$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: zFnuf2F2s0jmwVbrZjf9s1LvQkOB9xSAAKp9xg9Nu9U= Subject key identifier: 55:CF:BD:9B:B5:1B:1A:54:B7:F2:0C:11:2D:52:42:86:92:D0:91:DF Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 0122 Signing time: Sat 23 Aug 2025 04:59:53 +0000 Manifest this update: Sat 23 Aug 2025 04:59:53 +0000 Manifest next update: Sat 30 Aug 2025 04:59:53 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: AeW4XHBzckMZ4ayZQV699PeKEjhlpXCmwYP2SrchyVY=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: ETljmMeyS5s0KQSm6+ufGeAzxHuJN+oLqoLZAlzH7iA=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Aug 23 04:59:53 2025 GMT Not After : Aug 30 04:59:53 2025 GMT Subject: CN=68a94ac9-3873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:37:a1:69:ba:e9:1a:0c:7b:05:de:e2:75: 0c:ad:e2:c4:47:3f:fa:22:17:d1:8e:e0:55:9a:86: 8a:17:62:72:71:fc:4f:8d:3f:8f:71:c7:26:c8:cf: 49:43:66:05:5d:57:35:5a:1c:36:f4:35:3f:a1:c7: 67:31:68:a3:ae:92:bc:c6:50:bc:19:c6:7b:3a:e3: 6a:bb:cf:c9:b1:e2:38:46:a7:fb:b1:a9:11:d3:ce: 25:1b:fe:97:b9:a2:e8:d8:31:70:54:ea:8c:44:5b: 26:88:f4:9f:d6:81:c8:e7:cf:7a:8b:92:9b:59:f5: b9:d8:38:cd:dc:3b:50:2f:2f:52:cc:2d:c0:c0:46: ef:8f:d0:05:5f:00:b6:94:de:fe:5b:46:d1:b0:df: d7:e1:c6:b2:df:bb:f8:00:ae:df:b2:51:bb:1e:bc: ae:01:68:1b:2a:94:e9:e2:80:a3:8f:8d:59:e4:f6: 92:38:53:06:e5:46:1e:38:26:f7:d9:a5:d8:de:3c: 6a:e6:cd:15:6c:a7:83:35:6d:c2:04:32:4c:b5:70: c7:6d:08:c9:0e:ca:5b:b0:08:0d:5d:bd:1a:e6:3b: 0b:ff:0d:50:e6:86:9a:8d:1b:bc:42:46:9b:48:d9: 88:47:40:a1:33:b1:32:69:e4:a6:3a:d5:cc:73:ff: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CF:BD:9B:B5:1B:1A:54:B7:F2:0C:11:2D:52:42:86:92:D0:91:DF X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2b:52:a6:5a:f9:4e:6f:50:59:85:ea:2b:ca:ba:e7:3e:9a: 70:63:19:4c:1e:fa:a6:91:55:b6:3b:d9:7f:34:11:6c:dd:f2: 94:6c:2a:40:dd:e0:56:67:0b:53:dd:62:32:42:d1:bd:e1:50: c8:ce:0b:32:44:84:48:b0:cb:3f:be:71:d5:c2:25:3f:b1:2d: 48:ab:fe:17:1c:ed:e1:93:ff:f6:27:b0:b8:b3:cd:18:a7:0d: 6a:ed:d2:cf:55:b3:56:8b:a8:c2:aa:6e:1b:bd:01:3f:ea:35: 72:f2:86:56:50:b8:e1:cf:06:ac:c9:25:9b:e5:a0:87:9f:39: 8d:71:08:f2:8b:f1:f7:04:3c:4d:fd:14:67:f8:c9:7b:d8:a4: 65:93:48:24:ef:c1:69:10:76:db:f6:70:3d:b3:dd:d4:15:b2: 4c:83:69:89:36:f6:0e:05:56:73:ca:d9:32:ce:8c:b3:61:3f: d8:1f:7d:2f:f6:df:15:49:8f:ae:0d:23:0a:d7:b7:df:a7:75: 44:2e:69:74:9a:a7:56:0f:b6:ac:a6:7d:80:9e:b6:13:2a:23: 4d:43:5f:64:ea:e2:6b:91:9f:f7:ba:b2:ad:b9:6a:6a:64:54: 7e:f2:73:76:e0:0b:3f:6c:8c:34:1b:5d:d2:cc:55:06:3e:82: 7e:1f:1b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUwODIzMDQ1OTUzWhcNMjUwODMwMDQ1OTUzWjAYMRYwFAYD VQQDEw02OGE5NGFjOS0zODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuw3oWm66RoMewXe4nUMreLERz/6IhfRjuBVmoaKF2JycfxPjT+PcccmyM9J Q2YFXVc1Whw29DU/ocdnMWijrpK8xlC8GcZ7OuNqu8/JseI4Rqf7sakR084lG/6X uaLo2DFwVOqMRFsmiPSf1oHI5896i5KbWfW52DjN3DtQLy9SzC3AwEbvj9AFXwC2 lN7+W0bRsN/X4cay37v4AK7fslG7HryuAWgbKpTp4oCjj41Z5PaSOFMG5UYeOCb3 2aXY3jxq5s0VbKeDNW3CBDJMtXDHbQjJDspbsAgNXb0a5jsL/w1Q5oaajRu8Qkab SNmIR0ChM7EyaeSmOtXMc/97PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXPvZu1 GxpUt/IMES1SQoaS0JHfMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOK1KmWvlOb1BZheoryrrnPppwYxlMHvqmkVW2O9l/NBFs3fKUbCpA 3eBWZwtT3WIyQtG94VDIzgsyRIRIsMs/vnHVwiU/sS1Iq/4XHO3hk//2J7C4s80Y pw1q7dLPVbNWi6jCqm4bvQE/6jVy8oZWULjhzwasySWb5aCHnzmNcQjyi/H3BDxN /RRn+Ml72KRlk0gk78FpEHbb9nA9s93UFbJMg2mJNvYOBVZzytkyzoyzYT/YH30v 9t8VSY+uDSMK17ffp3VELml0mqdWD7aspn2AnrYTKiNNQ19k6uJrkZ/3urKtuWpq ZFR+8nN24As/bIw0G13SzFUGPoJ+HxtP -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:13 2025 by rpki-client