$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: yJh+vMxPvZLhMzrG/nnpWAw3QN7+EMo0drmhV4V/jFs= Subject key identifier: 99:72:1F:F8:2E:E7:87:72:BC:8D:C5:8A:6E:40:3E:4A:B5:28:30:01 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 74 Signing time: Sat 23 Aug 2025 07:03:44 +0000 Manifest this update: Sat 23 Aug 2025 07:03:44 +0000 Manifest next update: Sat 30 Aug 2025 07:03:44 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: NSdeixMyX46fdhM131yaKa68/bm0Jv5aIulGifo+clw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: Aug 23 07:03:44 2025 GMT Not After : Aug 30 07:03:44 2025 GMT Subject: CN=68a967d0-bfe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:b6:ff:7f:ed:25:73:f4:00:03:3f:3a:6e: e1:24:f0:1f:db:27:ec:8a:f3:9f:dc:33:ac:ba:9a: 23:0e:6b:f4:75:87:cb:9e:46:95:86:95:4b:a0:9c: 4f:d6:c3:c9:bf:98:31:60:75:1f:1c:25:72:42:61: 13:b3:74:f0:02:2a:fd:55:22:09:33:fd:18:67:19: 34:75:a8:87:18:03:f1:1d:a4:7c:cd:28:b9:b7:96: 38:83:35:5b:46:60:90:66:95:16:40:f9:bf:a2:c7: 5d:d5:1e:b2:aa:22:01:ab:55:9e:76:23:61:17:20: ae:c4:36:88:81:f9:e4:41:53:d0:4e:37:e9:97:aa: 1b:7d:31:1d:e2:3c:f9:bc:2e:56:be:c1:9d:ce:b6: fc:12:23:f6:0a:db:01:d5:61:03:57:4b:61:f6:4e: 31:79:2a:ae:12:41:06:19:66:82:16:ce:c9:ab:63: 3b:59:a7:e7:77:c7:27:ee:cd:93:9a:fd:00:36:2e: c0:0d:e1:72:00:ec:4d:64:82:ca:73:aa:cc:81:43: 36:be:d1:d1:a4:6a:ad:7d:72:df:c3:67:60:09:72: d7:92:82:ce:ce:b5:b1:29:ab:08:de:4a:c1:6c:8c: ee:95:ea:73:b7:ea:59:51:56:75:1b:f7:26:c4:55: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:1F:F8:2E:E7:87:72:BC:8D:C5:8A:6E:40:3E:4A:B5:28:30:01 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:33:e3:03:ff:5f:38:58:53:fd:f9:77:1e:bc:2f:75:72:9b: 23:ef:6d:fa:9d:7d:4f:4a:24:ef:cc:ab:f4:ff:2c:29:80:5e: a3:e4:53:8c:d6:38:30:e3:10:d9:db:c6:2e:bd:fc:94:a3:2b: 66:02:e0:0c:a1:6e:21:59:d1:b1:25:1a:5f:93:38:7b:4f:cc: cd:35:2a:af:03:99:8b:a7:6e:61:cc:2b:8d:c2:72:89:72:9f: a8:82:12:f1:4d:b3:ba:2b:c2:2e:2b:f5:77:99:fa:f6:96:0f: e3:17:4b:11:71:fb:f7:ea:0e:50:61:cb:ee:be:ec:16:cc:43: 18:97:fb:40:ba:08:7c:c9:1d:7d:a3:b7:6f:7b:63:b5:23:4a: 20:68:78:c2:77:f8:bf:3f:be:57:cf:a7:df:18:d0:df:cf:51: 7c:22:a8:dd:eb:58:83:c1:19:ad:b1:70:9c:96:aa:d7:0b:5f: 12:88:dc:bb:e2:cf:e9:e6:a6:36:48:7e:5f:ee:bb:2d:52:33: f3:5b:e7:a0:57:39:5f:31:05:4b:a1:4b:05:1a:ca:88:9d:26: 4a:9c:75:6a:d5:1c:db:04:12:c1:91:31:ec:58:86:1a:03:30: 43:ab:a6:d2:18:74:1e:5d:75:fd:cd:52:29:f2:95:5a:37:90: 4e:78:56:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDU3ODExMC8GA1UEBRMoMUU5QjBEMTYzQ0UwQUExMUU5MUQ1NTYwRjVBM0NDNjY5 RTMyOTFFRjAeFw0yNTA4MjMwNzAzNDRaFw0yNTA4MzAwNzAzNDRaMBgxFjAUBgNV BAMTDTY4YTk2N2QwLWJmZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgorb/f+0lc/QAAz86buEk8B/bJ+yK85/cM6y6miMOa/R1h8ueRpWGlUugnE/W w8m/mDFgdR8cJXJCYROzdPACKv1VIgkz/RhnGTR1qIcYA/EdpHzNKLm3ljiDNVtG YJBmlRZA+b+ix13VHrKqIgGrVZ52I2EXIK7ENoiB+eRBU9BON+mXqht9MR3iPPm8 Lla+wZ3OtvwSI/YK2wHVYQNXS2H2TjF5Kq4SQQYZZoIWzsmrYztZp+d3xyfuzZOa /QA2LsAN4XIA7E1kgspzqsyBQza+0dGkaq19ct/DZ2AJcteSgs7OtbEpqwjeSsFs jO6V6nO36llRVnUb9ybEVQNXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmXIf+C7n h3K8jcWKbkA+SrUoMAEwHwYDVR0jBBgwFoAUHpsNFjzgqhHpHVVg9aPMZp4yke8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNTc4LzA5NTMwQThDQ0Yz RDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtl OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSHBzTkZqemdxaEhwSFZWZzlhUE1acDR5a2U4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NTc4LzA5NTMwQThDQ0YzRDExRUY5MTM4MEUxMUM0RjlBRTAyL0hwc05GanpncWhI cEhWVmc5YVBNWnA0eWtlOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0z4wP/XzhYU/35dx68L3VymyPvbfqdfU9KJO/Mq/T/LCmAXqPkU4zW ODDjENnbxi69/JSjK2YC4AyhbiFZ0bElGl+TOHtPzM01Kq8DmYunbmHMK43Ccoly n6iCEvFNs7orwi4r9XeZ+vaWD+MXSxFx+/fqDlBhy+6+7BbMQxiX+0C6CHzJHX2j t297Y7UjSiBoeMJ3+L8/vlfPp98Y0N/PUXwiqN3rWIPBGa2xcJyWqtcLXxKI3Lvi z+nmpjZIfl/uuy1SM/Nb56BXOV8xBUuhSwUayoidJkqcdWrVHNsEEsGRMexYhhoD MEOrptIYdB5ddf3NUinylVo3kE54Vpw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:35 2025 by rpki-client