$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: 6kJ468jGmCKTz2uycZJaJmHYkJhwrXhGIc5ZocCHHXs= Subject key identifier: 63:D4:32:0E:63:53:4D:70:D6:4B:6A:4B:AE:91:AE:DB:C7:E4:BA:D6 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 1782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 1782 Signing time: Fri 22 Aug 2025 16:41:25 +0000 Manifest this update: Fri 22 Aug 2025 16:41:24 +0000 Manifest next update: Fri 29 Aug 2025 16:41:24 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: prrgU37RSgByndmABQ3waOYXvn6qv6VJ7WhXzixe+RY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6018 (0x1782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Aug 22 16:41:24 2025 GMT Not After : Aug 29 16:41:24 2025 GMT Subject: CN=68a89db5-f5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fa:a7:93:3b:d2:db:2e:2e:d6:f5:c1:b8:8e: 16:42:9f:5b:9b:d1:70:97:0f:cf:ea:dd:45:25:49: 73:69:93:77:8a:8d:e4:4e:bd:79:04:99:4f:f1:c6: a6:16:f1:b6:28:8c:7c:9b:c1:ba:90:c0:71:f1:00: e0:dd:a7:36:84:e7:66:93:6b:e1:1b:0f:22:51:f1: 68:16:45:9a:25:e2:1d:f9:f1:ca:69:9f:28:d7:ec: e6:7d:41:51:27:a6:cf:67:be:0e:59:32:92:dd:c1: 36:5e:bb:12:1c:d4:aa:98:d1:de:7b:d5:3d:6b:10: bf:2d:ba:92:40:da:44:93:9e:65:39:57:a5:da:49: 7d:5b:a2:44:30:37:6b:90:2e:c1:a3:95:d4:39:38: 6d:16:d1:f7:04:bd:24:8a:39:5f:45:a5:e5:22:e0: d9:56:72:aa:dc:be:43:dc:2b:ef:84:85:bc:2a:56: 5c:4d:3f:aa:9e:d0:94:4b:b2:a4:df:71:43:52:34: ee:0d:f1:a6:62:51:27:9f:ef:66:e8:bf:a6:60:dd: e5:0e:94:8f:4a:08:e1:4a:54:92:79:63:7c:82:22: 99:f7:55:ca:95:6d:17:73:dd:36:24:b2:00:ec:8c: d6:ff:36:a3:bd:2d:94:35:2f:8f:20:e2:59:a7:8e: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:32:0E:63:53:4D:70:D6:4B:6A:4B:AE:91:AE:DB:C7:E4:BA:D6 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:49:6f:06:bb:e9:3c:cb:1f:2e:ff:d1:4d:85:23:0a:fb:f7: 77:5b:dd:f5:5c:c7:a5:e1:89:27:35:7c:89:9e:21:5b:22:8f: 10:a2:05:d1:68:14:db:60:74:4d:84:fb:76:6a:73:43:97:ac: 66:f9:f6:f1:eb:0d:fd:d9:da:4d:b5:2d:3e:ec:c2:a2:76:1e: e1:61:8f:eb:24:3f:5b:9e:36:05:4c:85:e5:f5:1b:69:c4:e6: ce:8c:11:a6:50:83:99:73:3d:7e:3a:de:d6:8c:8e:62:ce:b8: e5:11:03:04:fe:ea:0f:3d:c4:94:22:1a:51:40:3e:fb:b9:c3: c1:42:12:d7:76:66:b3:65:9e:27:bc:c3:f7:4c:6b:b1:50:26: f1:40:61:44:df:ed:07:fe:16:3b:0d:96:22:cd:e5:7d:bb:1b: 90:5f:0a:1a:d5:74:b9:bb:ff:3c:02:5d:b1:0f:c5:1d:33:4c: 21:be:23:c6:7b:70:c3:50:33:dd:b0:5a:45:28:2e:f5:a8:0e: 99:fa:bd:3a:06:c7:d3:e8:ef:65:d3:df:1f:7c:80:eb:96:f7: e6:79:f4:60:26:a3:91:c6:ea:08:b2:5e:bc:b0:76:af:a1:91: e9:b6:b5:23:35:ad:6a:fe:a4:db:4c:d0:54:0c:60:3b:45:c8: 88:cb:eb:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjUwODIyMTY0MTI0WhcNMjUwODI5MTY0MTI0WjAYMRYwFAYD VQQDEw02OGE4OWRiNS1mNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PqnkzvS2y4u1vXBuI4WQp9bm9Fwlw/P6t1FJUlzaZN3io3kTr15BJlP8cam FvG2KIx8m8G6kMBx8QDg3ac2hOdmk2vhGw8iUfFoFkWaJeId+fHKaZ8o1+zmfUFR J6bPZ74OWTKS3cE2XrsSHNSqmNHee9U9axC/LbqSQNpEk55lOVel2kl9W6JEMDdr kC7Bo5XUOThtFtH3BL0kijlfRaXlIuDZVnKq3L5D3CvvhIW8KlZcTT+qntCUS7Kk 33FDUjTuDfGmYlEnn+9m6L+mYN3lDpSPSgjhSlSSeWN8giKZ91XKlW0Xc902JLIA 7IzW/zajvS2UNS+PIOJZp45IrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPUMg5j U01w1ktqS66RrtvH5LrWMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPSW8Gu+k8yx8u/9FNhSMK+/d3W931XMel4YknNXyJniFbIo8QogXR aBTbYHRNhPt2anNDl6xm+fbx6w392dpNtS0+7MKidh7hYY/rJD9bnjYFTIXl9Rtp xObOjBGmUIOZcz1+Ot7WjI5izrjlEQME/uoPPcSUIhpRQD77ucPBQhLXdmazZZ4n vMP3TGuxUCbxQGFE3+0H/hY7DZYizeV9uxuQXwoa1XS5u/88Al2xD8UdM0whviPG e3DDUDPdsFpFKC71qA6Z+r06BsfT6O9l098ffIDrlvfmefRgJqORxuoIsl68sHav oZHptrUjNa1q/qTbTNBUDGA7RciIy+tO -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:16 2025 by rpki-client