$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: IuaQgETlaN/v58cIdn6ZVWaP4v4ZQSLSjuQyrMDJ6sM= Subject key identifier: 7D:15:79:E6:BB:0A:C2:8F:A3:C5:F6:92:F2:4D:DB:D8:57:67:6B:31 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 14A8 Signing time: Fri 22 Aug 2025 17:01:01 +0000 Manifest this update: Fri 22 Aug 2025 17:01:00 +0000 Manifest next update: Fri 29 Aug 2025 17:01:00 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: k+yD8b9yhMDOV4Kn6/bbwxYIM/HiV8oAHPf3baOhbe4=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5312 (0x14c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Aug 22 17:01:00 2025 GMT Not After : Aug 29 17:01:00 2025 GMT Subject: CN=68a8a24c-cf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:34:3c:1e:1c:de:5b:36:c4:52:46:cb:2d: 0d:a2:42:6c:67:5f:2e:9b:63:69:e4:aa:af:c2:48: b9:ff:9a:23:6a:3b:a2:bf:4f:ed:73:6e:5d:25:d3: 16:5b:a7:e0:07:71:0f:1b:53:90:13:9b:ca:cc:fc: 8f:60:63:05:4e:2e:4c:c7:6f:88:ac:9d:54:73:0b: b9:41:11:d3:59:c1:55:33:76:5e:b1:ee:fe:dc:86: cb:f7:32:62:ab:53:02:18:93:35:a3:98:21:66:94: 8b:ce:a8:af:2d:7f:a7:ff:f0:f7:4e:f3:ce:66:4b: 28:37:12:da:a9:f5:60:50:58:7a:b4:3c:33:5c:8b: 3b:2b:00:af:2a:70:21:66:93:72:87:dc:e6:79:b8: 81:a8:a6:5d:89:e7:b3:08:6f:e5:00:77:3b:7a:6f: 3f:4a:7b:c4:d5:05:cf:88:c6:02:bd:f0:d0:9f:03: 11:2a:66:1e:6d:bd:77:91:72:c0:cb:7b:a0:43:71: 28:df:0f:87:ac:7f:48:af:49:9a:61:5a:c3:76:ab: 81:dd:61:a5:f3:c2:90:37:b2:29:ac:ab:db:5f:af: 31:a7:9e:e4:48:21:62:86:f7:18:b9:c3:b3:d4:2e: 14:bd:c0:3b:07:6e:48:a6:7d:a9:7c:e1:34:64:5f: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:15:79:E6:BB:0A:C2:8F:A3:C5:F6:92:F2:4D:DB:D8:57:67:6B:31 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:dc:ed:68:d5:52:3f:f9:7b:17:c0:b2:ef:9b:34:46:14:cc: 31:b5:a8:73:d2:c0:6c:eb:99:56:4a:ba:3b:51:27:16:33:7b: 0e:fa:f0:7b:3b:96:8a:2a:fc:94:47:db:8b:43:df:47:95:8d: 22:e1:cf:48:1f:d7:03:69:b2:ff:b1:0d:2b:b2:1e:94:72:72: a9:e7:eb:a6:3a:d0:c2:55:be:a4:de:0b:8e:8e:43:3c:4e:59: d7:eb:0f:80:67:82:ea:96:2b:8b:7c:9e:19:8b:c2:7d:f4:45: d8:5a:71:79:32:eb:00:f1:a5:34:94:34:e8:c1:7d:1c:fd:ca: e0:c4:2c:92:ee:92:16:24:86:60:8f:86:5a:d0:c6:0c:3e:fb: a1:40:55:87:f6:5b:4b:71:31:e6:5f:c8:3c:37:ec:62:b6:cb: 9f:a0:ea:b2:99:92:7a:60:b2:d6:cb:ec:b2:78:9d:33:54:99: d7:ac:63:61:2e:36:80:8d:23:ea:9f:86:05:2a:a5:ba:1e:01: cd:85:f3:82:89:cc:0f:48:59:05:78:c1:af:c0:f7:dd:42:25: 5d:57:db:27:55:b5:79:8c:5f:bc:02:e5:16:b2:d0:b5:a9:04: d4:de:a3:6a:0e:38:c1:c0:ef:7d:f8:65:15:f6:e0:90:e9:9a: 87:6c:07:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwODIyMTcwMTAwWhcNMjUwODI5MTcwMTAwWjAYMRYwFAYD VQQDEw02OGE4YTI0Yy1jZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVw0PB4c3ls2xFJGyy0NokJsZ18um2Np5Kqvwki5/5ojajuiv0/tc25dJdMW W6fgB3EPG1OQE5vKzPyPYGMFTi5Mx2+IrJ1Ucwu5QRHTWcFVM3Zese7+3IbL9zJi q1MCGJM1o5ghZpSLzqivLX+n//D3TvPOZksoNxLaqfVgUFh6tDwzXIs7KwCvKnAh ZpNyh9zmebiBqKZdieezCG/lAHc7em8/SnvE1QXPiMYCvfDQnwMRKmYebb13kXLA y3ugQ3Eo3w+HrH9Ir0maYVrDdquB3WGl88KQN7IprKvbX68xp57kSCFihvcYucOz 1C4UvcA7B25Ipn2pfOE0ZF9WEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0Veea7 CsKPo8X2kvJN29hXZ2sxMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3O1o1VI/+XsXwLLvmzRGFMwxtahz0sBs65lWSro7UScWM3sO+vB7 O5aKKvyUR9uLQ99HlY0i4c9IH9cDabL/sQ0rsh6UcnKp5+umOtDCVb6k3guOjkM8 TlnX6w+AZ4LqliuLfJ4Zi8J99EXYWnF5MusA8aU0lDTowX0c/crgxCyS7pIWJIZg j4Za0MYMPvuhQFWH9ltLcTHmX8g8N+xitsufoOqymZJ6YLLWy+yyeJ0zVJnXrGNh LjaAjSPqn4YFKqW6HgHNhfOCicwPSFkFeMGvwPfdQiVdV9snVbV5jF+8AuUWstC1 qQTU3qNqDjjBwO99+GUV9uCQ6ZqHbAex -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:05 2025 by rpki-client