$ rpki-client -vvf rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft File: HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft (raw, json) Hash identifier: bkWsfZRYxcu1ZJKPQKBBmic7BxGV+bERSL4IkvfaXUc= Subject key identifier: 43:9F:4E:F8:96:82:B4:82:11:8E:BF:E5:3B:15:A1:CE:C1:67:A7:C2 Authority key identifier: 1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 Certificate issuer: /CN=A91D246A/serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Certificate serial: 054C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft Manifest number: 0545 Signing time: Fri 22 Aug 2025 23:40:13 +0000 Manifest this update: Fri 22 Aug 2025 23:40:13 +0000 Manifest next update: Fri 29 Aug 2025 23:40:13 +0000 Files and hashes: 1: HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl (hash: bu1ltYQub2zftY7U8SLa70IUw9odWwQD/1437omEL8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1356 (0x54c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D246A, serialNumber=1C2E99FE61A4FB6FA286735F8E06919836A40FF8 Validity Not Before: Aug 22 23:40:13 2025 GMT Not After : Aug 29 23:40:13 2025 GMT Subject: CN=68a8ffdd-477e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:f5:22:43:4a:57:73:2f:01:3e:5b:93:87: 07:bd:35:c9:f6:a2:df:4e:36:7e:8e:1d:52:b6:80: 8b:92:54:05:b6:fa:d3:6e:13:70:2a:f0:c2:92:4d: 36:02:d9:7e:bd:c3:8c:c7:b7:39:10:a1:98:9d:04: f5:6d:8e:ff:96:2c:8d:2e:58:42:29:b6:84:64:0e: d8:73:cd:88:8a:18:12:0d:0f:80:2b:be:82:79:53: 20:9d:13:b7:fa:73:4b:eb:08:6b:59:07:3e:f7:7c: d4:77:c9:1f:13:92:cc:9b:0d:cf:a4:c6:3f:ee:9c: 7f:a1:96:9f:b3:66:82:6c:00:ec:13:16:7d:2b:7b: 2a:bf:ff:09:3a:33:f0:bd:87:98:50:35:13:9f:5f: e1:6e:bb:8f:1a:1d:d2:81:9f:08:4e:1b:16:bb:d8: 49:92:b4:63:e9:15:8d:cc:6f:cf:af:bc:31:6f:40: 9b:d7:27:0e:7c:cf:bf:55:dd:06:b6:ff:4c:60:fe: fb:56:09:f7:f5:80:db:59:31:02:73:a0:c1:be:17: d9:8e:bc:4f:c5:c3:6c:f6:c6:47:81:16:1d:9e:fe: 22:60:4b:7f:9a:a6:de:a3:b8:a8:fe:f6:a0:5c:f3: fa:03:9f:1c:3a:19:4b:e0:3a:ea:e3:59:ba:cb:c2: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9F:4E:F8:96:82:B4:82:11:8E:BF:E5:3B:15:A1:CE:C1:67:A7:C2 X509v3 Authority Key Identifier: keyid:1C:2E:99:FE:61:A4:FB:6F:A2:86:73:5F:8E:06:91:98:36:A4:0F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC6Z_mGk-2-ihnNfjgaRmDakD_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D246A/69C2D350057111EC94A2EC2CC4F9AE02/HC6Z_mGk-2-ihnNfjgaRmDakD_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3a:e6:d2:c1:3b:16:c6:cc:67:cc:ad:b4:33:f0:f9:fc:1c: 4e:de:fe:57:84:09:0f:e4:c5:92:59:c5:0a:45:b2:5e:19:70: 96:c1:38:62:e0:ba:ad:d2:e7:8c:16:4f:8d:dc:2b:35:fc:20: 38:b2:ae:ff:40:ac:8c:83:61:db:ed:4a:c5:bd:ef:5d:4a:6d: 60:bf:2b:1f:ee:39:2a:c5:d0:65:bc:f9:4a:e6:36:df:7d:67: c2:26:6d:ee:ff:62:64:04:5a:fc:42:c8:77:e8:e4:d4:de:85: 1b:d6:eb:91:0c:ab:82:9e:1e:81:ac:ba:66:7a:ea:e7:f8:47: ce:b9:e1:b3:7a:40:25:52:62:85:85:9d:18:62:75:8c:14:de: 91:55:2a:19:73:db:b4:be:79:bd:b7:57:a7:ac:09:e9:d3:6a: 1c:bf:93:d7:6d:e4:78:3e:2e:fa:69:d3:23:25:bb:48:51:ad: fe:f8:57:62:5d:6d:ae:d5:09:ea:fb:08:c7:be:b3:1f:a5:9b: cb:ee:40:52:c6:67:5e:49:c2:d0:70:00:e7:c6:14:80:9d:a6: 4b:8a:22:23:f5:0b:7f:19:ed:a5:0b:22:10:ae:6b:f8:ae:a7: e2:20:2b:04:44:1d:94:89:17:31:78:26:b9:1d:bc:ef:78:8a: 99:d6:c2:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0NkExMTAvBgNVBAUTKDFDMkU5OUZFNjFBNEZCNkZBMjg2NzM1RjhFMDY5MTk4 MzZBNDBGRjgwHhcNMjUwODIyMjM0MDEzWhcNMjUwODI5MjM0MDEzWjAYMRYwFAYD VQQDEw02OGE4ZmZkZC00NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcb1IkNKV3MvAT5bk4cHvTXJ9qLfTjZ+jh1StoCLklQFtvrTbhNwKvDCkk02 Atl+vcOMx7c5EKGYnQT1bY7/liyNLlhCKbaEZA7Yc82IihgSDQ+AK76CeVMgnRO3 +nNL6whrWQc+93zUd8kfE5LMmw3PpMY/7px/oZafs2aCbADsExZ9K3sqv/8JOjPw vYeYUDUTn1/hbruPGh3SgZ8IThsWu9hJkrRj6RWNzG/Pr7wxb0Cb1ycOfM+/Vd0G tv9MYP77Vgn39YDbWTECc6DBvhfZjrxPxcNs9sZHgRYdnv4iYEt/mqbeo7io/vag XPP6A58cOhlL4Drq41m6y8L5KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOfTviW grSCEY6/5TsVoc7BZ6fCMB8GA1UdIwQYMBaAFBwumf5hpPtvooZzX44GkZg2pA/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQ2QS82OUMyRDM1MDA1 NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0yLWlobk5mamdhUm1EYWtE X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDNlpfbUdrLTItaWhuTmZqZ2FSbURha0RfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjQ2QS82OUMyRDM1MDA1NzExMUVDOTRBMkVDMkNDNEY5QUUwMi9IQzZaX21Hay0y LWlobk5mamdhUm1EYWtEX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjOubSwTsWxsxnzK20M/D5/BxO3v5XhAkP5MWSWcUKRbJeGXCWwThi 4Lqt0ueMFk+N3Cs1/CA4sq7/QKyMg2Hb7UrFve9dSm1gvysf7jkqxdBlvPlK5jbf fWfCJm3u/2JkBFr8Qsh36OTU3oUb1uuRDKuCnh6BrLpmeurn+EfOueGzekAlUmKF hZ0YYnWMFN6RVSoZc9u0vnm9t1enrAnp02ocv5PXbeR4Pi76adMjJbtIUa3++Fdi XW2u1Qnq+wjHvrMfpZvL7kBSxmdeScLQcADnxhSAnaZLiiIj9Qt/Ge2lCyIQrmv4 rqfiICsERB2UiRcxeCa5HbzveIqZ1sJY -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:42 2025 by rpki-client