$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: qUaAbrtrYXiaJoAq+mUjlUoNaXbROibyE3NU8wUlClE= Subject key identifier: 03:E4:10:25:B6:2E:97:72:56:D2:4C:BC:D9:6B:30:C0:A3:8E:1E:CE Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: 91 Signing time: Sat 23 Aug 2025 06:53:44 +0000 Manifest this update: Sat 23 Aug 2025 06:53:43 +0000 Manifest next update: Sat 30 Aug 2025 06:53:43 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: eE70eKzQMLFUPXX8NBEpFjxjCtGDFkFZCSlpWAWtevU=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Aug 23 06:53:43 2025 GMT Not After : Aug 30 06:53:43 2025 GMT Subject: CN=68a96577-8a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:2d:82:ae:51:68:dc:e6:1c:5d:b6:ac:c2: 53:23:20:f8:6e:af:2e:e4:83:0e:a7:4c:f9:f8:17: 46:39:59:78:64:0c:37:4d:ec:c4:fb:1e:dc:14:14: 23:6b:86:60:4d:24:c0:18:04:1b:3e:e1:8c:9d:eb: e0:79:0f:c9:8b:95:87:05:c2:04:a0:94:97:eb:c1: 30:bf:49:dc:a2:b6:7b:3e:9e:0a:4e:fe:5c:71:67: b4:05:dc:be:30:38:e3:54:5e:f8:39:96:eb:02:2d: 00:24:b1:73:3a:b8:8c:80:ee:84:f7:61:ff:c3:15: f4:4a:e6:c2:8d:34:13:4f:14:9d:fa:bf:aa:63:c6: 64:d5:f7:04:83:98:bb:0c:59:86:76:39:84:1e:fd: 7d:e2:84:74:b8:34:0b:61:0b:fc:0b:5e:df:ca:96: 68:4d:da:1e:f2:8a:e1:60:5b:3f:b2:d0:1f:df:87: 85:31:4a:b9:53:c6:2e:5f:5d:0b:fd:f8:e2:28:64: a9:27:57:89:31:0a:52:1e:3e:b1:7b:40:66:cd:26: fd:34:15:11:2e:1e:9c:f3:1f:e0:c3:36:67:af:09: dc:e4:cb:76:57:34:01:91:88:07:48:fd:17:a6:b3: a2:1a:c8:58:94:8b:dc:6e:26:b1:e8:79:be:7d:a7: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E4:10:25:B6:2E:97:72:56:D2:4C:BC:D9:6B:30:C0:A3:8E:1E:CE X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:81:7f:de:85:d1:95:bf:ef:32:84:27:d7:33:17:68:b4:ad: a2:89:0c:c6:25:6d:84:37:39:54:37:4e:e2:96:98:1e:aa:82: c8:04:c7:d7:71:c7:a4:ae:8a:0c:77:27:f1:ee:85:1a:99:44: 77:a4:b0:75:69:b7:af:2a:27:0e:07:3b:26:f6:69:7c:02:eb: b3:4b:ec:4e:26:89:c2:65:85:eb:62:69:b3:d7:98:4a:1a:87: a9:c1:16:c9:0e:54:66:d1:77:1f:e3:aa:b0:a7:42:5c:ff:2b: fe:c3:f9:0c:87:2f:6b:6e:81:3b:59:e2:3d:02:80:94:cc:f2: cc:61:bb:68:cf:d3:83:dd:99:73:13:ec:56:5d:7f:4c:85:cd: f9:14:46:9a:eb:fa:2f:10:ca:ac:aa:c5:65:2e:03:1d:ae:f8: 18:5f:82:c1:2a:8c:2c:9f:97:49:8b:09:e1:1d:a6:47:f6:f4: 95:d1:86:06:be:bf:17:e6:14:bc:fb:1c:ff:3f:8c:a8:80:15: 77:04:86:9d:25:ba:d0:d0:41:28:3f:74:a9:c9:63:8d:51:ed: 53:ca:5d:2f:65:d7:94:47:c3:4f:83:a7:84:73:65:4d:86:f8: fa:5d:78:68:12:fa:cf:4f:8e:be:79:83:6a:ef:23:7e:7c:be: 2a:4c:ab:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjUwODIzMDY1MzQzWhcNMjUwODMwMDY1MzQzWjAYMRYwFAYD VQQDEw02OGE5NjU3Ny04YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sMtgq5RaNzmHF22rMJTIyD4bq8u5IMOp0z5+BdGOVl4ZAw3TezE+x7cFBQj a4ZgTSTAGAQbPuGMnevgeQ/Ji5WHBcIEoJSX68Ewv0ncorZ7Pp4KTv5ccWe0Bdy+ MDjjVF74OZbrAi0AJLFzOriMgO6E92H/wxX0SubCjTQTTxSd+r+qY8Zk1fcEg5i7 DFmGdjmEHv194oR0uDQLYQv8C17fypZoTdoe8orhYFs/stAf34eFMUq5U8YuX10L /fjiKGSpJ1eJMQpSHj6xe0BmzSb9NBURLh6c8x/gwzZnrwnc5Mt2VzQBkYgHSP0X prOiGshYlIvcbiax6Hm+facUKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPkECW2 LpdyVtJMvNlrMMCjjh7OMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/gX/ehdGVv+8yhCfXMxdotK2iiQzGJW2ENzlUN07ilpgeqoLIBMfX ccekrooMdyfx7oUamUR3pLB1abevKicOBzsm9ml8AuuzS+xOJonCZYXrYmmz15hK GoepwRbJDlRm0Xcf46qwp0Jc/yv+w/kMhy9rboE7WeI9AoCUzPLMYbtoz9OD3Zlz E+xWXX9Mhc35FEaa6/ovEMqsqsVlLgMdrvgYX4LBKowsn5dJiwnhHaZH9vSV0YYG vr8X5hS8+xz/P4yogBV3BIadJbrQ0EEoP3SpyWONUe1Tyl0vZdeUR8NPg6eEc2VN hvj6XXhoEvrPT46+eYNq7yN+fL4qTKtS -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:49 2025 by rpki-client