$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: bn7PwrczkyUUTifihz23VVXxTQBmRwvisyWUvVhino0= Subject key identifier: E4:BC:FA:4B:5C:D1:EB:5F:49:E4:AE:83:04:C1:76:50:FC:E3:D1:69 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 066F Signing time: Fri 22 Aug 2025 22:39:28 +0000 Manifest this update: Fri 22 Aug 2025 22:39:28 +0000 Manifest next update: Fri 29 Aug 2025 22:39:28 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: qbgqHTMqEfj405T13J1KPR+fd4mQK6xrMf2ZnVZxHfo=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Aug 22 22:39:28 2025 GMT Not After : Aug 29 22:39:28 2025 GMT Subject: CN=68a8f1a0-d6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:40:ad:b2:4a:42:3a:20:76:60:4b:d5:da: 2a:de:e4:a4:f1:d3:5b:21:d7:d5:bb:68:fd:89:40: 31:6e:78:4b:fb:e6:66:2c:62:63:02:ce:5d:fd:9f: f7:49:e2:96:d8:bb:89:48:0c:ce:94:43:eb:2c:35: 4e:a6:a6:79:ee:25:91:85:a2:5c:dd:37:f0:45:c1: 41:81:65:69:c0:18:89:ef:87:42:2c:6e:0e:28:22: bf:9a:d1:87:90:93:2c:ff:e8:29:8b:7d:b8:38:1a: 6f:90:ee:3c:50:c7:f9:b9:3e:b7:36:d6:f5:b3:b3: 99:b8:7b:17:ef:f5:98:88:5d:d9:b2:f2:f0:02:58: c8:65:06:20:6b:e7:e4:9a:c5:ae:ce:8d:d6:c5:9c: db:ff:af:b2:36:37:e7:b5:5d:aa:c2:d4:a2:6b:4b: 0d:2d:32:5d:bc:3d:d7:52:bb:65:69:2c:e6:56:c4: 22:95:cf:9a:18:b3:54:d5:9e:81:0b:d4:46:da:fd: 8a:da:d3:7b:7b:a9:90:85:df:fe:7d:4f:70:c2:5b: f6:c1:df:95:5b:24:ea:11:e5:d3:cf:df:54:ae:8c: d5:66:87:19:df:73:d9:81:02:89:06:a8:65:e4:fb: 51:05:ec:e1:61:4c:02:de:fc:01:b9:23:ef:53:79: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BC:FA:4B:5C:D1:EB:5F:49:E4:AE:83:04:C1:76:50:FC:E3:D1:69 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:a4:a1:0d:78:f7:45:21:76:26:2c:60:9a:07:89:b1:d5: 1d:76:bb:e8:73:79:d4:df:23:2f:33:e3:fc:6b:38:e9:d5:16: 34:4b:9b:7b:e7:13:e5:91:38:fe:43:f4:bb:9d:8c:52:74:0a: 79:96:d6:01:35:94:de:6a:51:84:ae:1d:3e:b1:4b:24:45:7b: fc:b5:4b:7e:6e:b9:be:81:7f:49:f6:0a:97:46:ea:03:e9:2f: a8:14:78:d9:86:e9:ac:6b:3a:8b:c6:4e:78:4f:95:61:de:41: 13:5b:ba:5b:01:88:a4:c8:13:38:70:d9:d1:88:33:c3:5d:1a: af:f7:67:53:44:2b:41:13:88:09:58:fb:35:f5:f7:ff:40:79: 1a:d3:c5:cb:e9:45:89:b6:c6:34:18:5f:8c:14:f8:c8:33:f2: 5e:41:0d:f1:f4:af:db:55:2a:b4:0f:d6:d8:c7:5d:af:b3:df: 98:bb:23:f5:1a:4d:e4:6a:ae:96:b8:f4:4c:3f:7a:9e:71:47: a8:52:cf:79:2c:41:b7:13:00:7b:86:a9:3d:af:03:ea:b3:39: 17:43:33:5f:e2:36:0e:1c:56:d8:b4:b6:b5:c5:b8:31:57:3b: 4f:a0:47:dc:ba:1b:04:c6:69:48:bf:60:46:c5:82:ed:5b:a2: 94:6f:85:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUwODIyMjIzOTI4WhcNMjUwODI5MjIzOTI4WjAYMRYwFAYD VQQDEw02OGE4ZjFhMC1kNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/9ArbJKQjogdmBL1doq3uSk8dNbIdfVu2j9iUAxbnhL++ZmLGJjAs5d/Z/3 SeKW2LuJSAzOlEPrLDVOpqZ57iWRhaJc3TfwRcFBgWVpwBiJ74dCLG4OKCK/mtGH kJMs/+gpi324OBpvkO48UMf5uT63Ntb1s7OZuHsX7/WYiF3ZsvLwAljIZQYga+fk msWuzo3WxZzb/6+yNjfntV2qwtSia0sNLTJdvD3XUrtlaSzmVsQilc+aGLNU1Z6B C9RG2v2K2tN7e6mQhd/+fU9wwlv2wd+VWyTqEeXTz99UrozVZocZ33PZgQKJBqhl 5PtRBezhYUwC3vwBuSPvU3ldqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS8+ktc 0etfSeSugwTBdlD849FpMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIgKShDXj3RSF2JixgmgeJsdUddrvoc3nU3yMvM+P8azjp1RY0S5t7 5xPlkTj+Q/S7nYxSdAp5ltYBNZTealGErh0+sUskRXv8tUt+brm+gX9J9gqXRuoD 6S+oFHjZhumsazqLxk54T5Vh3kETW7pbAYikyBM4cNnRiDPDXRqv92dTRCtBE4gJ WPs19ff/QHka08XL6UWJtsY0GF+MFPjIM/JeQQ3x9K/bVSq0D9bYx12vs9+YuyP1 Gk3kaq6WuPRMP3qecUeoUs95LEG3EwB7hqk9rwPqszkXQzNf4jYOHFbYtLa1xbgx VztPoEfcuhsExmlIv2BGxYLtW6KUb4UL -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:36 2025 by rpki-client