$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: 8ps7DzQBiJ0xHXaIqb8Pfx1qIKWRu1UD9eM3q2fo2fE= Subject key identifier: A5:D4:11:94:F5:C3:95:40:33:6C:4D:14:86:F3:CB:B6:3E:B9:8E:68 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0457 Signing time: Sat 23 Aug 2025 00:27:29 +0000 Manifest this update: Sat 23 Aug 2025 00:27:29 +0000 Manifest next update: Sat 30 Aug 2025 00:27:29 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: pUDRSHtJfEUFGbhcgBJl82LwQakIMXOuQVUX4X/XnA8=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Aug 23 00:27:29 2025 GMT Not After : Aug 30 00:27:29 2025 GMT Subject: CN=68a90af1-0f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:ab:72:e3:45:f7:2a:9c:e3:87:5a:e8:9b: 5b:de:03:7f:34:3d:43:c9:47:b3:17:9e:2f:3e:10: c7:ea:25:42:28:6b:85:0a:11:07:75:82:45:e9:92: 6f:fb:10:0d:16:a9:ca:93:93:c9:a6:cd:63:5e:39: d3:25:dd:84:df:d9:c5:dc:bf:fa:87:53:45:7a:7a: ab:b6:fd:ea:c5:ec:51:65:66:43:c8:ef:1f:50:45: 35:10:47:15:54:f7:c3:0f:ae:b9:02:67:03:43:20: 04:21:20:6a:13:1e:6f:d9:51:97:b3:fe:2f:85:ff: 0d:40:bd:d5:5b:6e:58:ae:b0:46:05:a2:45:4a:29: 31:5a:44:86:9e:4f:35:a4:d6:83:37:4a:a2:19:59: 84:f0:38:64:9e:ff:b0:c9:79:d4:70:6d:0e:f2:38: 3a:9d:54:0f:1e:f6:53:a0:77:52:a7:e9:25:49:53: 6b:3d:92:31:d7:a8:a9:fc:47:8c:8f:b6:e9:ac:a2: 90:e9:36:25:0a:56:56:39:44:20:fb:65:d6:0c:05: 2c:36:94:35:de:7b:8f:91:22:a5:ea:39:0f:8e:f0: aa:48:a9:40:79:f5:b0:c6:e8:83:f8:14:f8:df:a4: 99:25:b3:ed:b6:31:88:cc:d4:c8:5b:06:b7:58:47: 44:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D4:11:94:F5:C3:95:40:33:6C:4D:14:86:F3:CB:B6:3E:B9:8E:68 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:db:3b:25:0c:08:bb:ab:0b:26:e1:0b:0d:94:7c:a6:67: 9e:a9:ba:ea:13:14:fe:b7:42:6b:73:19:93:ad:aa:08:d0:c5: 38:bf:a4:7f:53:19:5b:2f:34:9f:c0:ad:a1:e4:bb:6c:f1:5a: 56:69:05:a6:e3:4e:53:7d:98:7e:c9:1f:a0:a6:b7:0a:c5:8e: 5f:5e:1a:30:60:07:67:33:da:34:46:b8:22:aa:ad:13:ae:32: 76:51:1d:f6:30:f6:9c:16:16:80:b1:7d:59:66:82:cd:93:79: 3d:d6:be:86:85:89:50:03:cb:8a:cf:a1:0a:40:de:63:ca:74: d9:82:b0:31:b8:b1:a6:50:5e:ce:03:88:36:c8:ce:2f:c4:dd: 0f:17:84:f0:38:db:e3:be:81:10:34:22:e4:6d:cc:f2:cc:b8: 02:f9:b6:9d:11:92:9a:da:e0:ef:e2:0b:1e:2e:e5:d8:a9:ce: 6c:e5:5d:a0:ad:ad:b8:6f:0a:52:b7:f9:cc:52:7c:22:a2:82: b8:6f:ac:85:45:39:e4:c1:d0:d8:3e:42:15:bb:59:1d:7f:bc: ab:1e:5b:aa:d1:aa:48:a5:ad:0b:1c:b4:56:0a:6a:62:23:de: ec:13:bb:25:e5:96:45:81:16:36:75:68:fa:e2:be:6a:0c:37: 1a:54:4f:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwODIzMDAyNzI5WhcNMjUwODMwMDAyNzI5WjAYMRYwFAYD VQQDEw02OGE5MGFmMS0wZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YurcuNF9yqc44da6Jtb3gN/ND1DyUezF54vPhDH6iVCKGuFChEHdYJF6ZJv +xANFqnKk5PJps1jXjnTJd2E39nF3L/6h1NFenqrtv3qxexRZWZDyO8fUEU1EEcV VPfDD665AmcDQyAEISBqEx5v2VGXs/4vhf8NQL3VW25YrrBGBaJFSikxWkSGnk81 pNaDN0qiGVmE8Dhknv+wyXnUcG0O8jg6nVQPHvZToHdSp+klSVNrPZIx16ip/EeM j7bprKKQ6TYlClZWOUQg+2XWDAUsNpQ13nuPkSKl6jkPjvCqSKlAefWwxuiD+BT4 36SZJbPttjGIzNTIWwa3WEdEYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXUEZT1 w5VAM2xNFIbzy7Y+uY5oMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWAts7JQwIu6sLJuELDZR8pmeeqbrqExT+t0JrcxmTraoI0MU4v6R/ UxlbLzSfwK2h5Lts8VpWaQWm405TfZh+yR+gprcKxY5fXhowYAdnM9o0Rrgiqq0T rjJ2UR32MPacFhaAsX1ZZoLNk3k91r6GhYlQA8uKz6EKQN5jynTZgrAxuLGmUF7O A4g2yM4vxN0PF4TwONvjvoEQNCLkbczyzLgC+badEZKa2uDv4gseLuXYqc5s5V2g ra24bwpSt/nMUnwiooK4b6yFRTnkwdDYPkIVu1kdf7yrHluq0apIpa0LHLRWCmpi I97sE7sl5ZZFgRY2dWj64r5qDDcaVE+I -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:15 2025 by rpki-client