$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: vQx6gLrQudWQ4eQFJaURD8lcaceQpynTBAH+VpQTpRM= Subject key identifier: 89:C5:5D:C9:63:05:D6:6E:6B:E3:09:1E:1B:73:4A:E0:91:27:4D:D2 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: DE Signing time: Tue 05 Aug 2025 05:57:37 +0000 Manifest this update: Tue 05 Aug 2025 05:57:36 +0000 Manifest next update: Tue 12 Aug 2025 05:57:36 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: IN9ELpBBLp6xFC8ZHfRfoOI2Mx2xGYCw7gwFoaB/9GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Aug 5 05:57:36 2025 GMT Not After : Aug 12 05:57:36 2025 GMT Subject: CN=68919d50-70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:c5:13:51:aa:79:0c:0c:ad:31:7a:5e:48: ee:cf:42:4f:98:c1:5f:e7:6d:aa:0d:f3:93:8f:3b: bb:dd:74:9d:03:f0:ab:0d:3c:b2:16:ac:1f:0f:13: 6e:c8:63:2a:7e:a9:70:4c:6a:49:77:ab:51:6c:39: b2:b1:12:c9:00:20:bf:7d:12:ad:71:7e:70:ba:07: ca:e5:88:9d:c5:ed:3d:60:16:34:1e:4a:2f:ec:38: 1f:df:e9:63:7b:9b:cb:2c:46:f5:e1:2e:d1:2e:46: 6c:af:76:cc:68:62:34:fe:f3:00:79:be:21:89:ea: 78:44:34:16:1b:37:c0:3b:7f:d3:f7:7f:ee:0b:04: e9:e3:90:b7:a5:da:6a:dd:bb:71:86:c9:35:f7:2a: af:cf:00:d5:83:48:25:31:13:c1:84:13:f9:0f:82: ec:e6:8e:59:97:b1:71:19:d9:78:94:f3:ff:0f:1e: 88:fd:da:f3:42:03:77:06:81:82:93:f3:ca:ad:90: 0d:72:9a:13:33:90:3b:66:a8:81:ae:c1:9e:5f:d0: 48:c8:c5:89:b4:b0:a0:68:a5:64:e2:e8:0b:f0:2d: 8f:9e:bc:53:8a:37:53:39:d6:4f:67:37:3a:d5:a4: 77:d2:6b:e4:e9:d0:9c:1f:cd:04:5e:97:62:83:16: 65:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C5:5D:C9:63:05:D6:6E:6B:E3:09:1E:1B:73:4A:E0:91:27:4D:D2 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:1c:f3:ff:48:6f:b1:2b:78:f3:42:bd:6b:cc:96:f8:57:dc: 85:16:d8:8a:a2:2f:79:e6:a6:06:5d:f6:b9:00:0a:64:e4:a9: be:16:69:f0:44:bc:ea:fa:a6:0a:af:d1:a8:33:bf:8e:04:8e: c4:31:03:93:49:aa:8e:3a:32:86:42:65:d2:28:c9:39:a3:b0: c6:d8:c5:9d:40:13:17:0d:07:a8:f4:8b:b4:74:68:2e:08:7f: ef:2e:a2:f1:cf:db:4d:fd:c4:3f:6f:89:f4:01:92:98:26:e8: ad:8b:e4:f9:b6:78:53:d2:84:75:d9:24:8b:51:75:7f:17:c2: 48:f6:ed:e0:61:e3:b6:74:08:69:e7:60:00:ba:2f:8b:78:6f: 69:bd:a5:4e:c4:2f:9f:d5:fc:a0:c2:ab:f4:93:bd:fe:84:10: 68:3f:a1:80:6d:0d:59:f6:31:3c:78:99:67:bf:57:15:9d:bb: 8f:d8:71:db:03:83:3b:c7:34:08:f2:f9:c1:93:f4:e3:6d:56: 57:c7:af:b2:a9:af:7a:8b:30:c0:ca:52:a6:28:32:1f:3c:76: 94:41:c4:23:db:ec:20:5a:d7:a1:77:8c:65:0c:57:4b:9a:a7: 11:9b:ec:b1:b4:2b:4b:9f:44:04:4a:48:c9:2e:ea:39:2a:5f: 86:17:67:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwODA1MDU1NzM2WhcNMjUwODEyMDU1NzM2WjAYMRYwFAYD VQQDEw02ODkxOWQ1MC03MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgnFE1GqeQwMrTF6Xkjuz0JPmMFf522qDfOTjzu73XSdA/CrDTyyFqwfDxNu yGMqfqlwTGpJd6tRbDmysRLJACC/fRKtcX5wugfK5Yidxe09YBY0Hkov7Dgf3+lj e5vLLEb14S7RLkZsr3bMaGI0/vMAeb4hiep4RDQWGzfAO3/T93/uCwTp45C3pdpq 3btxhsk19yqvzwDVg0glMRPBhBP5D4Ls5o5Zl7FxGdl4lPP/Dx6I/drzQgN3BoGC k/PKrZANcpoTM5A7ZqiBrsGeX9BIyMWJtLCgaKVk4ugL8C2PnrxTijdTOdZPZzc6 1aR30mvk6dCcH80EXpdigxZl7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInFXclj BdZua+MJHhtzSuCRJ03SMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHHPP/SG+xK3jzQr1rzJb4V9yFFtiKoi955qYGXfa5AApk5Km+Fmnw RLzq+qYKr9GoM7+OBI7EMQOTSaqOOjKGQmXSKMk5o7DG2MWdQBMXDQeo9Iu0dGgu CH/vLqLxz9tN/cQ/b4n0AZKYJuiti+T5tnhT0oR12SSLUXV/F8JI9u3gYeO2dAhp 52AAui+LeG9pvaVOxC+f1fygwqv0k73+hBBoP6GAbQ1Z9jE8eJlnv1cVnbuP2HHb A4M7xzQI8vnBk/TjbVZXx6+yqa96izDAylKmKDIfPHaUQcQj2+wgWtehd4xlDFdL mqcRm+yxtCtLn0QESkjJLuo5Kl+GF2fx -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:20 2025 by rpki-client