$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: 2eqlgQoBlTBz2d172UEH7pMnGnlP0fuMxswrqiirn5w= Subject key identifier: BD:EF:28:7A:F0:94:12:B4:EA:9B:AD:8E:BD:44:BA:AF:2F:4D:57:64 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: FC Signing time: Sat 23 Aug 2025 01:09:37 +0000 Manifest this update: Sat 23 Aug 2025 01:09:36 +0000 Manifest next update: Sat 30 Aug 2025 01:09:36 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: are5JFvV6+ZA2dIvGGf5cKeKyF6YbwsCWb9RlyYyGWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Aug 23 01:09:36 2025 GMT Not After : Aug 30 01:09:36 2025 GMT Subject: CN=68a914d0-9752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:a0:88:78:b7:11:b6:51:e4:5a:81:4d:53: dc:0a:4a:e9:4f:2a:53:f0:81:18:6b:e2:d5:50:7a: 04:80:3e:ac:bc:53:a1:b2:63:7a:50:2e:a2:73:99: 09:60:47:d9:f6:48:8b:32:3a:47:2c:f0:19:91:1c: 67:b2:3f:5d:74:a4:52:eb:1d:40:71:d3:11:7d:48: 6e:ba:6a:b1:bc:73:14:0b:72:e5:84:b8:fe:f9:c7: 27:30:de:00:2f:3a:61:dd:19:85:89:a2:72:e2:8a: 33:18:07:60:65:3e:5c:be:fc:5e:51:b7:d0:38:b7: a2:4e:57:25:ec:6c:3b:fd:84:42:86:85:7b:bb:7b: b2:b7:ac:d9:99:40:76:84:93:41:ff:4e:db:8b:b0: 71:49:23:9c:ce:aa:ed:82:a0:8c:4c:e2:34:ad:fc: bf:08:d1:42:f7:ba:f4:5c:76:d0:b9:9e:2b:54:82: 4b:c9:9d:23:7d:a0:cf:31:77:91:50:d1:e2:5b:99: 7d:b2:d6:43:9c:1e:13:78:f5:24:f1:fb:74:df:a2: 82:17:9f:31:28:63:6d:27:fc:73:cb:bf:20:36:74: 23:d9:84:57:c9:3e:ca:fa:d4:0f:a8:5a:77:d0:1b: 3c:48:28:17:8d:17:83:4f:a6:c6:7f:11:9c:04:09: f5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EF:28:7A:F0:94:12:B4:EA:9B:AD:8E:BD:44:BA:AF:2F:4D:57:64 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:bc:7b:4e:eb:96:d4:d4:98:07:ed:79:dd:f0:45:b1:af:d0: 2d:29:87:12:a5:50:1b:a8:e7:9b:36:fa:ac:e5:f4:f9:c9:7a: 15:7d:85:33:0f:43:96:2f:1a:72:4e:e1:28:7b:8a:23:8f:4c: 47:9b:fb:4b:da:e2:be:28:c1:c1:41:f4:75:a9:4f:95:0a:b6: 91:2b:a4:46:37:0b:26:af:ca:00:5b:05:68:e3:d6:2d:5d:81: ee:d8:78:8d:0b:f1:43:83:d1:c4:0f:08:1f:bd:87:0d:2a:9c: dc:1b:14:80:fb:ac:71:e8:34:85:53:09:96:c0:a7:36:f1:0b: 02:58:92:3a:6e:4b:9e:5c:5d:d6:9a:8b:ab:22:f8:b7:d8:d0: a4:67:dd:d7:9d:cd:88:ab:b5:92:d2:7d:6d:d9:05:51:f1:19: cb:2e:ad:fc:2d:9e:8c:a2:02:9c:7c:8f:bd:00:e3:62:23:1b: 11:59:fd:b3:16:4c:12:0a:16:f1:b5:39:16:83:66:ee:43:64: ec:6b:f7:1d:83:df:43:14:e4:8b:55:5d:8e:a4:07:a1:35:7a: c4:b1:35:6b:b8:44:36:0a:aa:10:7f:b0:58:9b:a7:26:ee:f8: f5:cf:52:95:66:ab:b1:37:78:95:22:67:33:c9:eb:82:fe:08: 76:b5:80:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUwODIzMDEwOTM2WhcNMjUwODMwMDEwOTM2WjAYMRYwFAYD VQQDEw02OGE5MTRkMC05NzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JmgiHi3EbZR5FqBTVPcCkrpTypT8IEYa+LVUHoEgD6svFOhsmN6UC6ic5kJ YEfZ9kiLMjpHLPAZkRxnsj9ddKRS6x1AcdMRfUhuumqxvHMUC3LlhLj++ccnMN4A Lzph3RmFiaJy4oozGAdgZT5cvvxeUbfQOLeiTlcl7Gw7/YRChoV7u3uyt6zZmUB2 hJNB/07bi7BxSSOczqrtgqCMTOI0rfy/CNFC97r0XHbQuZ4rVIJLyZ0jfaDPMXeR UNHiW5l9stZDnB4TePUk8ft036KCF58xKGNtJ/xzy78gNnQj2YRXyT7K+tQPqFp3 0Bs8SCgXjReDT6bGfxGcBAn1FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3vKHrw lBK06putjr1Euq8vTVdkMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFvHtO65bU1JgH7Xnd8EWxr9AtKYcSpVAbqOebNvqs5fT5yXoVfYUz D0OWLxpyTuEoe4ojj0xHm/tL2uK+KMHBQfR1qU+VCraRK6RGNwsmr8oAWwVo49Yt XYHu2HiNC/FDg9HEDwgfvYcNKpzcGxSA+6xx6DSFUwmWwKc28QsCWJI6bkueXF3W mourIvi32NCkZ93Xnc2Iq7WS0n1t2QVR8RnLLq38LZ6MogKcfI+9AONiIxsRWf2z FkwSChbxtTkWg2buQ2Tsa/cdg99DFOSLVV2OpAehNXrEsTVruEQ2CqoQf7BYm6cm 7vj1z1KVZquxN3iVImczyeuC/gh2tYBX -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:17 2025 by rpki-client