$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: taEfqCbvVR95jvPpsc247xcj/oAK6UmGk8zPowyJ1MI= Subject key identifier: 70:26:18:FF:68:94:71:D2:01:9E:FB:9E:49:AF:3B:C1:09:86:E2:90 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 93 Signing time: Sat 09 Aug 2025 06:54:31 +0000 Manifest this update: Sat 09 Aug 2025 06:54:31 +0000 Manifest next update: Sat 16 Aug 2025 06:54:31 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: wIEVNR86NueEe/SqUbwI4H2ZssSPFaMbL5sPrwHq/wU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Aug 9 06:54:31 2025 GMT Not After : Aug 16 06:54:31 2025 GMT Subject: CN=6896f0a7-be58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1b:f9:0d:c0:0d:13:21:72:8d:9b:01:df:8a: 1f:5a:76:cc:27:5d:c2:78:96:39:7d:74:74:25:e5: f3:b7:d6:8d:ba:95:d3:de:28:88:c7:1e:ca:b9:0a: 16:65:64:91:47:d5:08:6a:c8:a6:70:b0:c6:9f:a7: b4:e9:9c:cb:0c:32:14:e2:f8:12:35:a2:0f:85:2a: 90:0f:2c:a8:d7:7b:a3:a2:81:36:21:2a:3f:c1:98: 79:14:7e:cc:9e:d0:ad:c8:62:29:ca:0e:28:57:6f: ea:a1:a1:75:3f:ec:3f:14:de:d7:90:5f:12:41:f0: 85:32:5a:44:3c:71:61:31:e1:ca:31:a3:dc:be:ea: 5a:49:65:1d:f1:26:2a:56:c9:d5:42:9c:31:9e:9e: bb:9f:7e:c2:61:61:6e:1a:4b:c9:55:34:62:68:52: de:32:71:f0:a2:38:d9:3e:aa:25:41:56:a9:1a:c6: e1:dd:cd:e4:bc:53:ea:ac:e1:5b:b1:cf:e8:57:f3: 35:c9:14:70:c5:45:ed:05:38:72:87:cb:b4:a7:d4: a4:c4:13:cc:a9:9a:c8:de:59:9b:d6:94:72:ac:7e: ed:c8:d5:6a:06:8d:45:17:26:aa:77:57:7e:65:ab: ae:92:2c:ab:97:36:b9:66:75:f3:f1:67:d2:9e:e8: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:26:18:FF:68:94:71:D2:01:9E:FB:9E:49:AF:3B:C1:09:86:E2:90 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:17:34:10:60:2e:38:2d:74:bf:19:28:84:86:19:60:60: 08:65:f6:e5:a1:f4:cf:91:7e:eb:4a:ae:97:58:48:0f:5d:f0: c7:5f:7f:c5:be:7a:b8:d5:fb:0a:84:74:cb:55:44:f6:ae:61: 72:5c:d3:8d:d1:dc:78:ad:66:c1:02:ff:c9:44:71:75:ec:59: 22:02:fe:99:45:ab:5a:5a:d5:28:b5:22:3c:95:d1:34:aa:39: 54:42:ee:0e:6f:94:c7:b9:5e:6d:17:ac:fd:f9:91:d3:1f:34: ca:00:4e:8f:c4:ae:85:29:4a:98:70:f3:1a:ba:13:7b:e0:75: a1:0a:f7:78:27:67:c7:54:71:d8:27:c5:37:76:fc:ab:38:27: 8d:86:74:0d:53:21:62:18:70:6e:28:bc:22:4f:8d:c4:0b:66: 27:f1:89:dd:fc:4b:f2:01:03:f1:77:58:90:77:f5:7a:6b:e1: 94:38:5b:1c:d5:9c:41:38:91:ab:e1:2b:fc:5b:63:6d:28:e0: e7:94:f4:60:0b:7b:59:77:53:50:c0:3f:0d:70:fa:98:c6:a0: 1e:5f:df:f6:4e:58:d1:20:14:64:2f:e5:aa:f6:a3:11:96:05: 95:10:61:2b:42:05:ee:1c:03:83:0c:12:7f:ec:b4:dc:5a:d5: 40:57:83:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC MkYxMjkyNTEwHhcNMjUwODA5MDY1NDMxWhcNMjUwODE2MDY1NDMxWjAYMRYwFAYD VQQDEw02ODk2ZjBhNy1iZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Bv5DcANEyFyjZsB34ofWnbMJ13CeJY5fXR0JeXzt9aNupXT3iiIxx7KuQoW ZWSRR9UIasimcLDGn6e06ZzLDDIU4vgSNaIPhSqQDyyo13ujooE2ISo/wZh5FH7M ntCtyGIpyg4oV2/qoaF1P+w/FN7XkF8SQfCFMlpEPHFhMeHKMaPcvupaSWUd8SYq VsnVQpwxnp67n37CYWFuGkvJVTRiaFLeMnHwojjZPqolQVapGsbh3c3kvFPqrOFb sc/oV/M1yRRwxUXtBThyh8u0p9SkxBPMqZrI3lmb1pRyrH7tyNVqBo1FFyaqd1d+ Zauukiyrlza5ZnXz8WfSnuhrVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAmGP9o lHHSAZ77nkmvO8EJhuKQMB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1 NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI SWdJRVVYUUc0X2F5OFNrbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDdBc0EGAuOC10vxkohIYZYGAIZfblofTPkX7rSq6XWEgPXfDHX3/F vnq41fsKhHTLVUT2rmFyXNON0dx4rWbBAv/JRHF17FkiAv6ZRataWtUotSI8ldE0 qjlUQu4Ob5THuV5tF6z9+ZHTHzTKAE6PxK6FKUqYcPMauhN74HWhCvd4J2fHVHHY J8U3dvyrOCeNhnQNUyFiGHBuKLwiT43EC2Yn8Ynd/EvyAQPxd1iQd/V6a+GUOFsc 1ZxBOJGr4Sv8W2NtKODnlPRgC3tZd1NQwD8NcPqYxqAeX9/2TljRIBRkL+Wq9qMR lgWVEGErQgXuHAODDBJ/7LTcWtVAV4On -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:04 2025 by rpki-client