$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: 83sjkX/1eEYRXnO73d2xYhxYs0hgodlIgKLkFqJtZZw= Subject key identifier: C2:1D:C7:AC:3B:1C:32:83:D9:81:47:EC:43:EC:9F:D9:73:78:9D:75 Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 54 Signing time: Sat 23 Aug 2025 07:29:34 +0000 Manifest this update: Sat 23 Aug 2025 07:29:34 +0000 Manifest next update: Sat 30 Aug 2025 07:29:34 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: qsDt44J07+7/UrmBebdZD2mGnkDF9ZU6lKdtpARwuNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Aug 23 07:29:34 2025 GMT Not After : Aug 30 07:29:34 2025 GMT Subject: CN=68a96dde-16b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:6f:78:37:f4:3d:7b:ba:1e:7d:9f:01:81: 7c:3d:88:5e:6c:e7:13:e8:2f:54:2f:7e:97:54:e0: 13:13:a1:34:4c:d0:ad:a1:f8:a4:90:86:fd:e0:e7: 19:6d:a8:40:3b:22:da:4d:62:1c:49:ec:22:e6:36: b1:fc:6b:29:a0:50:57:ef:71:b5:f0:eb:8f:8c:16: ff:93:48:5d:14:a3:c0:13:91:36:32:79:e6:77:dd: b8:b9:e4:06:f3:67:7a:ce:85:1c:cf:e4:5f:36:af: 20:ba:7f:02:a2:48:bf:3b:b5:82:27:b5:f4:16:39: ea:aa:27:16:9c:dc:c8:4c:38:93:86:b6:36:2b:a0: 6a:36:41:e6:53:be:23:6a:e9:4c:a5:f6:a4:48:1b: 7d:89:e3:54:ae:45:46:ad:3f:e8:1b:1a:b0:8c:6d: d1:ef:cd:7e:86:23:9a:8e:c6:72:59:af:12:33:2a: ba:99:9c:db:fb:1b:4f:ec:29:10:5b:ef:74:32:f9: 17:31:34:a0:b6:38:08:89:d7:74:b7:4b:e8:ca:b7: 0a:1b:e7:d3:bc:93:d9:64:38:35:9c:96:bb:4b:12: c5:1d:8a:c7:17:f2:87:24:b5:aa:c6:45:e0:3d:c4: 11:7c:06:82:b3:7f:bb:58:62:9b:a7:1b:2d:81:5d: d1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1D:C7:AC:3B:1C:32:83:D9:81:47:EC:43:EC:9F:D9:73:78:9D:75 X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:35:4d:6d:8d:5e:34:49:e9:48:66:8c:e7:6b:c5:c8:5f:4e: c3:8c:78:70:ec:7b:5a:18:b3:d6:79:f3:7a:b6:fc:95:87:c3: 24:7d:c2:51:6d:00:86:cd:7f:63:1b:07:21:62:f1:a7:df:d1: 44:c4:f9:f8:83:af:82:18:ad:32:11:e0:96:94:ca:1b:08:d1: ed:c3:a9:23:fa:8f:9a:82:48:5f:e7:db:3a:9f:82:0f:68:aa: 73:76:f2:ea:b6:05:f9:4e:3b:3c:02:18:f5:fa:f2:02:b3:12: 7d:ae:21:e0:8a:15:35:04:04:05:1b:99:4d:67:f0:6a:8d:67: 59:4b:6a:af:fc:fa:06:35:d5:52:09:a4:19:67:84:e3:d4:b5: c5:a6:1c:e1:1f:8f:eb:bc:0c:db:74:b4:d6:e1:07:82:ce:fc: 65:3f:70:bd:bc:7c:39:52:3a:9a:c5:be:62:a9:dd:46:de:2f: 70:01:e6:08:60:d1:6b:2e:bd:68:c4:17:37:7c:d6:9e:55:61: 83:12:8a:30:48:17:f5:90:ea:c2:d3:00:6b:a0:28:67:f6:27: 9d:ee:fc:81:b2:4f:03:25:68:d2:86:a2:45:99:bf:c3:d7:23: 2a:64:70:cc:7f:81:f0:49:7c:bd:2a:1a:46:25:3b:08:4e:78: be:d7:66:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDdEMDExMC8GA1UEBRMoMUQ2MzQxNkM0NzNCMEMwOTEyQkRBQjM3MTAyNzAxMDk1 RkM2QzM1QTAeFw0yNTA4MjMwNzI5MzRaFw0yNTA4MzAwNzI5MzRaMBgxFjAUBgNV BAMTDTY4YTk2ZGRlLTE2YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNUW94N/Q9e7oefZ8BgXw9iF5s5xPoL1QvfpdU4BMToTRM0K2h+KSQhv3g5xlt qEA7ItpNYhxJ7CLmNrH8aymgUFfvcbXw64+MFv+TSF0Uo8ATkTYyeeZ33bi55Abz Z3rOhRzP5F82ryC6fwKiSL87tYIntfQWOeqqJxac3MhMOJOGtjYroGo2QeZTviNq 6Uyl9qRIG32J41SuRUatP+gbGrCMbdHvzX6GI5qOxnJZrxIzKrqZnNv7G0/sKRBb 73Qy+RcxNKC2OAiJ13S3S+jKtwob59O8k9lkODWclrtLEsUdiscX8ocktarGReA9 xBF8BoKzf7tYYpunGy2BXdGLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwh3HrDsc MoPZgUfsQ+yf2XN4nXUwHwYDVR0jBBgwFoAUHWNBbEc7DAkSvas3ECcBCV/Gw1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwN0QwLzY1QjY4RTk2MDA3 MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFdOQmJFYzdEQWtTdmFzM0VDY0JDVl9HdzFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw N0QwLzY1QjY4RTk2MDA3MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFr U3ZhczNFQ2NCQ1ZfR3cxby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL81TW2NXjRJ6UhmjOdrxchfTsOMeHDse1oYs9Z583q2/JWHwyR9wlFt AIbNf2MbByFi8aff0UTE+fiDr4IYrTIR4JaUyhsI0e3DqSP6j5qCSF/n2zqfgg9o qnN28uq2BflOOzwCGPX68gKzEn2uIeCKFTUEBAUbmU1n8GqNZ1lLaq/8+gY11VIJ pBlnhOPUtcWmHOEfj+u8DNt0tNbhB4LO/GU/cL28fDlSOprFvmKp3UbeL3AB5ghg 0WsuvWjEFzd81p5VYYMSijBIF/WQ6sLTAGugKGf2J53u/IGyTwMlaNKGokWZv8PX IypkcMx/gfBJfL0qGkYlOwhOeL7XZjM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:18:08 2025 by rpki-client