$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft File: HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json) Hash identifier: /+G6Eu9fh/Qv5m4skFOv3rnSnmJmz3RYyOY14jKp0e4= Subject key identifier: EA:E6:EA:30:73:B0:20:3E:BF:66:2A:FE:47:08:37:64:5C:DA:5E:FA Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 Certificate issuer: /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft Manifest number: 59 Signing time: Sat 23 Aug 2025 07:26:36 +0000 Manifest this update: Sat 23 Aug 2025 07:26:35 +0000 Manifest next update: Sat 30 Aug 2025 07:26:35 +0000 Files and hashes: 1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: 8chnPXNGdhb0nGqoyjfQtHB5egaaJBfG8yKUDT+pQHo=) 2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: 0M63JvIdFfuu35AAppLF2AY+BsaEXFTD4uLQ+gUHRuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508 Validity Not Before: Aug 23 07:26:35 2025 GMT Not After : Aug 30 07:26:35 2025 GMT Subject: CN=68a96d2c-2f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:c2:83:13:63:f8:8e:f9:cd:83:dc:03:86: 77:0b:fe:98:7c:bc:df:67:7c:13:b0:03:69:f5:12: 77:cb:88:4e:fe:5b:62:fc:bb:96:e0:05:6d:44:bc: 65:f3:da:34:e7:78:50:bf:db:89:0e:d0:98:9b:3e: cf:78:f8:e9:52:9a:f8:35:fc:e9:8d:cd:9a:00:2d: 9e:a6:d6:cc:9a:f2:35:de:dd:ca:89:c7:8f:f1:5b: 29:92:46:55:29:e6:87:20:b6:07:ef:c2:33:71:fb: 74:3c:9e:33:da:35:52:ca:a6:4f:86:93:a9:7e:cd: 90:ec:79:10:fe:5c:96:98:77:af:0b:17:d0:c5:e0: 0c:4b:e8:04:21:4a:61:3d:a6:6f:a0:7e:66:5f:e3: 23:96:7f:36:98:6f:be:16:86:26:64:cb:7f:93:88: e4:b3:47:4f:a5:29:55:dd:ce:fc:28:7a:68:ef:ea: 70:8e:7b:d6:0c:b2:4e:4b:f9:46:5a:7a:57:9c:35: 73:9f:3f:3c:4e:95:a1:31:19:91:1f:0d:1d:6a:f7: c0:e9:47:b9:4d:11:89:f2:53:67:b0:31:5d:0d:a6: 0c:5c:9f:f1:4d:5e:08:1f:aa:27:62:90:48:fd:16: e2:5c:80:c2:db:ad:17:d1:fd:47:5b:b4:74:ea:a8: ab:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E6:EA:30:73:B0:20:3E:BF:66:2A:FE:47:08:37:64:5C:DA:5E:FA X509v3 Authority Key Identifier: keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c8:90:88:c2:82:5c:c6:64:6f:2e:ea:ae:22:b8:87:d3:ce: ee:b9:a1:d6:cc:fe:36:26:7f:64:ec:d3:21:e4:43:a0:8a:2f: ea:94:65:ae:75:bf:4d:8e:2a:3e:79:eb:94:9c:ae:7a:08:24: a4:17:b8:5b:a6:0b:e0:dd:d4:14:35:fa:69:5c:4c:a4:95:0d: fc:2b:48:ac:f7:f4:5e:f7:38:b5:45:39:7b:a8:17:83:33:16: 9d:f2:6c:e6:13:4a:88:8e:5a:80:99:c5:78:4d:b6:f2:1f:cc: ab:d6:f8:01:02:ba:32:66:95:0b:b3:1e:45:c9:6f:15:9a:76: 83:d2:f1:ea:d0:d2:9a:9b:c8:d0:f3:05:1f:63:18:ee:3c:17: 2b:ac:61:84:6b:45:e0:f6:78:12:4d:17:02:3d:65:db:a5:ae: fb:50:cf:9d:60:67:d5:be:21:a2:83:2f:87:be:c6:ca:e4:c4: 4b:3b:17:68:f2:1b:96:5f:e5:ee:4f:5b:d8:ba:04:3d:ee:b4: e9:4c:53:00:8a:a5:4c:23:f1:96:91:3f:07:44:8a:49:15:f0: e3:54:e2:2a:58:34:03:ce:f7:88:d8:d0:d5:61:b0:1b:07:93: b8:8f:28:eb:25:49:a5:02:74:ba:bb:7a:02:94:94:d7:6c:19: ea:e0:d8:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjA2NjExMC8GA1UEBRMoMUQ0RUM0MjUzMzEzQjYyQzQ4NDQ5MTZCODVEQzBGRkU0 QjA3RDUwODAeFw0yNTA4MjMwNzI2MzVaFw0yNTA4MzAwNzI2MzVaMBgxFjAUBgNV BAMTDTY4YTk2ZDJjLTJmMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/KsKDE2P4jvnNg9wDhncL/ph8vN9nfBOwA2n1EnfLiE7+W2L8u5bgBW1EvGXz 2jTneFC/24kO0JibPs94+OlSmvg1/OmNzZoALZ6m1sya8jXe3cqJx4/xWymSRlUp 5ocgtgfvwjNx+3Q8njPaNVLKpk+Gk6l+zZDseRD+XJaYd68LF9DF4AxL6AQhSmE9 pm+gfmZf4yOWfzaYb74WhiZky3+TiOSzR0+lKVXdzvwoemjv6nCOe9YMsk5L+UZa elecNXOfPzxOlaExGZEfDR1q98DpR7lNEYnyU2ewMV0Npgxcn/FNXggfqidikEj9 FuJcgMLbrRfR/UdbtHTqqKvPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6ubqMHOw ID6/Zir+Rwg3ZFzaXvowHwYDVR0jBBgwFoAUHU7EJTMTtixIRJFrhdwP/ksH1Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MDY2LzY0OEE4ODMyRkI2 NDExRUZCQzlCMzUyOUM0RjlBRTAyL0hVN0VKVE1UdGl4SVJKRnJoZHdQX2tzSDFR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFU3RUpUTVR0aXhJUkpGcmhkd1Bfa3NIMVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MDY2LzY0OEE4ODMyRkI2NDExRUZCQzlCMzUyOUM0RjlBRTAyL0hVN0VKVE1UdGl4 SVJKRnJoZHdQX2tzSDFRZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7IkIjCglzGZG8u6q4iuIfTzu65odbM/jYmf2Ts0yHkQ6CKL+qUZa51 v02OKj5565ScrnoIJKQXuFumC+Dd1BQ1+mlcTKSVDfwrSKz39F73OLVFOXuoF4Mz Fp3ybOYTSoiOWoCZxXhNtvIfzKvW+AECujJmlQuzHkXJbxWadoPS8erQ0pqbyNDz BR9jGO48FyusYYRrReD2eBJNFwI9ZdulrvtQz51gZ9W+IaKDL4e+xsrkxEs7F2jy G5Zf5e5PW9i6BD3utOlMUwCKpUwj8ZaRPwdEikkV8ONU4ipYNAPO94jY0NVhsBsH k7iPKOslSaUCdLq7egKUlNdsGerg2CQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:41 2025 by rpki-client