$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: 9zPmhYYTTYTKtgEA1ewhIDvIbcp0l7tvkQNkuMOlHOM= Subject key identifier: 25:CC:56:E6:08:07:38:D5:FA:B7:EB:C6:9B:D0:68:B2:2F:07:23:27 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1978 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 1962 Signing time: Fri 22 Aug 2025 16:30:00 +0000 Manifest this update: Fri 22 Aug 2025 16:29:59 +0000 Manifest next update: Fri 29 Aug 2025 16:29:59 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: /jRlN66d7nTcklyjnTKfxyDKrkhZk4d7nId2l3eeXBQ=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6520 (0x1978) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Aug 22 16:29:59 2025 GMT Not After : Aug 29 16:29:59 2025 GMT Subject: CN=68a89b08-8449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:77:d8:aa:f5:80:6b:fa:6e:30:77:26:82: 4c:58:04:6d:4d:6e:64:bd:f1:40:57:00:ba:ca:30: 37:9e:3d:e9:ce:81:0c:8b:f6:95:e5:00:df:24:ac: 42:b8:9e:74:8b:52:c1:b6:99:fd:14:13:0e:1f:8a: 3a:b8:e7:18:a0:07:cc:ac:9e:07:24:ec:83:77:13: 3d:f5:de:03:47:09:ae:27:e2:52:f2:fe:d7:55:27: 6c:e5:fe:bf:ca:ed:a9:72:87:69:81:6f:4d:d4:10: ac:7b:6c:4f:c6:6f:2e:ca:8a:af:ec:02:fd:1d:57: dd:a4:e7:8e:ad:c1:99:4e:53:27:ad:0f:75:fa:9f: f2:cb:2e:cb:f5:40:54:c8:88:a6:ac:80:62:62:a1: 6b:bb:41:96:95:88:1f:e4:51:fb:dc:0b:e2:82:10: 19:02:2a:f6:3f:42:cb:22:34:7f:da:5c:7d:2c:b2: 27:dc:08:76:11:d5:aa:3f:d4:a3:2f:20:59:2a:73: 1f:37:3e:11:80:a8:37:61:d6:62:8b:dc:b8:25:dd: 53:74:aa:43:db:5b:53:a1:ea:89:b6:5b:b3:d6:bd: ca:02:cb:7a:ec:78:73:0b:42:9d:b5:c7:7b:54:f2: de:67:0b:6e:f5:77:7c:ad:09:85:70:4a:da:a3:4b: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CC:56:E6:08:07:38:D5:FA:B7:EB:C6:9B:D0:68:B2:2F:07:23:27 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:34:39:60:c1:72:c0:2e:84:93:78:03:91:5c:75:03:00: b9:b0:13:fa:0e:21:1c:f3:2a:39:98:24:25:3b:8f:25:0c:54: 17:12:82:58:e9:f0:96:26:30:aa:34:0e:67:dd:3c:7c:3d:0c: 26:b3:9c:1e:c8:48:aa:20:18:5c:a3:aa:08:00:83:11:a3:03: de:d0:8d:0e:6d:8c:37:38:0f:ec:da:f0:d7:a9:1b:d5:a0:69: 6b:f3:0e:4d:c1:e4:41:f3:ac:3f:32:5a:ee:e3:78:d9:07:54: 55:79:3f:35:3d:97:2a:77:80:35:8c:a9:52:1a:00:61:5f:f0: 87:7a:f2:39:62:11:c4:00:d3:36:47:70:30:87:a2:c0:bb:1e: 36:c1:cf:45:bf:98:fa:4c:9e:79:92:4f:14:54:5e:81:39:c5: 76:16:c5:f6:2f:39:06:de:03:94:bd:42:1c:2c:f3:ba:5f:59: 6e:7d:6c:1c:2c:26:01:32:10:58:36:fb:15:79:4a:28:10:28: ce:54:97:8f:9b:e8:04:f4:59:88:17:45:49:78:dc:88:8a:d9: 0a:1b:77:07:df:07:5e:3e:64:fe:60:2b:6e:0f:05:8e:0f:24: bd:d5:1f:fb:0e:70:55:ca:e6:fb:7d:ed:b5:33:46:a2:d4:ce: ec:ef:a5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUwODIyMTYyOTU5WhcNMjUwODI5MTYyOTU5WjAYMRYwFAYD VQQDEw02OGE4OWIwOC04NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttt32Kr1gGv6bjB3JoJMWARtTW5kvfFAVwC6yjA3nj3pzoEMi/aV5QDfJKxC uJ50i1LBtpn9FBMOH4o6uOcYoAfMrJ4HJOyDdxM99d4DRwmuJ+JS8v7XVSds5f6/ yu2pcodpgW9N1BCse2xPxm8uyoqv7AL9HVfdpOeOrcGZTlMnrQ91+p/yyy7L9UBU yIimrIBiYqFru0GWlYgf5FH73AvighAZAir2P0LLIjR/2lx9LLIn3Ah2EdWqP9Sj LyBZKnMfNz4RgKg3YdZii9y4Jd1TdKpD21tToeqJtluz1r3KAst67HhzC0Kdtcd7 VPLeZwtu9Xd8rQmFcErao0viqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXMVuYI BzjV+rfrxpvQaLIvByMnMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzxjQ5YMFywC6Ek3gDkVx1AwC5sBP6DiEc8yo5mCQlO48lDFQXEoJY 6fCWJjCqNA5n3Tx8PQwms5weyEiqIBhco6oIAIMRowPe0I0ObYw3OA/s2vDXqRvV oGlr8w5NweRB86w/Mlru43jZB1RVeT81PZcqd4A1jKlSGgBhX/CHevI5YhHEANM2 R3Awh6LAux42wc9Fv5j6TJ55kk8UVF6BOcV2FsX2LzkG3gOUvUIcLPO6X1lufWwc LCYBMhBYNvsVeUooECjOVJePm+gE9FmIF0VJeNyIitkKG3cH3wdePmT+YCtuDwWO DyS91R/7DnBVyub7fe21M0ai1M7s76Ua -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:10 2025 by rpki-client