$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: +ZEZl3pUUK2YVu1ihRFX2pprZ+mAouftQWgOf9M3tZc= Subject key identifier: E8:B3:86:B4:98:0C:F5:29:2D:FB:50:7E:E8:BA:CD:65:2B:2A:27:DD Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 0118 Signing time: Thu 07 Aug 2025 05:18:15 +0000 Manifest this update: Thu 07 Aug 2025 05:18:15 +0000 Manifest next update: Thu 14 Aug 2025 05:18:15 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: aGBpZBnPN6Kdz7YJTm1Az8q1CVgp/79JO2pqyviQXXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Aug 7 05:18:15 2025 GMT Not After : Aug 14 05:18:15 2025 GMT Subject: CN=68943717-ec4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:2c:e7:af:87:9e:42:61:04:6d:f0:02:ff: ad:7b:b4:b4:d2:f6:0c:9b:fe:5b:10:ba:63:6c:8f: 88:e6:2a:1b:6a:49:ca:f4:9b:ce:be:fd:fc:03:ff: 56:b4:95:3d:0e:87:c3:97:b9:5b:f7:e4:5a:91:4b: ae:b4:71:d0:f9:ff:59:9e:fd:b2:ac:fa:ad:ba:67: 1e:96:77:d1:04:1d:0b:b7:72:f2:52:06:00:a0:04: 36:eb:5a:5b:7b:ea:ba:5f:7f:a0:ec:61:9b:ad:62: ad:51:19:e1:cb:a3:68:b2:be:a1:33:65:39:4b:99: b5:53:8a:04:d8:b7:23:89:4f:bf:ed:0c:e7:8c:08: 52:c4:c1:13:55:cc:47:30:37:9a:73:96:33:04:80: 3e:12:ff:53:15:17:74:c0:55:2f:de:9c:3f:1d:7a: 66:3b:98:c5:73:ff:fd:6c:e7:a8:21:bb:09:ef:45: 86:6e:21:30:ce:f0:ea:87:a0:54:b4:5b:d6:27:04: 07:ab:33:1f:7f:6a:f8:54:96:70:0b:bc:5e:74:1a: 6d:ec:cc:ff:2b:9d:76:b5:05:79:5e:c3:29:e3:b1: 74:0b:5c:06:de:7c:c8:f2:75:9b:66:31:b3:ca:46: 6c:27:09:29:ca:14:98:60:c2:95:ed:2d:02:f6:db: 9b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B3:86:B4:98:0C:F5:29:2D:FB:50:7E:E8:BA:CD:65:2B:2A:27:DD X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:03:3d:22:a4:16:1d:4a:5e:98:73:c7:6f:49:61:13:98:ba: 3d:09:8d:c6:38:40:6d:fa:bd:0c:a8:a8:74:25:4e:8a:84:a4: 88:09:54:21:4a:22:cb:b0:34:b9:30:dd:fd:45:ca:e4:b2:42: c4:73:6b:cd:fe:c6:3d:55:97:67:31:45:75:6d:57:0e:54:de: a4:d5:ae:d1:d4:d9:45:ce:70:95:71:a6:7f:0c:36:e7:83:46: 96:a3:6e:87:a4:2f:c3:e4:5b:d4:75:9e:fa:df:36:61:83:7c: bd:c7:99:4d:86:71:13:93:82:b7:59:47:23:da:e8:02:e5:b4: dc:22:f8:c5:74:ef:65:71:9d:4e:83:15:e7:17:b4:e3:15:9e: b6:67:8a:e0:14:f7:45:89:ac:13:ac:bf:6f:a4:e5:2b:a0:75: c0:21:f8:06:f1:f1:29:20:84:58:d2:15:93:cf:07:62:03:17: 95:ed:d0:12:7c:e2:0f:2f:b4:86:cf:ad:c3:43:52:f8:69:35: c8:3e:3c:21:ad:da:8d:ab:b8:7a:39:dc:c1:54:d0:c7:4c:03: f0:3e:56:bf:a9:4d:f3:17:96:08:dd:1a:d8:4f:af:4e:4f:60: f7:f8:d4:eb:03:92:be:23:13:95:d0:16:d7:a7:cf:4f:11:7c: 76:01:1b:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUwODA3MDUxODE1WhcNMjUwODE0MDUxODE1WjAYMRYwFAYD VQQDEw02ODk0MzcxNy1lYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ags56+HnkJhBG3wAv+te7S00vYMm/5bELpjbI+I5iobaknK9JvOvv38A/9W tJU9DofDl7lb9+RakUuutHHQ+f9Znv2yrPqtumcelnfRBB0Lt3LyUgYAoAQ261pb e+q6X3+g7GGbrWKtURnhy6Nosr6hM2U5S5m1U4oE2LcjiU+/7QznjAhSxMETVcxH MDeac5YzBIA+Ev9TFRd0wFUv3pw/HXpmO5jFc//9bOeoIbsJ70WGbiEwzvDqh6BU tFvWJwQHqzMff2r4VJZwC7xedBpt7Mz/K512tQV5XsMp47F0C1wG3nzI8nWbZjGz ykZsJwkpyhSYYMKV7S0C9tubrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOizhrSY DPUpLftQfui6zWUrKifdMB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFAz0ipBYdSl6Yc8dvSWETmLo9CY3GOEBt+r0MqKh0JU6KhKSICVQh SiLLsDS5MN39RcrkskLEc2vN/sY9VZdnMUV1bVcOVN6k1a7R1NlFznCVcaZ/DDbn g0aWo26HpC/D5FvUdZ763zZhg3y9x5lNhnETk4K3WUcj2ugC5bTcIvjFdO9lcZ1O gxXnF7TjFZ62Z4rgFPdFiawTrL9vpOUroHXAIfgG8fEpIIRY0hWTzwdiAxeV7dAS fOIPL7SGz63DQ1L4aTXIPjwhrdqNq7h6OdzBVNDHTAPwPla/qU3zF5YI3RrYT69O T2D3+NTrA5K+IxOV0BbXp89PEXx2ARu7 -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:54 2025 by rpki-client