$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: x39QP3N3iN/xn96YJY5kmhV0rBz9HG5Tz0O6uBDX8RI= Subject key identifier: 29:64:C6:35:EF:E3:52:C2:14:87:0E:32:78:F1:AB:33:D2:CC:C0:20 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 75 Signing time: Thu 03 Jul 2025 07:12:37 +0000 Manifest this update: Thu 03 Jul 2025 07:12:37 +0000 Manifest next update: Thu 10 Jul 2025 07:12:37 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: P6eqAZdeGc78JUZVH8Fq7Ncf6XvNrecvlnLV9jkxyxs=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: B6GTUBQJjZfy0L/2y0BwFYd9G60axGsfhhHtTmQD3Vw=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: MaCtkavFP9h6cbzbI+/48yQalN3EQ9/HSWusPsbFrP0=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: 8ewBwE8XstXeeqmSvgrbIwTd2CEtwyCXsNRMX6ARDE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Jul 3 07:12:37 2025 GMT Not After : Jul 10 07:12:37 2025 GMT Subject: CN=68662d65-e3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:01:83:23:6b:e6:ee:32:35:af:49:36:8f: 5b:d8:4e:ce:69:2d:3f:c2:2b:2d:37:23:32:84:a8: 64:fa:84:86:74:55:57:e6:e7:d3:3c:04:56:9e:0d: 22:bc:94:17:38:c1:26:f4:22:2d:88:af:0e:cf:6d: 8c:2e:2d:e8:50:c8:64:69:ab:b3:2f:10:1d:83:89: cd:c5:3f:86:b5:ec:8b:98:0b:fe:4a:28:c0:98:b5: c6:7a:9b:61:5a:ff:54:3c:24:70:d6:88:3a:be:bb: 7e:41:fc:c8:e8:50:45:24:5c:3e:3e:b5:a0:23:12: 2f:64:8e:93:b0:1c:2a:7b:6f:e3:80:67:97:ac:1f: 39:d6:19:04:96:5c:fd:2c:25:4c:c1:89:a9:49:a3: 38:1d:1e:4c:7d:c7:b5:ce:51:69:1a:2a:e1:1e:fe: 3e:f9:7b:5a:31:47:a1:74:27:69:12:27:66:21:b3: 8c:94:55:34:19:ef:6f:65:45:c2:d7:82:c4:5f:8a: 31:50:ad:4f:3a:a2:35:73:7d:6a:15:09:53:e8:bf: ea:ba:ab:1f:73:be:89:d5:7c:7e:93:9a:b0:15:71: 51:80:50:3c:f9:cb:00:a7:0a:0f:7d:6a:27:df:1a: 12:51:48:e8:e1:45:6d:7b:35:0f:f8:23:97:d9:98: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:C6:35:EF:E3:52:C2:14:87:0E:32:78:F1:AB:33:D2:CC:C0:20 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:29:93:7b:a7:d6:d2:36:c1:63:0b:cc:0e:99:82:c8:d1:93: 16:72:7e:1b:1b:48:c2:a9:f0:78:51:fd:ac:b6:7d:9f:a7:fd: 6c:ec:62:d4:4b:ec:b5:69:e3:03:32:f9:94:ed:d7:65:fb:fe: 83:32:12:de:bb:5e:ed:b9:de:34:80:c1:d5:2a:f2:eb:78:4f: 50:35:ab:cc:43:65:cd:76:cb:55:8a:3f:e1:96:07:fc:8a:1e: 04:1c:88:a6:87:00:59:55:9a:77:b2:40:62:81:17:83:fb:33: 6d:3c:7a:ce:0d:59:87:9f:17:f7:4f:ee:55:1a:11:9b:19:fe: 0f:5d:20:3f:ac:4d:c8:bc:5d:7d:8d:16:27:d8:bd:ae:d2:61: 4a:49:9e:31:99:57:76:00:cd:67:99:a9:ae:a6:8d:2d:42:88: 9a:fd:b7:bd:af:8c:eb:e0:11:4e:7f:b3:9b:20:71:28:14:e8: 67:2b:81:01:4e:21:94:55:13:e9:53:3c:c2:55:fd:33:ce:bb: 82:9a:ec:0a:b2:08:fc:55:0e:cc:16:41:26:d1:23:50:1a:19: 3e:7f:33:2a:34:96:4b:58:9d:e8:c7:e4:f8:4f:b2:ba:0b:15: 7d:e0:f9:57:5d:c8:ab:56:c3:f7:29:e5:42:d3:8c:b9:fe:4f: e6:a7:e6:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJFRjExMC8GA1UEBRMoODcxOTdGRDU0NkRDMzE1MjMxMTFERDkzOTBCMUJBM0Yz RDcwMjY1NjAeFw0yNTA3MDMwNzEyMzdaFw0yNTA3MTAwNzEyMzdaMBgxFjAUBgNV BAMTDTY4NjYyZDY1LWUzYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEiwGDI2vm7jI1r0k2j1vYTs5pLT/CKy03IzKEqGT6hIZ0VVfm59M8BFaeDSK8 lBc4wSb0Ii2Irw7PbYwuLehQyGRpq7MvEB2Dic3FP4a17IuYC/5KKMCYtcZ6m2Fa /1Q8JHDWiDq+u35B/MjoUEUkXD4+taAjEi9kjpOwHCp7b+OAZ5esHznWGQSWXP0s JUzBialJozgdHkx9x7XOUWkaKuEe/j75e1oxR6F0J2kSJ2Yhs4yUVTQZ729lRcLX gsRfijFQrU86ojVzfWoVCVPov+q6qx9zvonVfH6TmrAVcVGAUDz5ywCnCg99aiff GhJRSOjhRW17NQ/4I5fZmAF9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKWTGNe/j UsIUhw4yePGrM9LMwCAwHwYDVR0jBBgwFoAUhxl/1UbcMVIxEd2TkLG6Pz1wJlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkVGL0ZDNjUwQjcyQjcx RDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0ps WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaHhsXzFVYmNNVkl4RWQyVGtMRzZQejF3SmxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkVGL0ZDNjUwQjcyQjcxRDExRUY4OTgyQzQwQ0M0RjlBRTAyL2h4bF8xVWJjTVZJ eEVkMlRrTEc2UHoxd0psWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0pk3un1tI2wWMLzA6ZgsjRkxZyfhsbSMKp8HhR/ay2fZ+n/WzsYtRL 7LVp4wMy+ZTt12X7/oMyEt67Xu253jSAwdUq8ut4T1A1q8xDZc12y1WKP+GWB/yK HgQciKaHAFlVmneyQGKBF4P7M208es4NWYefF/dP7lUaEZsZ/g9dID+sTci8XX2N FifYva7SYUpJnjGZV3YAzWeZqa6mjS1CiJr9t72vjOvgEU5/s5sgcSgU6GcrgQFO IZRVE+lTPMJV/TPOu4Ka7AqyCPxVDswWQSbRI1AaGT5/Myo0lktYnejH5PhPsroL FX3g+VddyKtWw/cp5ULTjLn+T+an5iM= -----END CERTIFICATE-----Generated at Thu Jul 3 14:12:44 2025 by rpki-client