$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: HsbgSbSAvbl/5k/DA0M8RO6humitq6HeSZ4/Blfkrlg= Subject key identifier: 34:2B:05:C9:F3:52:4E:07:60:48:72:01:87:83:1C:49:A9:77:67:47 Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 01E8 Signing time: Sun 29 Jun 2025 01:54:46 +0000 Manifest this update: Sun 29 Jun 2025 01:54:46 +0000 Manifest next update: Sun 06 Jul 2025 01:54:46 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: cl8gwOi6iRi9GU4hvw3u/QlBgcglfi05mHjzjX1slnE=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: v/jaXAzZ3zqjA/FFCsb5LG3XmHkZ6SrkiodSFMHoHXI=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: AeibaNJLpaTPWil7j4GEFIcO329YJiVNQhWzIDubw3g=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: v8Ohi2heIavbMrsxkeCZxN8LxhYk0piFR46tFcvgr/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Jun 29 01:54:46 2025 GMT Not After : Jul 6 01:54:46 2025 GMT Subject: CN=68609ce6-edc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:f0:7a:b5:23:91:65:b2:e9:c2:ce:d0:d3: 2e:10:c9:51:27:f2:66:e6:8a:a1:69:4d:fa:61:4c: f5:58:10:6c:49:d6:7b:1c:60:14:a1:10:60:ac:7f: b3:ea:08:86:aa:83:0d:c8:16:90:b9:44:51:9b:82: f4:36:cd:16:47:a7:b7:5b:c7:23:bf:51:11:5f:f8: 12:78:22:ca:37:c3:ee:a5:05:17:c3:77:1f:2f:00: 2d:66:ca:f1:dc:15:d0:17:c7:a3:38:19:8d:79:8a: ea:31:98:4c:fd:c0:4f:bb:3c:08:1a:33:8c:29:47: 12:e2:21:30:75:87:e6:df:e7:cb:27:81:33:81:aa: 86:34:fa:eb:d3:64:3e:c8:11:90:65:d8:02:3c:84: 0a:01:6f:14:b6:e8:79:5e:ad:9e:ea:42:d6:3c:85: 63:a2:87:e2:a2:0a:35:ff:37:07:96:9a:61:ab:46: 5e:88:ab:2c:03:14:9e:54:c9:c9:6a:cd:c3:08:1f: b0:38:a8:70:48:f6:ae:6b:7c:d7:e3:ad:aa:ed:04: 48:1a:73:f3:57:fb:3e:ba:3b:b4:8e:cf:f3:fd:bf: ed:ec:dc:2c:e9:14:73:83:11:97:0f:dc:8d:c5:e1: 9f:9e:fc:5e:47:2b:33:fc:23:3c:1e:30:e9:b6:79: 1d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:05:C9:F3:52:4E:07:60:48:72:01:87:83:1C:49:A9:77:67:47 X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:11:09:8d:af:c4:4b:6f:24:ef:80:11:f4:30:34:0c:e2:1d: 3d:06:5d:97:5e:1e:64:6d:d4:51:de:01:83:97:1e:f4:f4:a9: 82:ad:c0:5d:bb:68:74:70:02:c6:b3:11:c0:43:61:15:e6:f5: 97:dd:a4:57:33:c1:18:54:f6:83:fe:39:28:6b:fd:53:f5:a8: 3f:fe:17:18:bf:f5:6d:6e:4a:e1:f1:af:d3:99:14:d9:7a:55: 00:4b:ad:7b:f1:f9:19:5a:f8:16:07:47:35:43:b1:76:df:bf: 18:a8:6c:a9:82:c6:d3:e4:1f:c9:d7:d5:ea:71:04:db:31:14: 56:5a:21:3c:2b:1f:1f:87:06:76:0e:d4:4a:5d:7b:ae:cc:87: 07:1e:9c:51:f3:9c:a5:d9:af:3c:24:b0:62:1f:80:f4:8f:c2: 91:fb:16:22:73:41:15:b3:a9:49:15:39:fe:9c:8d:55:13:3a: e0:63:42:7a:45:b0:f7:b2:c8:47:3a:ed:c4:54:1f:d1:b9:a4: 5a:89:f6:fb:40:27:ab:83:70:81:19:02:6d:e1:06:8f:9a:a4: c9:1f:be:1a:ee:6c:bf:7a:3d:a4:65:82:46:99:ad:6d:7d:95: dd:97:2e:12:8e:a8:45:ca:ff:e3:e6:dd:ab:60:a2:fc:d2:a9: d7:35:e0:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUwNjI5MDE1NDQ2WhcNMjUwNzA2MDE1NDQ2WjAYMRYwFAYD VQQDEw02ODYwOWNlNi1lZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymrwerUjkWWy6cLO0NMuEMlRJ/Jm5oqhaU36YUz1WBBsSdZ7HGAUoRBgrH+z 6giGqoMNyBaQuURRm4L0Ns0WR6e3W8cjv1ERX/gSeCLKN8PupQUXw3cfLwAtZsrx 3BXQF8ejOBmNeYrqMZhM/cBPuzwIGjOMKUcS4iEwdYfm3+fLJ4EzgaqGNPrr02Q+ yBGQZdgCPIQKAW8Utuh5Xq2e6kLWPIVjoofiogo1/zcHlpphq0ZeiKssAxSeVMnJ as3DCB+wOKhwSPaua3zX462q7QRIGnPzV/s+uju0js/z/b/t7Nws6RRzgxGXD9yN xeGfnvxeRysz/CM8HjDptnkdRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQrBcnz Uk4HYEhyAYeDHEmpd2dHMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANEQmNr8RLbyTvgBH0MDQM4h09Bl2XXh5kbdRR3gGDlx709KmCrcBd u2h0cALGsxHAQ2EV5vWX3aRXM8EYVPaD/jkoa/1T9ag//hcYv/Vtbkrh8a/TmRTZ elUAS6178fkZWvgWB0c1Q7F2378YqGypgsbT5B/J19XqcQTbMRRWWiE8Kx8fhwZ2 DtRKXXuuzIcHHpxR85yl2a88JLBiH4D0j8KR+xYic0EVs6lJFTn+nI1VEzrgY0J6 RbD3sshHOu3EVB/RuaRaifb7QCerg3CBGQJt4QaPmqTJH74a7my/ej2kZYJGma1t fZXdly4SjqhFyv/j5t2rYKL80qnXNeDg -----END CERTIFICATE-----Generated at Sun Jun 29 16:14:06 2025 by rpki-client