$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: SqlkGTYfYUmmndr4DxfF1NrOQpkDMGcWWIVuVfDDA9Q= Subject key identifier: 66:1C:F5:CA:42:23:B3:CA:4E:3D:22:6C:57:28:DB:70:4E:1B:A5:20 Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 0206 Signing time: Sat 23 Aug 2025 02:23:40 +0000 Manifest this update: Sat 23 Aug 2025 02:23:40 +0000 Manifest next update: Sat 30 Aug 2025 02:23:40 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: FvFTGJKI95m4rgDnVJDJJ6YFyN+jg6WZONhQ1rvDvNk=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: ne9O+G9qSru/U2exZgVGXkHzQTflawcam407PNhnI+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: Aug 23 02:23:40 2025 GMT Not After : Aug 30 02:23:40 2025 GMT Subject: CN=68a9262c-5ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:7f:59:ff:f2:92:fb:7d:bc:ec:b7:3a:3b: 21:aa:1b:1e:5b:bf:15:45:4e:74:08:ed:ff:66:ae: 54:f7:a5:df:a7:b0:53:a3:5e:f9:aa:56:34:64:0c: 4e:8f:10:af:dc:d4:c4:14:3b:8a:98:7c:58:cd:c6: c3:a3:e1:f1:f6:8e:41:2d:12:48:e4:52:b4:06:bf: 4e:8f:aa:1e:85:14:9b:09:25:bb:68:fc:33:02:fe: 00:38:81:51:30:16:7e:a6:b9:7c:cd:bb:6b:be:90: ea:c0:3b:2f:06:33:f1:28:e9:76:03:a3:dc:d1:16: a6:71:d6:f2:14:17:95:3a:d7:cf:1d:63:a9:00:17: 22:1f:13:65:86:95:cf:41:10:4d:e9:2e:98:ea:71: 8d:1a:b0:d0:e5:62:40:1b:5b:62:de:c2:5b:3a:e1: a7:06:3a:84:e7:d4:94:61:71:b6:33:70:51:0d:db: 35:44:ea:e6:b7:bc:ca:a9:ce:a2:1c:05:d2:c7:a6: b7:11:fb:18:e9:74:0b:06:2f:13:1d:75:19:83:3c: c7:54:22:dd:eb:c3:db:be:dc:38:67:6b:33:fc:6b: 48:65:82:b8:26:33:d6:66:cc:b6:d5:55:b5:00:8b: 9c:ac:d8:a9:bd:82:2d:dd:80:cf:54:6c:70:a0:80: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1C:F5:CA:42:23:B3:CA:4E:3D:22:6C:57:28:DB:70:4E:1B:A5:20 X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:45:27:74:1f:45:01:8b:87:ff:b0:84:79:24:f5:07:94: a3:5e:b6:2f:35:73:37:eb:dd:ef:78:f8:68:5b:0b:11:a7:e5: 8c:1c:e2:de:69:28:b6:73:3d:95:37:cc:1e:47:b0:e0:c1:a3: 10:9e:88:2a:61:62:4e:6d:f6:9a:87:3f:00:a4:dd:11:63:a3: d0:b0:8f:52:52:7e:f0:bc:45:ec:ec:a8:6e:ed:54:90:b3:1d: b5:b1:d8:a1:ac:cf:9d:9a:8e:41:27:0b:4a:08:56:33:ad:75: e0:5a:c4:70:26:4e:f8:57:8f:1b:fb:90:a0:8d:18:8b:4f:f6: 0e:71:f9:f4:d8:f3:d3:72:95:d6:8d:35:f0:94:c0:43:54:11: e6:21:55:dc:6b:62:d7:1e:20:e0:b1:2f:0c:3a:33:af:d1:55: 07:ff:d0:5b:a5:c9:c4:21:92:d4:d5:f5:36:c9:de:40:ab:20: 37:d8:17:33:3d:7f:8e:fd:2c:5f:7c:ab:3f:3d:00:f2:b7:d0: 60:1a:97:28:ac:76:af:ce:43:ce:ba:90:ef:a6:1f:19:ca:67: 8d:45:c2:28:70:fe:7f:1c:93:e0:6a:82:49:79:ba:b0:2e:8b: 2d:24:01:fa:59:c8:71:bc:69:50:3e:2b:b6:eb:7f:38:97:73: 37:ed:83:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjUwODIzMDIyMzQwWhcNMjUwODMwMDIyMzQwWjAYMRYwFAYD VQQDEw02OGE5MjYyYy01YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8B/Wf/ykvt9vOy3OjshqhseW78VRU50CO3/Zq5U96Xfp7BTo175qlY0ZAxO jxCv3NTEFDuKmHxYzcbDo+Hx9o5BLRJI5FK0Br9Oj6oehRSbCSW7aPwzAv4AOIFR MBZ+prl8zbtrvpDqwDsvBjPxKOl2A6Pc0RamcdbyFBeVOtfPHWOpABciHxNlhpXP QRBN6S6Y6nGNGrDQ5WJAG1ti3sJbOuGnBjqE59SUYXG2M3BRDds1ROrmt7zKqc6i HAXSx6a3EfsY6XQLBi8THXUZgzzHVCLd68Pbvtw4Z2sz/GtIZYK4JjPWZsy21VW1 AIucrNipvYIt3YDPVGxwoIClMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYc9cpC I7PKTj0ibFco23BOG6UgMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx+EUndB9FAYuH/7CEeST1B5SjXrYvNXM3693vePhoWwsRp+WMHOLe aSi2cz2VN8weR7DgwaMQnogqYWJObfaahz8ApN0RY6PQsI9SUn7wvEXs7Khu7VSQ sx21sdihrM+dmo5BJwtKCFYzrXXgWsRwJk74V48b+5CgjRiLT/YOcfn02PPTcpXW jTXwlMBDVBHmIVXca2LXHiDgsS8MOjOv0VUH/9BbpcnEIZLU1fU2yd5AqyA32Bcz PX+O/SxffKs/PQDyt9BgGpcorHavzkPOupDvph8ZymeNRcIocP5/HJPgaoJJebqw LostJAH6WchxvGlQPiu26384l3M37YOm -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:56 2025 by rpki-client