$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft File: HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json) Hash identifier: f2kHODSbnDLVQF4dOl5ye48emo7aPRndB+7kttk38fw= Subject key identifier: D5:F9:8C:05:14:AA:65:AD:93:3A:E8:A1:FF:30:C0:37:3F:53:52:8C Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 Certificate issuer: /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:30:00 +0000 Manifest this update: Sat 23 Aug 2025 06:30:00 +0000 Manifest next update: Sat 30 Aug 2025 06:30:00 +0000 Files and hashes: 1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: BBoUEbkp1R9WVDn3w+zs4a/M+Ng0bJjrr232dUouKKI=) 2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: KqwFgUGGWmZ6w/oc9lE/9i1V2X5VufgZVt2vhykEeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627 Validity Not Before: Aug 23 06:30:00 2025 GMT Not After : Aug 30 06:30:00 2025 GMT Subject: CN=68a95fe8-8fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a2:5f:34:9e:88:0c:5b:98:05:11:ed:d2:a6: 07:d1:2e:01:7f:02:b7:e2:f6:63:9c:ba:5c:d4:6a: 9f:cc:df:67:68:1d:80:d9:31:48:93:04:d5:a3:9d: cc:34:08:31:00:d9:23:ed:9e:7c:04:86:e2:b4:bd: 79:4a:bb:f2:f5:9d:53:e9:12:37:c6:35:24:ca:3a: 60:d8:7a:4f:4f:d8:98:84:d2:2f:86:d9:c3:0c:08: 82:05:8c:0f:1d:78:a2:a3:dd:a0:9d:68:9c:70:c7: 07:04:5c:70:b7:c1:68:e5:fb:44:69:51:b3:63:06: c2:90:b5:d8:1f:f5:fe:8c:a3:36:0f:3d:34:ec:f2: f7:8d:32:6a:8a:65:70:5a:6b:da:79:78:67:91:bc: ef:a8:2e:c7:50:55:d8:8c:5e:aa:ab:bf:36:a9:4d: 49:72:21:83:b5:3e:32:85:d4:7a:81:3f:7e:b7:09: 84:2e:c6:6f:80:b3:88:7b:8c:c3:af:de:9e:0b:8a: d2:5d:c7:37:75:22:42:fb:b6:61:6b:2b:4a:ca:40: 6b:5d:a2:e4:76:51:15:86:a1:a3:1d:17:39:f5:83: 97:0c:d2:b6:c7:de:62:c0:c7:7b:f8:06:69:42:db: b2:14:3b:25:da:c5:69:b0:3c:36:cd:55:20:a1:89: f7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F9:8C:05:14:AA:65:AD:93:3A:E8:A1:FF:30:C0:37:3F:53:52:8C X509v3 Authority Key Identifier: keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:9d:44:1c:49:32:98:64:92:5b:99:d8:da:25:dd:37:fa: 24:9e:8e:c6:2d:a1:97:97:e0:b8:0b:3c:34:83:52:53:7a:01: ac:56:21:bd:1a:74:3c:db:38:5b:9e:6c:b0:1d:d1:b5:93:38: aa:e9:05:c7:a4:9d:9a:26:12:31:06:b7:a5:d2:42:a4:1e:f6: 3c:8c:c5:45:f1:79:d3:fc:0e:56:5d:01:76:ea:0c:23:26:e1: 25:17:6b:85:37:f6:83:05:6e:d2:16:38:1c:f6:01:49:ae:52: 97:2c:c3:48:fe:44:54:3b:cb:30:e1:9e:0f:ba:b6:52:b8:bc: a2:83:e5:3e:d7:c5:a7:82:f5:87:6c:59:ce:c1:11:c2:06:42: 68:1b:6f:76:1f:7b:a2:6a:09:ce:dc:34:66:e0:74:b8:cc:5e: 8c:7a:a6:38:59:42:75:da:57:30:ea:e9:91:9c:84:98:99:ee: a7:15:09:2a:a5:0b:90:d2:e6:a5:67:0f:f6:7c:e1:ce:be:af: a6:3f:e6:f3:4f:d1:60:b5:c0:f8:5e:e8:01:18:d8:3a:85:4f: 19:79:2f:cd:a4:83:51:55:cd:4d:cb:64:8f:52:11:b4:93:5d: 2a:57:59:7c:c5:26:1e:2a:50:59:ab:44:32:01:4e:98:0c:78: 0b:0a:1d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw RDEwMkE2MjcwHhcNMjUwODIzMDYzMDAwWhcNMjUwODMwMDYzMDAwWjAYMRYwFAYD VQQDEw02OGE5NWZlOC04ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qJfNJ6IDFuYBRHt0qYH0S4BfwK34vZjnLpc1GqfzN9naB2A2TFIkwTVo53M NAgxANkj7Z58BIbitL15Srvy9Z1T6RI3xjUkyjpg2HpPT9iYhNIvhtnDDAiCBYwP HXiio92gnWiccMcHBFxwt8Fo5ftEaVGzYwbCkLXYH/X+jKM2Dz007PL3jTJqimVw WmvaeXhnkbzvqC7HUFXYjF6qq782qU1JciGDtT4yhdR6gT9+twmELsZvgLOIe4zD r96eC4rSXcc3dSJC+7ZhaytKykBrXaLkdlEVhqGjHRc59YOXDNK2x95iwMd7+AZp QtuyFDsl2sVpsDw2zVUgoYn31wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNX5jAUU qmWtkzroof8wwDc/U1KMMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK TVFfX1VxMXpsQklORUNwaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq551EHEkymGSSW5nY2iXdN/okno7GLaGXl+C4Czw0g1JTegGsViG9 GnQ82zhbnmywHdG1kziq6QXHpJ2aJhIxBrel0kKkHvY8jMVF8XnT/A5WXQF26gwj JuElF2uFN/aDBW7SFjgc9gFJrlKXLMNI/kRUO8sw4Z4PurZSuLyig+U+18WngvWH bFnOwRHCBkJoG292H3uiagnO3DRm4HS4zF6MeqY4WUJ12lcw6umRnISYme6nFQkq pQuQ0ualZw/2fOHOvq+mP+bzT9FgtcD4XugBGNg6hU8ZeS/NpINRVc1Ny2SPUhG0 k10qV1l8xSYeKlBZq0QyAU6YDHgLCh1F -----END CERTIFICATE-----Generated at Sat Aug 23 12:41:59 2025 by rpki-client