$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: lfLpvSNcRn5H0jT3NBbdPYOlJvlarFkg6QahvVaXO7I= Subject key identifier: 10:6D:42:89:3B:4C:50:BD:22:22:8C:39:66:CD:D6:4E:21:C4:37:87 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:00:12 +0000 Manifest this update: Sat 23 Aug 2025 07:00:12 +0000 Manifest next update: Sat 30 Aug 2025 07:00:12 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: 7uNMyZ0apO/o9ndgJat926qzPVJ/UNiVT/wv6S4UPps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Aug 23 07:00:12 2025 GMT Not After : Aug 30 07:00:12 2025 GMT Subject: CN=68a966fc-f16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:d2:e3:29:8b:d3:42:55:0d:e0:f5:97:9b: 93:93:32:df:56:b3:85:01:fd:d2:71:e0:75:95:61: 75:2b:c8:82:e5:77:88:e2:fb:e2:96:93:83:af:52: c4:b9:2f:dc:ff:e7:5a:66:a3:b6:ac:55:df:c7:af: f0:f1:b7:f6:fe:2c:02:01:30:68:59:c7:f9:8e:b7: fd:6c:09:5c:2e:20:a3:33:22:90:df:48:eb:3a:0a: 56:a0:98:d2:fd:00:0d:9d:76:54:37:13:e5:dc:1d: fd:8e:f7:0d:42:61:9c:9c:5d:8d:62:42:da:58:dc: 7a:96:36:7a:9f:f1:3a:2f:2f:3e:5e:5c:25:6a:2a: 59:a3:f8:5a:2a:bf:15:d0:02:9e:ac:9c:3b:d3:89: 99:6a:87:e0:fc:89:d1:7a:42:cd:17:4e:75:8a:df: a9:60:b4:f3:41:60:6d:c3:c1:a0:9d:f1:68:dd:6e: 05:04:71:ab:78:65:61:2e:3f:9e:f6:2a:ea:0a:1c: 28:76:4b:a5:c0:3d:75:e1:7a:19:5f:94:32:03:79: 31:e7:2d:e1:a7:58:b1:71:99:f0:9c:79:05:e8:e5: 79:b2:9a:4d:23:08:b0:8c:b5:95:ca:e8:4a:74:a8: 77:01:fb:4f:ff:79:6b:9c:53:1e:f4:27:22:e4:2a: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6D:42:89:3B:4C:50:BD:22:22:8C:39:66:CD:D6:4E:21:C4:37:87 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:09:c1:54:bd:0c:7c:71:a3:9b:af:44:f9:b2:0b:13:3e:fa: 2e:18:bd:23:51:3a:66:3f:fb:54:e0:77:1e:c3:bd:a2:fe:1a: 42:9e:2a:87:c1:cf:33:be:ef:80:5c:2f:26:01:db:96:0a:65: 4f:4c:5a:76:b0:c5:41:6d:d8:a7:aa:76:82:33:ef:02:b1:62: 24:21:02:22:ec:10:55:7d:a3:33:97:c6:59:8a:17:4f:e4:ec: 64:5b:07:a0:2f:84:e1:64:e7:52:16:9e:95:aa:2d:3d:94:21: f2:85:42:fe:2b:bd:7b:0c:af:f1:d8:66:68:c4:2d:da:5a:b7: 35:ae:a5:a8:9a:06:36:54:65:ff:31:ef:8a:b5:ff:68:70:41: 06:df:0a:7c:fc:fa:e1:82:fc:6c:af:eb:c0:21:96:0a:c4:dc: 72:9a:a1:00:da:8a:24:b7:af:0a:77:13:e0:e1:44:fe:8d:3f: 77:05:86:83:b1:6e:64:16:56:30:d4:b3:72:b1:87:8b:53:ff: fc:49:ca:64:29:aa:59:fa:6e:63:d3:5d:e5:74:de:2c:2f:c2: 1c:94:2c:62:68:20:d5:d4:79:9b:3b:d6:77:ae:58:25:83:29: 89:20:5f:b8:13:ae:af:5b:cf:2b:a6:90:85:ff:ee:87:65:0c: b4:6d:c1:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoODVDNTY3MjU5MTAzRDlFMjI5MkU2NERCRkI3OUZEMzlC MjU2RkRFNDAeFw0yNTA4MjMwNzAwMTJaFw0yNTA4MzAwNzAwMTJaMBgxFjAUBgNV BAMTDTY4YTk2NmZjLWYxNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3tLjKYvTQlUN4PWXm5OTMt9Ws4UB/dJx4HWVYXUryILld4ji++KWk4OvUsS5 L9z/51pmo7asVd/Hr/Dxt/b+LAIBMGhZx/mOt/1sCVwuIKMzIpDfSOs6ClagmNL9 AA2ddlQ3E+XcHf2O9w1CYZycXY1iQtpY3HqWNnqf8TovLz5eXCVqKlmj+FoqvxXQ Ap6snDvTiZlqh+D8idF6Qs0XTnWK36lgtPNBYG3DwaCd8WjdbgUEcat4ZWEuP572 KuoKHCh2S6XAPXXhehlflDIDeTHnLeGnWLFxmfCceQXo5Xmymk0jCLCMtZXK6Ep0 qHcB+0//eWucUx70JyLkKq4VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEG1CiTtM UL0iIow5Zs3WTiHEN4cwHwYDVR0jBBgwFoAUhcVnJZED2eIpLmTb+3n9ObJW/eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzU4M0ZGQzk0Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19l US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNWbkpaRUQyZUlwTG1UYi0zbjlPYkpXX2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJ cExtVGItM245T2JKV19lUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC4JwVS9DHxxo5uvRPmyCxM++i4YvSNROmY/+1Tgdx7DvaL+GkKeKofB zzO+74BcLyYB25YKZU9MWnawxUFt2KeqdoIz7wKxYiQhAiLsEFV9ozOXxlmKF0/k 7GRbB6AvhOFk51IWnpWqLT2UIfKFQv4rvXsMr/HYZmjELdpatzWupaiaBjZUZf8x 74q1/2hwQQbfCnz8+uGC/Gyv68AhlgrE3HKaoQDaiiS3rwp3E+DhRP6NP3cFhoOx bmQWVjDUs3Kxh4tT//xJymQpqln6bmPTXeV03iwvwhyULGJoINXUeZs71neuWCWD KYkgX7gTrq9bzyumkIX/7odlDLRtwTk= -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:53 2025 by rpki-client