka1n6R9RhA9wIsn5k7x0SaoN6tZVP/U1/Xr5u2XEfOas 3ZPDGmyZW6ILhWNzQmT4Nfz6yUdKo+6T -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:04 2025 by rpki-client