$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: O0YZiswspnbRosLFxFYomubbuutgb/BJdNvTZre0I2U= Subject key identifier: 29:07:04:1B:8C:60:DD:9C:6D:B4:98:BB:93:06:21:35:34:1A:6C:69 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 77 Signing time: Sat 23 Aug 2025 07:00:00 +0000 Manifest this update: Sat 23 Aug 2025 07:00:00 +0000 Manifest next update: Sat 30 Aug 2025 07:00:00 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: nfCwOqnYTlYxWPiTEuKg/yRKjIp0nZNu2gxbWEJlX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Aug 23 07:00:00 2025 GMT Not After : Aug 30 07:00:00 2025 GMT Subject: CN=68a966f0-2ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:c9:a2:77:05:f7:ee:c0:0e:ed:28:c0:f3: 94:ff:4d:9c:61:d3:26:6f:ad:89:c1:62:e5:de:2f: 28:19:c2:37:b9:0a:b4:cc:db:2c:cd:6b:87:02:46: 62:00:f0:7d:7e:76:a6:d1:5e:08:ad:b4:ab:12:ce: 79:ab:0a:3b:d9:32:38:c8:b2:2c:9b:ba:38:d0:d7: f9:72:94:e8:c3:67:2b:81:89:d6:b3:da:76:02:5f: 37:83:d6:6e:8b:5c:f8:8e:8c:02:58:1d:57:2b:b3: 6f:ce:07:61:13:e2:71:ba:8f:77:ac:82:14:c7:c5: 7d:16:7a:a0:03:d5:32:57:6d:85:95:6e:a6:19:a1: 36:9a:de:32:54:bb:54:9b:e6:1b:a0:e8:36:c2:cf: a6:5e:27:11:d7:4b:91:16:ab:7f:8d:9e:1e:76:82: 0d:e2:2b:b0:e6:8c:66:b8:ce:a0:20:45:b5:19:81: 9f:20:68:5f:df:3b:b8:7f:b9:7d:a6:a1:9b:53:36: 19:4a:3c:ce:5e:d8:58:67:fe:a8:1d:9e:1a:c0:32: 61:86:08:f9:14:83:ac:51:a0:a7:bd:f9:ea:df:78: f3:15:e4:09:19:ce:43:40:6a:64:b9:7d:ae:dd:42: 2b:e0:ec:30:64:cb:e8:ad:6c:d0:08:6d:a8:41:79: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:07:04:1B:8C:60:DD:9C:6D:B4:98:BB:93:06:21:35:34:1A:6C:69 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:c1:45:3c:78:a8:bf:f1:98:3f:10:83:45:82:09:de:b8:37: 9a:53:20:21:73:7f:0b:4b:6c:2c:93:1d:1f:d0:f2:54:eb:e8: 69:bf:12:1a:37:09:6a:58:f0:8e:37:59:86:4a:e9:78:a4:52: 5f:fb:73:c3:1f:75:77:25:93:5a:b2:61:8e:de:ac:fe:8f:88: 78:30:9f:16:6c:e0:bd:86:5e:64:02:b6:46:86:14:62:2b:c8: f0:5e:63:40:5e:81:8b:b9:ad:44:23:1f:9b:56:c3:ad:46:3a: 83:03:c2:3e:eb:40:ed:25:e5:69:85:f0:1e:e4:e6:79:de:29: 3e:11:7e:f6:19:f4:72:b5:e9:5f:ef:72:81:6d:71:43:5e:af: f2:a5:c9:2f:fd:22:ee:95:7d:12:95:35:fd:56:fe:05:a6:96: ff:a1:e3:a6:e6:c6:e4:96:28:b7:35:94:96:58:56:ec:8c:fd: f5:ea:5c:95:46:52:61:92:42:ba:c8:1b:3e:53:0a:ed:37:77: 10:ca:95:80:71:b5:4c:83:ba:bf:1c:b0:ad:3a:95:d4:df:ea: 9d:23:ca:d2:55:4f:b1:88:36:10:e0:d2:aa:0b:e1:73:5d:b7: cb:31:cc:55:66:ad:cc:28:ab:92:76:c3:20:fc:43:99:b5:06: cb:e2:cc:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODVDRjExMC8GA1UEBRMoQjNFODYyMkE0MTA2MTlGRDk3MjNGOUQxREJDNTM1N0Ux NUZBN0RDQzAeFw0yNTA4MjMwNzAwMDBaFw0yNTA4MzAwNzAwMDBaMBgxFjAUBgNV BAMTDTY4YTk2NmYwLTJhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDacmidwX37sAO7SjA85T/TZxh0yZvrYnBYuXeLygZwje5CrTM2yzNa4cCRmIA 8H1+dqbRXgittKsSznmrCjvZMjjIsiybujjQ1/lylOjDZyuBidaz2nYCXzeD1m6L XPiOjAJYHVcrs2/OB2ET4nG6j3esghTHxX0WeqAD1TJXbYWVbqYZoTaa3jJUu1Sb 5hug6DbCz6ZeJxHXS5EWq3+Nnh52gg3iK7DmjGa4zqAgRbUZgZ8gaF/fO7h/uX2m oZtTNhlKPM5e2Fhn/qgdnhrAMmGGCPkUg6xRoKe9+erfePMV5AkZzkNAamS5fa7d Qivg7DBky+itbNAIbahBeRmzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKQcEG4xg 3ZxttJi7kwYhNTQabGkwHwYDVR0jBBgwFoAUs+hiKkEGGf2XI/nR28U1fhX6fcww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4NUNGL0YwMDA5Nzc0Q0FF MjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZj dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy1oaUtrRUdHZjJYSV9uUjI4VTFmaFg2ZmN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 NUNGL0YwMDA5Nzc0Q0FFMjExRUZBRjhGMTAxMUM0RjlBRTAyL3MtaGlLa0VHR2Yy WElfblIyOFUxZmhYNmZjdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANHBRTx4qL/xmD8Qg0WCCd64N5pTICFzfwtLbCyTHR/Q8lTr6Gm/Eho3 CWpY8I43WYZK6XikUl/7c8MfdXclk1qyYY7erP6PiHgwnxZs4L2GXmQCtkaGFGIr yPBeY0BegYu5rUQjH5tWw61GOoMDwj7rQO0l5WmF8B7k5nneKT4RfvYZ9HK16V/v coFtcUNer/KlyS/9Iu6VfRKVNf1W/gWmlv+h46bmxuSWKLc1lJZYVuyM/fXqXJVG UmGSQrrIGz5TCu03dxDKlYBxtUyDur8csK06ldTf6p0jytJVT7GINhDg0qoL4XNd t8sxzFVmrcwoq5J2wyD8Q5m1BsvizFU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:04 2025 by rpki-client