$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft File: HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json) Hash identifier: JxcmkfucBbPR5uOt0z6dfnx+gjJUyFzH/+7N3PfE7CI= Subject key identifier: 55:1F:CE:1E:D6:10:0B:22:D8:16:E4:62:B2:B8:93:43:06:B5:2F:65 Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 Certificate issuer: /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft Manifest number: 46 Signing time: Sat 23 Aug 2025 07:39:11 +0000 Manifest this update: Sat 23 Aug 2025 07:39:10 +0000 Manifest next update: Sat 30 Aug 2025 07:39:10 +0000 Files and hashes: 1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: kDwC8bM6wVHpuFVZQ/B0rn19gnyeGHOSOTIh9VEzyW8=) 2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: nOUBr+CqAJHxGP5VlXuW/aGl6J+jLJf/ElMdL6qIZFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92 Validity Not Before: Aug 23 07:39:10 2025 GMT Not After : Aug 30 07:39:10 2025 GMT Subject: CN=68a9701f-40f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b9:33:84:6d:cb:ba:e1:8a:29:91:56:59:24: 44:cd:b6:1d:99:86:ca:19:13:cb:93:3f:1d:a7:35: bd:60:27:8e:6a:cf:5b:9f:60:56:89:08:a8:43:78: 3e:89:19:c2:8d:32:9b:d6:23:da:89:6d:bb:35:5e: f5:3d:08:48:c5:01:c1:10:17:f6:b5:91:7c:b8:18: 5f:6d:a7:0d:59:de:2d:2a:34:ee:2b:2b:6d:4b:13: 5f:ad:c9:db:69:d0:b3:31:28:ee:e5:b3:69:c3:38: ec:44:fd:ea:83:1d:31:8f:1f:a6:95:7a:61:18:16: 5b:ee:24:ac:dc:7c:33:dc:6e:fd:55:aa:ab:84:ab: 1f:14:2f:ab:ae:43:1b:eb:99:b0:05:e8:09:a4:04: 99:30:7a:44:4b:58:5f:8a:49:c4:97:51:3f:56:ae: 8b:35:a0:d5:d8:82:ef:be:f5:ec:c9:74:cc:c7:58: 80:2c:0e:82:a6:dd:f1:18:76:44:6c:5d:46:e7:1f: a5:fa:b9:73:3d:6d:2a:5b:21:b4:da:11:af:15:73: 75:1b:9f:3b:cf:c9:01:fd:d6:60:46:e3:7a:8b:6c: d9:34:ae:6c:0a:ce:8f:68:05:d1:6e:03:e9:25:e1: 54:82:20:2d:dc:4e:5c:f1:64:7f:cc:24:28:c2:ea: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1F:CE:1E:D6:10:0B:22:D8:16:E4:62:B2:B8:93:43:06:B5:2F:65 X509v3 Authority Key Identifier: keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:22:75:b8:2a:41:18:51:93:64:95:92:c8:d5:64:01:3c:23: 06:89:b3:68:f9:22:49:9f:ee:ea:5e:d7:3c:3e:9e:bb:3f:b5: cd:51:da:6f:6d:d1:a8:d4:9b:58:c6:f0:bd:c8:e3:bc:2d:a0: ca:ce:d8:15:e0:02:9b:c8:f9:51:11:0a:bf:00:10:9d:2b:d3: f0:b4:ef:92:f3:32:13:e6:50:dd:9f:01:74:8f:81:4a:d2:56: 9f:91:9f:7c:d6:4d:1c:ac:86:f1:8a:70:39:41:0a:41:a1:e6: e9:40:43:85:7b:7e:a4:1f:3c:9a:ca:d8:f1:b8:bc:f0:b9:44: 30:e7:89:79:d9:30:4e:5c:7f:1e:66:c9:bb:ee:0a:cc:a3:ac: 8a:15:d5:ce:81:f5:90:40:f2:39:39:d6:86:ab:85:9f:89:59: ef:72:f3:cf:4c:76:45:10:9e:79:bf:ea:c2:74:c2:27:55:3e: fd:2c:d5:73:db:cf:19:65:62:46:72:5f:72:ef:20:46:f5:dd: 96:a5:9d:24:43:32:f8:91:e7:ad:29:f8:8a:c6:fe:cb:81:d8: 13:5c:e3:9b:e7:89:bf:cb:33:08:6d:2e:dc:fa:5e:dc:22:8b: 2b:a1:97:38:b7:9e:77:d0:c3:43:94:b9:ae:9d:8d:be:8f:96: a0:63:98:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDA3RTExMC8GA1UEBRMoMUUwNzkxRUJERDBDOTRDMzU2QkEzNzNEN0UwRjAxNjEw M0Q0MEI5MjAeFw0yNTA4MjMwNzM5MTBaFw0yNTA4MzAwNzM5MTBaMBgxFjAUBgNV BAMTDTY4YTk3MDFmLTQwZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUuTOEbcu64YopkVZZJETNth2ZhsoZE8uTPx2nNb1gJ45qz1ufYFaJCKhDeD6J GcKNMpvWI9qJbbs1XvU9CEjFAcEQF/a1kXy4GF9tpw1Z3i0qNO4rK21LE1+tydtp 0LMxKO7ls2nDOOxE/eqDHTGPH6aVemEYFlvuJKzcfDPcbv1VqquEqx8UL6uuQxvr mbAF6AmkBJkwekRLWF+KScSXUT9Wros1oNXYgu++9ezJdMzHWIAsDoKm3fEYdkRs XUbnH6X6uXM9bSpbIbTaEa8Vc3UbnzvPyQH91mBG43qLbNk0rmwKzo9oBdFuA+kl 4VSCIC3cTlzxZH/MJCjC6letAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVR/OHtYQ CyLYFuRisriTQwa1L2UwHwYDVR0jBBgwFoAUHgeR690MlMNWujc9fg8BYQPUC5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMDdFL0UwMjNGMjFFMTUw NzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSGdlUjY5ME1sTU5XdWpjOWZnOEJZUVBVQzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE MDdFL0UwMjNGMjFFMTUwNzExRjA4NUZCNDQ1NUM0RjlBRTAyL0hnZVI2OTBNbE1O V3VqYzlmZzhCWVFQVUM1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAidbgqQRhRk2SVksjVZAE8IwaJs2j5Ikmf7upe1zw+nrs/tc1R2m9t 0ajUm1jG8L3I47wtoMrO2BXgApvI+VERCr8AEJ0r0/C075LzMhPmUN2fAXSPgUrS Vp+Rn3zWTRyshvGKcDlBCkGh5ulAQ4V7fqQfPJrK2PG4vPC5RDDniXnZME5cfx5m ybvuCsyjrIoV1c6B9ZBA8jk51oarhZ+JWe9y889MdkUQnnm/6sJ0widVPv0s1XPb zxllYkZyX3LvIEb13ZalnSRDMviR560p+IrG/suB2BNc45vnib/LMwhtLtz6Xtwi iyuhlzi3nnfQw0OUua6djb6PlqBjmMs= -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:42 2025 by rpki-client