$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: hfWjUKWOXz+mwGz/SG4yCwLEr7ZnjL5zi6h+cQw36N0= Subject key identifier: 7B:FD:B8:A2:84:A5:50:63:69:3C:26:BC:40:F7:C3:69:A5:3C:9B:8E Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B43 Signing time: Fri 22 Aug 2025 16:22:19 +0000 Manifest this update: Fri 22 Aug 2025 16:22:18 +0000 Manifest next update: Fri 29 Aug 2025 16:22:18 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: mwZMr3vbYJk3vlELugPkuZd4BXDC703cApuzOni8qJA=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7045 (0x1b85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Aug 22 16:22:18 2025 GMT Not After : Aug 29 16:22:18 2025 GMT Subject: CN=68a8993b-d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:1c:de:57:73:c7:45:84:67:48:20:9c:cb:02: 9f:f2:db:ba:02:4d:db:21:71:02:34:52:4b:df:a5: 00:d2:a6:94:19:f1:1f:35:82:8d:05:a8:aa:dc:0d: 30:13:6f:8e:04:f2:1c:5f:95:ad:48:4d:ec:76:53: c9:bf:22:67:cc:71:be:41:3b:f4:5d:07:26:fd:c6: e9:77:65:cd:43:83:8d:c6:94:02:eb:7d:f4:62:35: d2:8b:b2:a2:2e:42:8a:80:b5:2f:d1:fc:90:e9:d5: 12:c2:d8:9c:bd:8b:2d:bf:58:40:d1:95:0e:22:d5: 20:80:a5:34:fe:58:d0:d7:df:7b:de:90:3b:35:8b: 05:c1:bb:42:e5:0f:57:ce:6b:96:ae:0b:94:93:ca: f6:be:bd:26:bc:3f:6d:e6:5c:64:5a:3f:b8:90:a1: bd:11:a6:ac:cc:a8:76:7d:7b:fa:b7:c3:40:89:b9: 37:e3:ca:0b:7c:4c:fd:69:77:85:82:87:7c:b9:31: 7c:fe:81:84:21:4e:1f:da:a0:64:93:56:48:b5:d4: 1b:5b:0f:c5:2f:22:75:8d:ec:3a:4f:42:80:ae:ce: 99:74:fe:3a:0a:4a:48:33:6d:68:1e:8e:99:70:b4: 59:ad:c4:58:f6:6a:b6:66:b2:ef:fd:63:20:37:10: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:B8:A2:84:A5:50:63:69:3C:26:BC:40:F7:C3:69:A5:3C:9B:8E X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:53:1f:21:19:b7:30:23:8d:f7:2c:5c:cb:fa:12:e9:c2:9a: 43:8c:f8:45:19:39:62:43:fa:99:2b:7a:ce:59:07:76:44:f2: 40:ea:cd:50:6a:17:43:e6:eb:70:d2:d7:8c:ef:7a:1b:a5:7a: 3a:6a:04:f1:65:ce:3e:d5:3e:0a:08:ad:e8:9e:0b:3b:39:84: a1:5c:cd:41:e0:ac:cf:b1:3c:a5:63:c8:68:ca:fc:1f:88:fe: 6e:ca:2b:f6:8e:c1:fc:10:0f:12:72:35:4d:f9:a7:51:0c:fb: a6:0e:b8:33:35:8b:5d:a9:51:4e:f7:dd:e5:80:7a:99:4f:30: 53:06:db:a1:ab:c6:02:7d:74:61:32:33:52:02:06:54:c8:2b: 33:25:0e:1f:d0:79:b8:30:d8:a7:37:05:4f:d2:31:d9:98:df: c4:75:fe:a2:1f:bd:90:d6:0f:a2:05:88:c0:54:e4:1d:a1:ea: 8b:20:40:38:95:55:24:92:cb:cf:53:87:ce:96:5e:2f:6d:76: 25:57:59:12:46:dc:f7:28:c2:7d:f4:22:33:2c:69:21:5b:0b: 3a:cb:b1:6a:54:ec:22:70:51:09:20:8d:62:6c:25:e4:51:d3: 17:52:35:db:37:25:e9:3b:bd:c2:15:76:9c:8e:44:97:23:34: e9:97:a1:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUwODIyMTYyMjE4WhcNMjUwODI5MTYyMjE4WjAYMRYwFAYD VQQDEw02OGE4OTkzYi1kMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/BzeV3PHRYRnSCCcywKf8tu6Ak3bIXECNFJL36UA0qaUGfEfNYKNBaiq3A0w E2+OBPIcX5WtSE3sdlPJvyJnzHG+QTv0XQcm/cbpd2XNQ4ONxpQC6330YjXSi7Ki LkKKgLUv0fyQ6dUSwticvYstv1hA0ZUOItUggKU0/ljQ19973pA7NYsFwbtC5Q9X zmuWrguUk8r2vr0mvD9t5lxkWj+4kKG9EaaszKh2fXv6t8NAibk348oLfEz9aXeF god8uTF8/oGEIU4f2qBkk1ZItdQbWw/FLyJ1jew6T0KArs6ZdP46CkpIM21oHo6Z cLRZrcRY9mq2ZrLv/WMgNxDIKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv9uKKE pVBjaTwmvED3w2mlPJuOMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkUx8hGbcwI433LFzL+hLpwppDjPhFGTliQ/qZK3rOWQd2RPJA6s1Q ahdD5utw0teM73obpXo6agTxZc4+1T4KCK3ongs7OYShXM1B4KzPsTylY8hoyvwf iP5uyiv2jsH8EA8ScjVN+adRDPumDrgzNYtdqVFO993lgHqZTzBTBtuhq8YCfXRh MjNSAgZUyCszJQ4f0Hm4MNinNwVP0jHZmN/Edf6iH72Q1g+iBYjAVOQdoeqLIEA4 lVUkksvPU4fOll4vbXYlV1kSRtz3KMJ99CIzLGkhWws6y7FqVOwicFEJII1ibCXk UdMXUjXbNyXpO73CFXacjkSXIzTpl6E1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:13 2025 by rpki-client