$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: U77s3Tgo+JwuxEwDPIgEi0oM+GrY5Px6PhzJEGyUXn8= Subject key identifier: A3:A8:81:1E:A2:56:22:98:3B:CF:E4:D4:F3:D9:94:A2:56:23:71:E1 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 71 Signing time: Mon 11 Aug 2025 07:05:20 +0000 Manifest this update: Mon 11 Aug 2025 07:05:20 +0000 Manifest next update: Mon 18 Aug 2025 07:05:20 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: sdGOjJt4At27mVp0jpcnSdadjkCKTyFQlweVX22cSxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Aug 11 07:05:20 2025 GMT Not After : Aug 18 07:05:20 2025 GMT Subject: CN=68999630-fe39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:fe:cc:42:bf:7b:f6:f4:6e:e1:af:1c:99: b3:84:10:be:cd:94:93:83:ad:cb:95:c2:60:df:f1: 03:0a:4a:64:b1:14:45:ab:ff:c0:fd:2d:e5:ef:65: 59:3c:ce:5a:df:f4:70:4a:9c:2b:9a:2d:70:f5:2c: 5d:a1:89:e5:39:80:8f:0e:b0:2d:a4:69:a8:78:2b: d4:9f:81:af:29:81:c0:3e:22:4c:fe:4a:cb:ed:2b: 75:2b:98:f7:1c:0d:da:85:85:d4:6b:fe:92:d0:8b: 49:8c:89:e0:eb:69:3c:47:80:e4:db:34:91:ef:3f: b8:3c:51:8c:6d:58:32:8f:bb:4c:4d:04:78:60:dd: ca:a7:7a:96:5e:19:26:c6:df:3e:24:82:18:6a:4e: 71:99:db:f8:e7:76:cc:62:74:78:ad:ae:d1:7a:8a: 7a:70:50:f4:38:f3:75:7f:73:55:ee:ba:2a:59:7a: 97:4c:aa:80:3a:3d:6f:a7:de:e0:3b:44:8c:54:48: 75:4e:20:80:c0:c3:6f:29:eb:6b:29:ae:d4:89:d7: 27:da:06:aa:c9:ab:81:1a:12:a5:5b:aa:32:99:11: 57:0b:fd:23:b6:2c:af:36:6b:0e:79:0c:6b:68:87: 3b:65:c5:da:4e:77:8d:73:28:8d:bf:fb:03:2e:07: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:81:1E:A2:56:22:98:3B:CF:E4:D4:F3:D9:94:A2:56:23:71:E1 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c0:09:a3:6c:e4:c8:a7:f5:06:e3:46:de:46:c4:f1:ae:eb: 04:57:64:60:80:99:b3:fd:f3:10:dd:50:de:a1:e6:58:ef:9d: 91:19:c2:be:25:42:f5:35:ff:d7:1f:cf:7c:ef:ec:47:9c:a0: 16:54:ba:45:01:41:d8:fb:c8:c0:5d:e2:38:eb:bc:4d:5d:5b: 30:5a:b7:b5:c6:4b:15:01:50:22:49:f4:1f:ce:7e:82:ed:50: 76:84:d5:31:ac:51:da:3d:65:43:5b:22:bc:49:3f:23:a7:91: d6:40:27:68:78:73:a2:79:21:f4:7c:43:f6:87:25:7c:b7:1d: bb:93:5b:86:66:b3:8b:12:2e:64:1c:43:79:ba:11:25:b0:e1: d8:8d:59:d7:55:d6:d2:8f:d9:62:8b:ac:e5:6b:74:8c:21:69: d6:4e:60:99:bd:26:7f:62:bb:a5:a5:31:05:34:36:85:89:2f: 41:4a:23:76:27:10:25:81:60:1d:c1:7e:3f:df:47:a7:a7:64: 11:5c:54:b4:4e:71:92:3e:fa:d1:df:71:ef:0e:bb:0e:d7:0f: 42:bc:7c:fa:1b:f7:3e:1c:a1:39:6e:4a:f0:31:86:40:9b:c9: d5:cc:3a:74:07:e4:ec:19:e2:bb:6d:7b:e9:64:47:5f:53:94: 5e:2b:58:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA4MTEwNzA1MjBaFw0yNTA4MTgwNzA1MjBaMBgxFjAUBgNV BAMTDTY4OTk5NjMwLWZlMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDITP7MQr979vRu4a8cmbOEEL7NlJODrcuVwmDf8QMKSmSxFEWr/8D9LeXvZVk8 zlrf9HBKnCuaLXD1LF2hieU5gI8OsC2kaah4K9Sfga8pgcA+Ikz+SsvtK3UrmPcc DdqFhdRr/pLQi0mMieDraTxHgOTbNJHvP7g8UYxtWDKPu0xNBHhg3cqnepZeGSbG 3z4kghhqTnGZ2/jndsxidHitrtF6inpwUPQ483V/c1XuuipZepdMqoA6PW+n3uA7 RIxUSHVOIIDAw28p62sprtSJ1yfaBqrJq4EaEqVbqjKZEVcL/SO2LK82aw55DGto hztlxdpOd41zKI2/+wMuBzhpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo6iBHqJW Ipg7z+TU89mUolYjceEwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABnACaNs5Min9QbjRt5GxPGu6wRXZGCAmbP98xDdUN6h5ljvnZEZwr4l QvU1/9cfz3zv7EecoBZUukUBQdj7yMBd4jjrvE1dWzBat7XGSxUBUCJJ9B/OfoLt UHaE1TGsUdo9ZUNbIrxJPyOnkdZAJ2h4c6J5IfR8Q/aHJXy3HbuTW4Zms4sSLmQc Q3m6ESWw4diNWddV1tKP2WKLrOVrdIwhadZOYJm9Jn9iu6WlMQU0NoWJL0FKI3Yn ECWBYB3Bfj/fR6enZBFcVLROcZI++tHfce8Ouw7XD0K8fPob9z4coTluSvAxhkCb ydXMOnQH5OwZ4rtte+lkR19TlF4rWBU= -----END CERTIFICATE-----Generated at Tue Aug 12 14:48:48 2025 by rpki-client