$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: Vnd4IcfFnKpiQgbrdaPlwWC05brEKZjiffaYcsMje8w= Subject key identifier: F3:3F:31:44:D8:64:C9:92:38:2E:65:42:14:74:86:6F:F1:C2:A6:56 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0165 Signing time: Sat 23 Aug 2025 04:05:20 +0000 Manifest this update: Sat 23 Aug 2025 04:05:20 +0000 Manifest next update: Sat 30 Aug 2025 04:05:20 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: 4GF7D/g199QzhjMa5cpg80CyWTh0Y3KLlctE/fCoZmo=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Aug 23 04:05:20 2025 GMT Not After : Aug 30 04:05:20 2025 GMT Subject: CN=68a93e00-a75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:90:b5:bf:b4:9f:a5:74:c0:a2:d9:7d:80: fa:dc:26:d3:9c:f3:aa:e2:80:ef:88:10:78:4b:ca: 5f:da:c1:32:4f:9f:ec:0d:1e:c7:2d:dc:cc:8a:40: 49:11:29:b1:a9:ce:8f:c5:f3:93:50:c3:d2:a5:ca: 03:46:9f:73:ed:9d:65:61:8a:74:8c:db:09:02:f7: 84:01:d9:87:1e:bd:3f:95:29:61:3c:b1:5b:35:c4: 59:1f:4e:2b:f6:0e:77:4b:63:de:53:06:e2:c7:2c: 3a:9b:c5:a9:dd:4e:0c:dc:31:12:63:09:f0:ff:56: f1:e9:16:ca:28:d0:10:59:ca:19:5f:58:cb:c3:b9: 4e:5d:c8:9d:66:37:81:08:fa:9b:c8:08:12:e6:21: ec:74:ef:00:cb:12:eb:8a:4a:21:48:ea:a0:9e:21: 38:c2:52:d6:47:19:08:84:ae:bc:61:47:e4:58:49: c5:15:14:4a:ba:24:b6:c2:99:47:e4:f7:b8:70:75: 54:68:ec:da:bc:94:f7:0d:27:89:03:6b:ae:6d:17: bd:bb:44:4f:29:f7:c1:3f:d8:ab:ea:76:5d:d8:9e: 8b:9f:fb:b7:cd:89:1c:a1:14:7c:25:65:50:c2:ab: 59:b4:6a:2c:62:d1:aa:51:7f:0f:c7:b3:bf:dc:b4: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:31:44:D8:64:C9:92:38:2E:65:42:14:74:86:6F:F1:C2:A6:56 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ac:bb:61:51:e6:ff:ba:97:9b:41:be:4f:32:94:14:62:e1: 26:34:45:5d:86:a9:73:b4:44:9e:32:69:c5:aa:55:af:79:cc: 5f:ac:b9:2c:8c:b8:e2:d5:04:e7:cb:ba:a7:75:26:ac:75:94: 7e:dd:e8:b2:a7:9c:67:4d:da:67:d0:e6:05:1a:8d:63:80:b4: aa:84:18:27:6a:9f:fa:80:a2:3c:28:73:04:b8:eb:c6:fa:79: d7:f5:9f:3c:06:09:02:23:61:d0:1a:8c:cf:ad:f9:fc:ff:c1: 37:c9:35:91:12:78:d2:2a:88:a9:bb:d4:44:ff:80:bf:9b:31: ea:12:fe:7f:5a:4f:90:04:17:39:9c:e3:c9:f4:45:8c:ae:32: 27:31:42:04:74:71:8c:8c:a8:09:fd:ca:b7:38:d9:c3:90:86: 08:f5:ea:f0:b5:64:2c:39:e9:16:b0:cc:84:f1:cf:f4:4a:00: 45:65:01:29:cd:56:d7:57:f6:62:e9:d2:36:98:c2:33:92:15: e0:63:c1:88:e5:92:59:a5:81:7b:e2:6d:a0:da:41:43:e3:30: f7:11:a1:f2:9e:dd:60:16:50:a8:bd:42:fb:f9:ea:e1:6a:c1: 47:6f:a9:0d:3e:8d:9b:fc:72:eb:5b:d7:0d:2d:59:f2:81:20: 56:42:db:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUwODIzMDQwNTIwWhcNMjUwODMwMDQwNTIwWjAYMRYwFAYD VQQDEw02OGE5M2UwMC1hNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMyQtb+0n6V0wKLZfYD63CbTnPOq4oDviBB4S8pf2sEyT5/sDR7HLdzMikBJ ESmxqc6PxfOTUMPSpcoDRp9z7Z1lYYp0jNsJAveEAdmHHr0/lSlhPLFbNcRZH04r 9g53S2PeUwbixyw6m8Wp3U4M3DESYwnw/1bx6RbKKNAQWcoZX1jLw7lOXcidZjeB CPqbyAgS5iHsdO8AyxLrikohSOqgniE4wlLWRxkIhK68YUfkWEnFFRRKuiS2wplH 5Pe4cHVUaOzavJT3DSeJA2uubRe9u0RPKffBP9ir6nZd2J6Ln/u3zYkcoRR8JWVQ wqtZtGosYtGqUX8Px7O/3LQZ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM/MUTY ZMmSOC5lQhR0hm/xwqZWMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRrLthUeb/upebQb5PMpQUYuEmNEVdhqlztESeMmnFqlWvecxfrLks jLji1QTny7qndSasdZR+3eiyp5xnTdpn0OYFGo1jgLSqhBgnap/6gKI8KHMEuOvG +nnX9Z88BgkCI2HQGozPrfn8/8E3yTWREnjSKoipu9RE/4C/mzHqEv5/Wk+QBBc5 nOPJ9EWMrjInMUIEdHGMjKgJ/cq3ONnDkIYI9erwtWQsOekWsMyE8c/0SgBFZQEp zVbXV/Zi6dI2mMIzkhXgY8GI5ZJZpYF74m2g2kFD4zD3EaHynt1gFlCovUL7+erh asFHb6kNPo2b/HLrW9cNLVnygSBWQtvS -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:28 2025 by rpki-client