$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: TcJ44XSBBegBlOx0aaYIiQb8QT6LQSzAAsUHuWLvvv8= Subject key identifier: 9F:BC:21:B1:8C:51:47:72:AD:7E:B7:E1:5F:D9:67:CA:53:4B:DE:10 Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A49 Signing time: Fri 22 Aug 2025 20:02:13 +0000 Manifest this update: Fri 22 Aug 2025 20:02:13 +0000 Manifest next update: Fri 29 Aug 2025 20:02:13 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: Haosiz05+GVTHCMQhyqtiK4ebXIPD3Vl/Hxc6ckwrOs=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Aug 22 20:02:13 2025 GMT Not After : Aug 29 20:02:13 2025 GMT Subject: CN=68a8ccc5-08e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d3:b1:0e:8a:27:8f:b1:fb:cd:eb:cf:a3:ba: 98:77:61:5c:97:9c:05:71:dd:eb:1c:76:19:52:b8: 83:90:98:76:65:28:86:43:30:d8:46:3b:ed:5a:7d: 63:c3:10:a1:eb:52:26:84:68:8e:f3:35:97:48:d3: af:e1:bc:85:58:16:4e:9b:f3:3f:b7:31:87:a0:5c: f4:8a:84:5a:36:dc:0d:2c:40:14:1d:1c:52:d6:b3: 13:7e:8d:8a:b8:51:48:6f:2d:5f:df:b0:7c:81:87: 70:c5:ae:12:ad:dc:bd:30:af:20:3d:57:e9:9d:87: 0d:c6:c0:71:5c:1a:ac:3c:d2:84:4d:bf:24:b6:23: 41:8b:d0:60:28:6e:34:17:65:c0:51:13:82:3e:a5: 63:09:d2:c3:c9:cb:98:c0:ff:5a:42:cb:13:94:fd: c2:d2:cb:94:56:0c:2d:43:94:64:ee:55:12:22:b3: dc:92:08:ec:c7:33:ec:d8:53:87:1d:e5:56:c7:e3: 91:78:ab:bb:f6:ed:3d:cf:6c:9d:fe:32:f5:39:ce: 45:50:89:1d:90:44:75:93:cd:3c:fe:9e:82:8d:b3: 83:80:a8:a6:4e:f5:85:98:fb:ef:4f:2c:56:ad:24: a6:92:a2:cc:c7:0d:c1:36:87:ad:4d:e4:36:9e:ed: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BC:21:B1:8C:51:47:72:AD:7E:B7:E1:5F:D9:67:CA:53:4B:DE:10 X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2a:c1:2c:5a:91:a7:67:d7:89:1e:3f:c1:3a:05:e2:0f:f9: 27:d8:4a:6f:55:1d:fa:73:d1:f7:e3:bd:cf:39:96:63:a3:ea: 97:d1:21:e7:73:60:0f:00:92:3f:c0:6b:55:2a:e9:e2:6d:12: 96:97:ea:39:11:55:ba:5a:58:52:99:ec:88:7a:50:7d:80:a8: f5:82:0d:3f:f0:ec:3a:b0:96:ca:74:1f:86:0e:9c:02:a7:70: 91:52:76:d2:96:80:fb:83:05:32:76:cd:ae:2a:6e:73:36:e7: f6:3c:9d:d6:12:4b:1e:0a:60:4c:36:83:c4:ed:2d:2d:c1:bf: 49:bb:bd:b0:83:59:6f:42:44:8e:89:54:af:c5:8f:1c:4f:95: 85:d6:1b:c5:54:47:fa:83:57:c8:ae:b8:ef:a0:47:ff:8e:aa: 37:b8:94:a1:1f:be:32:bc:7f:b4:74:de:9e:2e:4f:e7:bf:6c: 74:88:c9:56:10:9e:06:8b:de:bd:f0:ed:43:c5:ba:31:3e:ea: df:b6:08:49:28:a7:18:b9:ad:26:ce:d9:24:95:40:92:1e:27: ab:30:8a:4e:de:25:e5:9f:3b:b0:18:37:8b:64:56:95:12:ab: c9:b1:b9:b6:83:f1:3f:31:fd:27:ec:d9:97:a0:86:59:85:68: 64:e5:07:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUwODIyMjAwMjEzWhcNMjUwODI5MjAwMjEzWjAYMRYwFAYD VQQDEw02OGE4Y2NjNS0wOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79OxDoonj7H7zevPo7qYd2Fcl5wFcd3rHHYZUriDkJh2ZSiGQzDYRjvtWn1j wxCh61ImhGiO8zWXSNOv4byFWBZOm/M/tzGHoFz0ioRaNtwNLEAUHRxS1rMTfo2K uFFIby1f37B8gYdwxa4Srdy9MK8gPVfpnYcNxsBxXBqsPNKETb8ktiNBi9BgKG40 F2XAUROCPqVjCdLDycuYwP9aQssTlP3C0suUVgwtQ5Rk7lUSIrPckgjsxzPs2FOH HeVWx+OReKu79u09z2yd/jL1Oc5FUIkdkER1k808/p6CjbODgKimTvWFmPvvTyxW rSSmkqLMxw3BNoetTeQ2nu0WLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+8IbGM UUdyrX634V/ZZ8pTS94QMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiKsEsWpGnZ9eJHj/BOgXiD/kn2EpvVR36c9H3473POZZjo+qX0SHn c2APAJI/wGtVKunibRKWl+o5EVW6WlhSmeyIelB9gKj1gg0/8Ow6sJbKdB+GDpwC p3CRUnbSloD7gwUyds2uKm5zNuf2PJ3WEkseCmBMNoPE7S0twb9Ju72wg1lvQkSO iVSvxY8cT5WF1hvFVEf6g1fIrrjvoEf/jqo3uJShH74yvH+0dN6eLk/nv2x0iMlW EJ4Gi9698O1DxboxPurftghJKKcYua0mztkklUCSHierMIpO3iXlnzuwGDeLZFaV EqvJsbm2g/E/Mf0n7NmXoIZZhWhk5Qe5 -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:22 2025 by rpki-client