$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: 8xuRi8wYlw12drIQ8Gbt0GYLQ62RdpLTCRD4wsgn6DA= Subject key identifier: 52:9A:9B:02:77:DA:E1:22:A7:33:92:9B:72:96:D0:05:34:73:93:35 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 6D Signing time: Sat 09 Aug 2025 07:23:36 +0000 Manifest this update: Sat 09 Aug 2025 07:23:35 +0000 Manifest next update: Sat 16 Aug 2025 07:23:35 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: ZdAlxjCWfaLSYhrjTto67kPOBX7thC5DFsIgw/kc1dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: Aug 9 07:23:35 2025 GMT Not After : Aug 16 07:23:35 2025 GMT Subject: CN=6896f778-8551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4b:39:ec:e4:d4:ff:62:e8:ae:49:6f:c9:29: 24:3b:1f:81:f6:88:3b:67:1b:f2:bb:76:2b:4e:99: 99:51:8b:d7:2f:f1:10:67:ba:01:46:c6:47:47:b1: ed:89:91:e8:0f:7f:c1:4d:63:59:23:2d:57:62:9b: 2a:e1:5b:14:f0:0c:19:67:61:0a:c6:be:b8:cc:b3: a7:4b:de:d2:fd:65:21:db:86:41:73:03:15:b7:89: c7:a9:c0:86:21:f8:9d:2c:75:bb:bd:ad:b0:35:03: c7:91:db:47:c8:8d:5d:ec:76:0e:ee:bc:94:7c:83: be:7a:99:87:b7:e3:32:04:03:8d:cd:3a:b6:b3:16: 2a:11:22:ed:a6:06:2a:80:95:e3:30:ed:a2:69:c4: dc:fd:39:b6:ce:7c:4a:d2:a4:cd:56:ec:72:d2:e9: 80:e9:94:6f:24:05:e7:6c:4a:5f:ad:dc:e5:00:0a: 54:01:b9:d4:58:64:eb:57:cf:93:7f:70:8d:1e:ba: bf:b2:c4:85:08:fe:b8:37:90:80:6f:7f:82:cf:f2: f4:a1:98:bb:b3:21:3f:40:88:c2:14:de:41:12:2e: 37:14:a8:1a:f2:ea:ca:82:3b:3a:3b:35:e4:1e:8c: 2a:a4:1e:20:16:02:20:81:66:4e:5e:b2:04:7e:8f: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9A:9B:02:77:DA:E1:22:A7:33:92:9B:72:96:D0:05:34:73:93:35 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:90:dd:2b:90:bd:20:00:c9:1b:15:3f:e1:55:1c:7d:1c:34: b6:18:52:a9:36:fd:9d:5b:e3:65:64:7a:ad:63:d2:72:4e:38: 22:b1:30:9b:69:3d:65:7f:a4:be:14:43:e1:d8:ab:f5:df:89: 94:13:ca:22:7c:9b:f7:39:d5:2b:69:2d:39:a8:eb:7d:fd:a6: 4e:3e:0c:b8:b7:36:67:09:ad:e6:a1:40:98:65:80:b9:9e:9f: e0:6d:25:3f:9d:20:08:e6:d6:84:ea:97:b2:fb:3e:d2:96:53: 0c:86:78:bd:bf:41:5d:e0:61:54:63:e6:e1:8c:81:b7:e8:23: 90:b8:39:58:93:12:b5:e2:0c:e9:e9:30:a0:fb:06:71:63:14: dc:ba:30:f8:f3:c7:99:57:a0:4a:96:76:b9:fe:4d:3a:2a:69: 3a:8f:14:8c:32:1b:52:1c:b6:ae:b6:0c:5b:e7:29:98:26:9f: 02:75:c9:0d:1d:3a:3a:1f:a7:c8:3e:48:5b:0a:be:22:99:78: d0:73:71:5c:cc:f6:ab:16:58:22:21:a5:90:e0:46:a6:71:58: cc:a6:52:79:46:d8:c5:c8:38:ea:3d:32:91:65:67:ba:71:37: 43:03:8d:b2:86:8e:5c:1d:dc:59:58:38:57:06:10:86:bd:c6: d9:1e:cc:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUU5QjBEMTYzQ0UwQUExMUU5MUQ1NTYwRjVBM0NDNjY5 RTMyOTFFRjAeFw0yNTA4MDkwNzIzMzVaFw0yNTA4MTYwNzIzMzVaMBgxFjAUBgNV BAMTDTY4OTZmNzc4LTg1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvSzns5NT/YuiuSW/JKSQ7H4H2iDtnG/K7ditOmZlRi9cv8RBnugFGxkdHse2J kegPf8FNY1kjLVdimyrhWxTwDBlnYQrGvrjMs6dL3tL9ZSHbhkFzAxW3icepwIYh +J0sdbu9rbA1A8eR20fIjV3sdg7uvJR8g756mYe34zIEA43NOrazFioRIu2mBiqA leMw7aJpxNz9ObbOfErSpM1W7HLS6YDplG8kBedsSl+t3OUAClQBudRYZOtXz5N/ cI0eur+yxIUI/rg3kIBvf4LP8vShmLuzIT9AiMIU3kESLjcUqBry6sqCOzo7NeQe jCqkHiAWAiCBZk5esgR+jzq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUpqbAnfa 4SKnM5KbcpbQBTRzkzUwHwYDVR0jBBgwFoAUHpsNFjzgqhHpHVVg9aPMZp4yke8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzA5NTMwQThDQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHBzTkZqemdxaEhwSFZWZzlhUE1acDR5a2U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzA5NTMwQThDQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhI cEhWVmc5YVBNWnA0eWtlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALeQ3SuQvSAAyRsVP+FVHH0cNLYYUqk2/Z1b42Vkeq1j0nJOOCKxMJtp PWV/pL4UQ+HYq/XfiZQTyiJ8m/c51StpLTmo6339pk4+DLi3NmcJreahQJhlgLme n+BtJT+dIAjm1oTql7L7PtKWUwyGeL2/QV3gYVRj5uGMgbfoI5C4OViTErXiDOnp MKD7BnFjFNy6MPjzx5lXoEqWdrn+TToqaTqPFIwyG1Ictq62DFvnKZgmnwJ1yQ0d Ojofp8g+SFsKviKZeNBzcVzM9qsWWCIhpZDgRqZxWMymUnlG2MXIOOo9MpFlZ7px N0MDjbKGjlwd3FlYOFcGEIa9xtkezJ4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:14 2025 by rpki-client