$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: dp0+pS63xKzRBhG3R+Ko66WwTb2F9ZdjV36WbmtfFwA= Subject key identifier: AF:A1:50:AA:06:38:81:D6:28:86:CE:41:2F:AE:75:B0:21:3A:82:6A Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 04:53:37 +0000 Manifest this update: Sat 23 Aug 2025 04:53:36 +0000 Manifest next update: Sat 30 Aug 2025 04:53:36 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: MBuAE+M67Cqgb9kVpvLzBApYcF+IECJURsX+YWsWpr4=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Aug 23 04:53:36 2025 GMT Not After : Aug 30 04:53:36 2025 GMT Subject: CN=68a94950-04ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:40:28:f5:40:04:3a:95:16:e6:f9:d7:5a:a1: ec:28:0b:a6:bc:a1:bc:96:aa:b5:51:29:9a:e4:25: 0f:d8:46:72:2a:85:fb:c3:34:e9:26:99:26:09:6e: a5:4c:ab:07:80:d7:6d:36:9d:5a:b6:11:1b:5b:35: b9:e1:7f:5a:bc:7f:65:af:8a:6f:4d:9b:5c:59:af: b6:71:ad:5a:77:f4:f2:c1:1b:55:00:86:09:e9:c9: 8c:2f:79:4d:68:8f:fc:cd:fc:fc:ce:c4:ab:65:74: 18:ba:d5:56:69:42:9e:d4:c7:e4:b8:7b:0e:15:c6: a5:d8:f5:64:85:4d:8f:22:15:a5:52:bf:4b:83:c1: f6:ea:65:0c:40:a5:17:b2:21:8b:b2:0e:17:c7:e4: 9e:fc:21:00:98:0d:c0:a7:14:be:27:ff:37:c6:87: b6:bf:f4:4d:90:33:35:58:5d:52:0c:4c:53:de:f2: 29:19:34:5b:95:7e:59:74:b2:b9:10:19:77:47:e1: 21:42:9a:fa:1f:ff:e5:3a:34:93:76:6a:c7:3e:99: c1:39:86:cc:fa:89:49:48:e7:da:08:f3:ee:f2:56: b9:de:6d:aa:79:d9:fd:f5:4c:fa:bf:0f:75:d6:e3: f1:95:2f:d8:6e:6c:70:0a:4a:f9:ef:b3:90:39:c4: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:50:AA:06:38:81:D6:28:86:CE:41:2F:AE:75:B0:21:3A:82:6A X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:60:72:49:a4:57:9f:c6:ec:e0:7c:d0:29:ec:2d:ad:b7:77: 0b:f7:7a:83:67:1c:56:c7:ee:42:fd:ca:7b:80:07:e7:20:38: a9:d0:b7:8f:89:f3:4e:d7:04:2a:78:36:f7:72:5c:9a:81:3d: 62:14:9a:b6:6a:66:11:8e:4e:2b:36:aa:1b:13:bf:9a:11:2e: 48:bf:6c:63:c5:62:ae:2d:41:75:2c:ab:99:eb:a7:f4:a6:af: af:3d:85:01:3d:df:a6:e4:3f:55:37:c6:7e:9e:3d:0d:85:42: f8:20:bc:2b:2a:49:77:29:47:ed:bb:fc:81:55:89:bf:c9:4a: 23:2b:78:2f:25:50:6f:9c:b2:d6:f0:58:ef:bf:0f:23:4d:eb: 84:f3:d5:ad:62:43:9c:e4:5f:31:b3:20:1e:06:5b:c5:24:0a: 8f:a4:78:f5:ae:05:88:59:e5:c9:4a:a0:d7:7c:01:38:f2:a5: e6:a6:d6:e1:db:b7:a3:a9:5e:dd:a6:40:e4:e0:71:a7:bd:5b: c4:e2:d6:c3:a4:1d:47:6d:ce:09:07:07:41:6f:0d:22:ad:69: 9d:74:a5:4b:5b:a2:a5:e7:ff:d3:0f:af:20:e9:da:1f:d0:ea: 0a:f5:a9:f7:41:1c:e3:0b:2d:2c:1c:45:8d:f0:fd:b0:f6:84: 9c:40:fd:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUwODIzMDQ1MzM2WhcNMjUwODMwMDQ1MzM2WjAYMRYwFAYD VQQDEw02OGE5NDk1MC0wNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+UAo9UAEOpUW5vnXWqHsKAumvKG8lqq1USma5CUP2EZyKoX7wzTpJpkmCW6l TKsHgNdtNp1athEbWzW54X9avH9lr4pvTZtcWa+2ca1ad/TywRtVAIYJ6cmML3lN aI/8zfz8zsSrZXQYutVWaUKe1MfkuHsOFcal2PVkhU2PIhWlUr9Lg8H26mUMQKUX siGLsg4Xx+Se/CEAmA3ApxS+J/83xoe2v/RNkDM1WF1SDExT3vIpGTRblX5ZdLK5 EBl3R+EhQpr6H//lOjSTdmrHPpnBOYbM+olJSOfaCPPu8la53m2qedn99Uz6vw91 1uPxlS/YbmxwCkr577OQOcTriQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+hUKoG OIHWKIbOQS+udbAhOoJqMB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjYHJJpFefxuzgfNAp7C2tt3cL93qDZxxWx+5C/cp7gAfnIDip0LeP ifNO1wQqeDb3clyagT1iFJq2amYRjk4rNqobE7+aES5Iv2xjxWKuLUF1LKuZ66f0 pq+vPYUBPd+m5D9VN8Z+nj0NhUL4ILwrKkl3KUftu/yBVYm/yUojK3gvJVBvnLLW 8Fjvvw8jTeuE89WtYkOc5F8xsyAeBlvFJAqPpHj1rgWIWeXJSqDXfAE48qXmptbh 27ejqV7dpkDk4HGnvVvE4tbDpB1Hbc4JBwdBbw0irWmddKVLW6Kl5//TD68g6dof 0OoK9an3QRzjCy0sHEWN8P2w9oScQP0P -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:49 2025 by rpki-client