$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: wT219Qs83Ok02vjKzuUAUR5Yh5swwjseDeHakevawRQ= Subject key identifier: 42:76:4A:06:D2:45:9A:20:A2:D4:DD:1F:64:89:EC:2C:0D:A4:D2:75 Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 71 Signing time: Sun 19 Oct 2025 10:13:55 +0000 Manifest this update: Sun 19 Oct 2025 10:13:54 +0000 Manifest next update: Sun 26 Oct 2025 10:13:54 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: OMKMTdpOCqkYur091lYrH+TxqcBhapG474qziBazvbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Oct 19 10:13:54 2025 GMT Not After : Oct 26 10:13:54 2025 GMT Subject: CN=68f4b9e3-4d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:ad:9b:e4:5f:2a:2c:2a:e8:71:ea:c4:aa: 18:e1:5d:73:9e:7e:83:30:48:14:9c:13:22:40:aa: 78:1c:e4:8f:9c:4b:1e:12:da:cd:6a:f9:bb:56:1a: e7:b7:28:3f:81:af:67:39:87:9c:cb:32:21:0c:c5: 6e:98:9c:c8:84:4a:27:98:b7:28:6b:e6:5c:18:12: 27:a3:bb:be:8b:93:92:04:74:98:1a:05:8a:7e:6d: 64:88:c7:62:3e:22:28:b4:f7:ea:2d:cc:33:7c:c3: c5:c8:4d:05:e3:58:0e:a2:59:6a:8a:dc:f3:91:55: 18:79:d8:7e:2e:ed:5d:86:72:78:6f:c4:56:28:cb: e2:29:03:df:a2:b5:7a:83:d7:b5:f1:ed:51:9a:57: 07:34:4b:3b:50:fe:71:3b:b2:b1:09:87:e1:67:03: c9:03:ef:b6:67:19:73:0c:92:80:07:27:98:66:f4: cd:4e:14:31:ee:6e:83:49:9e:3e:86:2c:26:6a:8b: 30:41:23:bd:13:01:1e:96:2e:06:dd:2d:aa:eb:0e: 1e:bc:79:24:a9:8f:a9:7e:df:73:0f:32:58:94:df: 3e:89:aa:f9:44:87:b2:a6:7d:ed:f6:38:92:84:e0: fd:f9:35:fc:ee:e9:95:3e:d0:8f:eb:4e:e1:ee:1e: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:76:4A:06:D2:45:9A:20:A2:D4:DD:1F:64:89:EC:2C:0D:A4:D2:75 X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f0:4d:49:c8:6e:39:84:c7:b7:92:2b:b6:46:d9:d2:b3:3f: 94:ce:2e:76:1b:6c:dc:86:de:4c:7d:21:7d:8b:56:b2:0a:cb: 99:02:38:38:9a:99:a1:be:50:b2:82:ec:16:fa:3f:4b:bd:16: 52:29:1d:1c:53:83:5c:b0:71:f8:9a:da:53:55:d4:9a:75:97: 13:27:9d:3f:a6:e8:4b:40:3e:b6:61:8c:28:41:ee:f2:c6:bc: 3c:34:35:a2:eb:0a:ed:b6:bf:05:2f:54:e0:13:07:4b:d7:9a: d7:66:d6:85:92:74:58:26:17:58:fc:ff:50:a5:33:90:41:5c: 47:dc:5a:6a:dd:5d:72:3e:fe:c0:25:0b:ea:bb:f8:e9:4c:18: b9:85:e5:3d:27:1f:3e:76:c0:0e:a9:14:b5:42:38:9a:9c:0c: 0f:51:57:3b:4d:9b:96:66:48:c0:c5:b9:2d:20:4a:86:6d:99: 97:a6:4b:81:ed:7d:9c:ea:e5:3d:27:27:50:f9:d5:e4:2b:10: 88:bf:c6:ea:06:c6:e2:34:b2:02:b1:ab:19:8b:11:20:24:37: f9:3d:82:48:9f:b2:ea:8a:28:3b:1a:ec:e9:28:73:51:67:5f: 00:4c:3b:d8:52:b7:63:a2:bf:de:09:8f:12:ea:3d:a9:44:a0: 0e:bb:c2:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDdEMDExMC8GA1UEBRMoMUQ2MzQxNkM0NzNCMEMwOTEyQkRBQjM3MTAyNzAxMDk1 RkM2QzM1QTAeFw0yNTEwMTkxMDEzNTRaFw0yNTEwMjYxMDEzNTRaMBgxFjAUBgNV BAMTDTY4ZjRiOWUzLTRkMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdHq2b5F8qLCrocerEqhjhXXOefoMwSBScEyJAqngc5I+cSx4S2s1q+btWGue3 KD+Br2c5h5zLMiEMxW6YnMiESieYtyhr5lwYEieju76Lk5IEdJgaBYp+bWSIx2I+ Iii09+otzDN8w8XITQXjWA6iWWqK3PORVRh52H4u7V2GcnhvxFYoy+IpA9+itXqD 17Xx7VGaVwc0SztQ/nE7srEJh+FnA8kD77ZnGXMMkoAHJ5hm9M1OFDHuboNJnj6G LCZqizBBI70TAR6WLgbdLarrDh68eSSpj6l+33MPMliU3z6JqvlEh7Kmfe32OJKE 4P35Nfzu6ZU+0I/rTuHuHkRjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQnZKBtJF miCi1N0fZInsLA2k0nUwHwYDVR0jBBgwFoAUHWNBbEc7DAkSvas3ECcBCV/Gw1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwN0QwLzY1QjY4RTk2MDA3 MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFdOQmJFYzdEQWtTdmFzM0VDY0JDVl9HdzFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw N0QwLzY1QjY4RTk2MDA3MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFr U3ZhczNFQ2NCQ1ZfR3cxby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA7wTUnIbjmEx7eSK7ZG2dKzP5TOLnYbbNyG3kx9IX2LVrIKy5kCODia maG+ULKC7Bb6P0u9FlIpHRxTg1ywcfia2lNV1Jp1lxMnnT+m6EtAPrZhjChB7vLG vDw0NaLrCu22vwUvVOATB0vXmtdm1oWSdFgmF1j8/1ClM5BBXEfcWmrdXXI+/sAl C+q7+OlMGLmF5T0nHz52wA6pFLVCOJqcDA9RVztNm5ZmSMDFuS0gSoZtmZemS4Ht fZzq5T0nJ1D51eQrEIi/xuoGxuI0sgKxqxmLESAkN/k9gkifsuqKKDsa7Okoc1Fn XwBMO9hSt2Oiv94JjxLqPalEoA67wrg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:06:17 2025 by rpki-client