$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: x3/Nfw6YaGeT4lbh0RcPaXhr3woIWNO8R/n5JCP2/i4= Subject key identifier: 91:4F:32:B8:CA:99:0C:96:38:C6:8C:E7:78:CA:20:27:B2:1D:E0:D3 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 0206 Signing time: Sat 23 Aug 2025 02:33:58 +0000 Manifest this update: Sat 23 Aug 2025 02:33:58 +0000 Manifest next update: Sat 30 Aug 2025 02:33:58 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: W0Q3Y9AmgqqwBONuzNtS+XUb4DeHuYXxHvO6EWda9fI=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OxFOcvwColoaxplUUzeWODF1QwobCLhtGfjV874lFQM=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: QHxe/wWqzwNVIDLAM9edUwMUGE9Cp2KpjH57VB1iuhs=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Aug 23 02:33:58 2025 GMT Not After : Aug 30 02:33:58 2025 GMT Subject: CN=68a92896-d5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d9:15:ec:c9:a4:97:e9:8b:0e:78:59:43:0b: b4:20:9f:76:91:bd:07:cd:fc:73:bd:5d:77:7e:22: e9:e6:ac:23:f8:ba:72:6e:c1:80:4a:aa:7c:51:08: 73:bb:c0:69:84:6e:88:ff:58:27:42:2a:67:c0:8a: e3:8b:a6:94:57:b9:c3:7f:e7:1e:af:55:ec:23:6f: a8:50:a9:eb:e9:b1:63:45:7b:51:c3:4e:b6:89:9b: 2b:d2:b9:ec:9f:fa:86:95:c9:8a:78:0c:e4:ed:25: 6a:ec:7f:27:7f:11:dd:62:52:25:e5:51:ce:40:b1: bc:91:cc:e9:03:5f:54:84:1e:97:da:13:6b:8c:cd: 2f:35:29:5b:bb:a2:4f:2d:63:4e:99:22:ad:aa:36: 09:16:23:04:cd:a3:e7:69:31:32:97:99:10:de:79: fb:69:a8:f9:6e:55:a7:24:ed:53:ae:6f:b8:f4:4a: 75:a6:91:64:52:cf:8b:cb:c4:22:38:25:26:2d:72: c2:6b:3b:da:c8:07:14:e7:63:60:3a:72:15:a3:dc: f5:3c:12:3c:3b:cf:a1:f2:07:55:4b:87:c1:f6:63: 16:e8:c8:9b:51:9a:4d:69:e0:e4:a3:f1:7e:54:04: bf:9d:d0:87:89:c3:9b:d2:cc:78:6e:e2:61:6c:c1: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4F:32:B8:CA:99:0C:96:38:C6:8C:E7:78:CA:20:27:B2:1D:E0:D3 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:7f:dc:88:58:2c:f4:47:e7:6b:f6:d0:45:a9:55:cf:20:88: 27:ad:3b:8e:0f:ff:41:78:e8:2d:bf:3f:80:ec:68:e3:a4:3d: 2f:3d:14:19:70:f4:49:ea:08:21:57:95:b2:71:98:6f:a7:d3: c6:5f:52:b1:6f:86:a9:c3:e1:dd:b5:72:29:90:0a:a4:e8:88: f8:e3:a8:51:8d:42:c1:ae:ef:1f:9c:53:89:2d:c0:08:e8:b5: d3:55:97:b4:70:c3:cc:e5:22:39:7c:a1:17:fd:69:a7:e5:0d: a1:cc:f0:01:0a:a6:ad:a0:15:0b:61:9a:a6:fe:19:55:4e:f5: 0f:14:c6:26:f1:07:d5:50:dd:96:aa:53:ad:18:03:40:43:a2: 79:a8:ee:ef:70:8e:93:29:7e:4f:9b:1a:e3:70:5c:65:5e:cc: a5:da:e5:a4:c6:ea:cd:ed:48:e1:d2:a1:eb:82:3f:f6:03:4c: 55:47:4e:08:a1:3d:84:a2:15:92:e5:93:61:a5:92:cc:37:e9: 7b:38:02:9c:f2:92:0d:5a:88:22:a1:9d:48:e2:b4:02:0f:6e: 86:73:37:eb:90:c5:eb:fa:02:fd:e7:95:d4:3d:75:6b:e0:5f: 41:87:3b:41:55:df:91:ef:c4:ea:54:8a:3e:6f:48:61:18:09: 3f:08:2b:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwODIzMDIzMzU4WhcNMjUwODMwMDIzMzU4WjAYMRYwFAYD VQQDEw02OGE5Mjg5Ni1kNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8dkV7Mmkl+mLDnhZQwu0IJ92kb0HzfxzvV13fiLp5qwj+LpybsGASqp8UQhz u8BphG6I/1gnQipnwIrji6aUV7nDf+cer1XsI2+oUKnr6bFjRXtRw062iZsr0rns n/qGlcmKeAzk7SVq7H8nfxHdYlIl5VHOQLG8kczpA19UhB6X2hNrjM0vNSlbu6JP LWNOmSKtqjYJFiMEzaPnaTEyl5kQ3nn7aaj5blWnJO1Trm+49Ep1ppFkUs+Ly8Qi OCUmLXLCazvayAcU52NgOnIVo9z1PBI8O8+h8gdVS4fB9mMW6MibUZpNaeDko/F+ VAS/ndCHicOb0sx4buJhbMFLsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFPMrjK mQyWOMaM53jKICeyHeDTMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDif9yIWCz0R+dr9tBFqVXPIIgnrTuOD/9BeOgtvz+A7GjjpD0vPRQZ cPRJ6gghV5WycZhvp9PGX1Kxb4apw+HdtXIpkAqk6Ij446hRjULBru8fnFOJLcAI 6LXTVZe0cMPM5SI5fKEX/Wmn5Q2hzPABCqatoBULYZqm/hlVTvUPFMYm8QfVUN2W qlOtGANAQ6J5qO7vcI6TKX5PmxrjcFxlXsyl2uWkxurN7Ujh0qHrgj/2A0xVR04I oT2EohWS5ZNhpZLMN+l7OAKc8pINWogioZ1I4rQCD26GczfrkMXr+gL955XUPXVr 4F9BhztBVd+R78TqVIo+b0hhGAk/CCsQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:55:04 2025 by rpki-client