$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft File: hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json) Hash identifier: 6kTHFY+PC8vwVskpDa6swUA8XU+u7Rwpk2tQyUF7PTY= Subject key identifier: FF:80:D5:21:AE:61:F3:85:AC:16:40:89:C6:F2:53:E8:B2:0B:A5:39 Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 Certificate issuer: /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft Manifest number: 8B Signing time: Sat 09 Aug 2025 07:00:51 +0000 Manifest this update: Sat 09 Aug 2025 07:00:50 +0000 Manifest next update: Sat 16 Aug 2025 07:00:50 +0000 Files and hashes: 1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: 8MTKHZCUMICcHzqqXlbr16oLtyjBwaZPTkxJSYs1tho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1 Validity Not Before: Aug 9 07:00:50 2025 GMT Not After : Aug 16 07:00:50 2025 GMT Subject: CN=6896f222-cb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:76:57:3e:bc:00:3a:a4:cd:3a:58:21:c8: db:a6:51:88:0c:94:0c:a7:8a:84:9e:47:39:1d:90: ad:0a:d5:19:fd:28:c0:55:f5:9f:50:f3:d9:46:b4: b9:74:a4:32:6e:96:66:4a:35:d0:5d:2a:36:95:62: 63:e8:c4:a2:78:c5:42:11:20:49:d8:75:39:7d:4e: ea:10:9a:67:93:43:11:35:20:e7:aa:04:0a:5d:3f: 4c:48:f1:58:29:2f:a5:2d:90:09:e5:07:53:cf:63: 1c:79:a4:b9:34:4d:74:0c:c9:a4:1f:2c:9d:be:32: 13:7b:10:a5:79:da:62:c1:92:98:84:68:5d:61:18: a4:45:b3:58:2a:be:d8:5c:95:d8:17:76:78:18:5b: 06:fa:c0:68:f6:02:10:17:c9:78:35:6b:a9:04:91: 70:a8:9b:cb:55:54:a8:ba:7d:34:6e:3a:28:b6:eb: 0c:fb:31:d3:2a:4f:1e:0c:f2:df:d6:c3:97:98:a8: 87:0b:f5:d1:6d:8e:3d:44:1a:db:07:04:6d:1d:04: e9:fc:f8:d4:15:35:1e:d7:74:cb:88:e9:00:e2:3d: b5:48:d8:5f:0f:91:73:50:6e:97:0b:59:42:4a:ad: ff:4b:c0:99:b2:6d:3c:74:5a:a5:94:bb:da:a7:aa: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:D5:21:AE:61:F3:85:AC:16:40:89:C6:F2:53:E8:B2:0B:A5:39 X509v3 Authority Key Identifier: keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:45:4c:3d:9b:75:39:1d:14:fd:e0:80:5d:24:13:46:c8:81: 82:66:dc:ad:f1:5a:ff:f0:2f:cb:4f:fe:5d:f0:f8:28:7b:d3: 98:f4:72:d6:83:ec:ba:97:d6:db:5f:3c:c0:ff:f3:fc:6f:4d: d6:06:c8:0a:38:11:41:cf:3b:d4:9b:9c:fc:f9:a3:3b:53:a1: e7:d6:fc:7b:a5:8e:c4:bb:fb:b7:7d:ef:c4:ad:43:5b:6f:3e: 5c:25:a0:44:40:77:5e:f5:c2:08:89:38:05:d3:f3:99:ea:40: ed:c9:01:13:d0:36:e3:ea:0e:1a:b4:fc:02:3d:19:be:45:0e: 57:17:53:64:a4:6c:49:c1:78:50:ce:77:20:ee:1e:ff:86:10: 76:a6:f0:74:bc:9a:b6:05:3c:ff:ff:ea:23:e4:13:6e:6c:09: 10:02:b8:38:44:0c:01:fe:8f:e7:9b:e8:af:43:82:00:5d:f2: 5c:95:f4:33:c6:ba:82:5a:0d:02:07:b8:32:9c:77:40:45:47: 35:1d:21:9a:17:1f:d2:84:68:6b:03:94:0b:75:e3:f5:3b:61: 0a:2e:af:ad:74:cd:6a:69:2b:07:25:63:42:98:c6:01:98:b2: 60:fc:a1:e9:d1:15:3b:44:b6:e2:29:10:e2:d2:8c:d2:58:7b: 67:68:9b:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC MTc3OEM2QzEwHhcNMjUwODA5MDcwMDUwWhcNMjUwODE2MDcwMDUwWjAYMRYwFAYD VQQDEw02ODk2ZjIyMi1jYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fB2Vz68ADqkzTpYIcjbplGIDJQMp4qEnkc5HZCtCtUZ/SjAVfWfUPPZRrS5 dKQybpZmSjXQXSo2lWJj6MSieMVCESBJ2HU5fU7qEJpnk0MRNSDnqgQKXT9MSPFY KS+lLZAJ5QdTz2MceaS5NE10DMmkHyydvjITexCledpiwZKYhGhdYRikRbNYKr7Y XJXYF3Z4GFsG+sBo9gIQF8l4NWupBJFwqJvLVVSoun00bjootusM+zHTKk8eDPLf 1sOXmKiHC/XRbY49RBrbBwRtHQTp/PjUFTUe13TLiOkA4j21SNhfD5FzUG6XC1lC Sq3/S8CZsm08dFqllLvap6oT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+A1SGu YfOFrBZAicbyU+iyC6U5MB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy ZlpZazVwSW5yUW14ZDR4c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdRUw9m3U5HRT94IBdJBNGyIGCZtyt8Vr/8C/LT/5d8Pgoe9OY9HLW g+y6l9bbXzzA//P8b03WBsgKOBFBzzvUm5z8+aM7U6Hn1vx7pY7Eu/u3fe/ErUNb bz5cJaBEQHde9cIIiTgF0/OZ6kDtyQET0Dbj6g4atPwCPRm+RQ5XF1NkpGxJwXhQ zncg7h7/hhB2pvB0vJq2BTz//+oj5BNubAkQArg4RAwB/o/nm+ivQ4IAXfJclfQz xrqCWg0CB7gynHdARUc1HSGaFx/ShGhrA5QLdeP1O2EKLq+tdM1qaSsHJWNCmMYB mLJg/KHp0RU7RLbiKRDi0ozSWHtnaJsV -----END CERTIFICATE-----Generated at Sat Aug 9 14:26:17 2025 by rpki-client