$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: 90sGlmzUEsDqrd5pXZmPij/qfDHkNDGNxYMcxyk7gi4= Subject key identifier: 5C:3B:25:A9:44:7A:33:95:8E:AF:3C:20:8D:DE:21:63:0B:A6:D9:32 Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 07CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 07CA Signing time: Fri 22 Aug 2025 21:17:33 +0000 Manifest this update: Fri 22 Aug 2025 21:17:32 +0000 Manifest next update: Fri 29 Aug 2025 21:17:32 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: Ukhgt0xf16SkIvHypoGhzRBXSZBymCVyFpxIgNNWDsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1998 (0x7ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Aug 22 21:17:32 2025 GMT Not After : Aug 29 21:17:32 2025 GMT Subject: CN=68a8de6c-3fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:75:3a:71:4a:28:e0:ac:45:db:5c:06:ea:4a: 1e:a7:e3:4c:ff:92:61:07:9e:03:3a:a1:7c:f1:6b: 9c:89:e1:d2:5c:15:d3:d0:8a:88:3b:63:02:d2:82: 85:1d:b2:54:d8:cd:36:8e:6c:6c:e6:de:7d:d5:ae: 03:71:7d:07:44:f7:ef:7a:4a:2e:28:d8:c9:b7:c9: e1:c7:f4:2a:d7:a0:28:f3:d6:f6:e9:6f:ad:b6:23: 8e:9b:e8:b5:09:f4:e0:79:22:ef:5b:fb:43:14:ad: 27:e3:e2:a3:f6:88:4f:4b:28:4d:1b:0c:0c:16:d3: 4c:7c:f1:e3:f7:6a:ee:45:7b:b0:e8:c9:21:ff:32: ed:4f:0e:cc:e3:c7:40:ae:36:3d:9f:41:eb:93:36: cf:f6:12:9b:ce:68:f7:59:b3:66:28:b7:5c:67:ef: 19:a5:e6:78:a2:e0:06:c7:e3:40:2d:f2:f9:20:bc: 13:d3:03:3f:ae:da:9c:aa:b8:dc:6c:71:e2:c7:a0: ab:00:a1:fe:70:14:ab:d9:4f:fe:f7:2d:2f:69:de: e1:40:ab:09:7f:85:57:88:9b:a4:ae:ac:4b:55:21: 60:fd:b1:9b:c3:b4:24:06:39:ec:3f:63:c8:1a:e8: 8a:98:95:96:15:fd:6c:38:9b:03:13:a9:15:bb:fb: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3B:25:A9:44:7A:33:95:8E:AF:3C:20:8D:DE:21:63:0B:A6:D9:32 X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:bf:30:20:0e:90:62:df:a1:79:80:61:33:62:45:6a:05:1e: 5e:65:2f:84:8d:0a:3b:09:42:d5:98:ff:73:a4:6d:70:e7:9a: 50:6a:74:0c:b5:df:7a:d4:52:84:ab:83:43:c6:23:c2:62:c7: 1f:9b:7a:2b:2d:4f:e4:0b:74:76:b6:e9:3f:72:4f:9c:52:47: 11:3e:b4:72:92:72:47:77:f2:fe:83:da:15:1f:1d:f3:76:71: b7:69:ff:54:6f:02:ae:48:f2:38:28:99:1a:4f:fa:fb:2b:e8: ab:20:e8:88:21:be:de:aa:e9:89:b3:dc:98:96:d7:31:4d:77: a8:2c:a1:9f:10:e8:9b:d2:bd:1b:67:27:17:23:fb:58:4c:ae: c3:61:5b:87:55:86:bf:9a:ac:38:44:f6:fa:0a:2e:b7:6f:f2: 59:b1:1f:68:a2:0b:dd:a5:34:8e:80:9d:ce:6c:51:a8:ad:f8: b9:4e:e8:85:e9:99:2f:7d:f2:6b:ae:08:6a:d8:1e:11:b9:7b: 6d:17:35:bd:53:ba:5c:2a:21:e6:c4:7f:3a:4c:b5:3d:dc:35: 72:d8:6f:b3:8f:2b:a0:1f:a7:85:66:17:af:cc:c6:5a:ca:41: df:51:2d:07:f2:b2:81:cc:34:0d:0f:b8:90:61:a4:15:a4:8f: c5:4b:22:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjUwODIyMjExNzMyWhcNMjUwODI5MjExNzMyWjAYMRYwFAYD VQQDEw02OGE4ZGU2Yy0zZmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/3U6cUoo4KxF21wG6koep+NM/5JhB54DOqF88WucieHSXBXT0IqIO2MC0oKF HbJU2M02jmxs5t591a4DcX0HRPfvekouKNjJt8nhx/Qq16Ao89b26W+ttiOOm+i1 CfTgeSLvW/tDFK0n4+Kj9ohPSyhNGwwMFtNMfPHj92ruRXuw6Mkh/zLtTw7M48dA rjY9n0HrkzbP9hKbzmj3WbNmKLdcZ+8ZpeZ4ouAGx+NALfL5ILwT0wM/rtqcqrjc bHHix6CrAKH+cBSr2U/+9y0vad7hQKsJf4VXiJukrqxLVSFg/bGbw7QkBjnsP2PI GuiKmJWWFf1sOJsDE6kVu/tsIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw7JalE ejOVjq88II3eIWMLptkyMB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmvzAgDpBi36F5gGEzYkVqBR5eZS+EjQo7CULVmP9zpG1w55pQanQM td961FKEq4NDxiPCYscfm3orLU/kC3R2tuk/ck+cUkcRPrRyknJHd/L+g9oVHx3z dnG3af9UbwKuSPI4KJkaT/r7K+irIOiIIb7equmJs9yYltcxTXeoLKGfEOib0r0b ZycXI/tYTK7DYVuHVYa/mqw4RPb6Ci63b/JZsR9oogvdpTSOgJ3ObFGorfi5TuiF 6ZkvffJrrghq2B4RuXttFzW9U7pcKiHmxH86TLU93DVy2G+zjyugH6eFZhevzMZa ykHfUS0H8rKBzDQND7iQYaQVpI/FSyJ1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:27 2025 by rpki-client