$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: +f2RlIcNTZk3klNdNdI2S+5gjO9Y+Fq9Qn0RW5n7Ir8= Subject key identifier: FC:D3:ED:A2:6F:D6:4A:5A:B1:58:50:AC:40:CC:0A:F5:1B:12:54:67 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 0455 Signing time: Sat 23 Aug 2025 00:27:58 +0000 Manifest this update: Sat 23 Aug 2025 00:27:57 +0000 Manifest next update: Sat 30 Aug 2025 00:27:57 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: x59oo5ZJuJk9Sa0EDdqnMalhQ9FzNuH3pwHHo4UTu/o=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Aug 23 00:27:57 2025 GMT Not After : Aug 30 00:27:57 2025 GMT Subject: CN=68a90b0d-2d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:e8:aa:e8:30:ea:a6:66:dd:df:6e:c9:8a: 64:5e:a6:95:4f:d4:b8:38:96:13:3c:24:9d:27:e8: 10:29:2a:9b:a0:27:65:05:6a:db:38:98:e9:76:27: fb:37:3b:43:c1:73:c3:75:c9:bf:a4:45:0f:84:b3: e5:06:a2:3b:8b:28:63:58:2e:c5:99:4a:e9:63:ff: 27:e6:83:f2:10:fb:5d:e3:0d:15:79:d8:86:13:bc: 54:02:a5:7b:66:79:33:10:7f:f4:a6:79:4e:e7:69: 08:c0:90:34:4a:37:12:d0:fa:29:9c:37:34:f3:71: 06:9a:4b:d3:5d:d6:8f:68:ed:7b:6e:73:1c:06:4a: c4:30:b7:a3:0e:04:5a:83:aa:9b:58:73:82:7f:5b: ae:22:71:fc:76:9b:72:3c:7c:12:83:c4:f6:81:2f: e7:d4:28:92:bb:88:16:81:43:ad:37:0f:32:b6:44: 1f:f2:72:db:b9:60:bf:0f:f2:2e:0f:3b:05:4e:34: aa:34:ee:42:19:de:f6:2c:d4:0d:72:38:86:1a:52: 83:8e:32:28:a9:b7:57:da:b9:26:8e:0d:52:09:c9: c0:57:0b:46:47:ff:54:c8:9e:1f:fe:fd:43:fe:7f: 73:47:1b:1d:6a:75:59:99:d9:24:7b:8c:82:58:db: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:ED:A2:6F:D6:4A:5A:B1:58:50:AC:40:CC:0A:F5:1B:12:54:67 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b9:b4:3c:02:05:39:e4:dc:bb:bf:0f:2f:05:7d:4a:99:06: dc:54:13:7f:86:e4:84:ad:6f:97:35:ef:45:61:01:f0:9b:ff: 17:b6:38:ab:c2:0c:c7:84:07:ef:0d:0c:2a:7f:4e:9d:25:59: be:a3:f3:2c:c5:21:85:2a:eb:a7:36:a7:7b:62:a2:b0:e7:62: 9e:84:d0:b8:6f:2e:e5:58:7a:b2:b6:ed:38:66:99:10:bd:8c: f3:63:10:1b:d9:c2:fe:2e:09:a8:c5:6e:4d:75:c5:c0:b4:3e: 8e:93:f9:29:e4:33:32:5b:7b:ab:80:b2:75:08:34:a4:09:6d: 84:2d:d4:8c:e9:ee:25:6e:c3:f6:0a:70:ab:1b:cd:75:ee:8a: 26:09:69:0c:3c:30:ad:c8:f0:00:ca:19:34:c0:b6:72:78:31: 31:e0:6c:d8:d6:6b:c1:94:e3:fa:51:00:c6:50:d0:4c:3d:10: e6:ee:40:5e:9d:92:78:3d:f1:a1:91:88:06:b5:83:44:e5:b0: ce:dc:6c:ae:51:09:57:c5:05:3d:af:ac:bb:ec:2a:2b:5c:ac: a9:18:71:10:38:4a:73:c6:f9:72:c0:00:6c:d4:c1:0e:4a:b1: ef:ee:ee:f3:5e:0a:f7:81:9e:f2:18:aa:30:52:4d:6b:04:a7: 87:cf:b6:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUwODIzMDAyNzU3WhcNMjUwODMwMDAyNzU3WjAYMRYwFAYD VQQDEw02OGE5MGIwZC0yZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mjoqugw6qZm3d9uyYpkXqaVT9S4OJYTPCSdJ+gQKSqboCdlBWrbOJjpdif7 NztDwXPDdcm/pEUPhLPlBqI7iyhjWC7FmUrpY/8n5oPyEPtd4w0VediGE7xUAqV7 ZnkzEH/0pnlO52kIwJA0SjcS0PopnDc083EGmkvTXdaPaO17bnMcBkrEMLejDgRa g6qbWHOCf1uuInH8dptyPHwSg8T2gS/n1CiSu4gWgUOtNw8ytkQf8nLbuWC/D/Iu DzsFTjSqNO5CGd72LNQNcjiGGlKDjjIoqbdX2rkmjg1SCcnAVwtGR/9UyJ4f/v1D /n9zRxsdanVZmdkke4yCWNtmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzT7aJv 1kpasVhQrEDMCvUbElRnMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByubQ8AgU55Ny7vw8vBX1KmQbcVBN/huSErW+XNe9FYQHwm/8Xtjir wgzHhAfvDQwqf06dJVm+o/MsxSGFKuunNqd7YqKw52KehNC4by7lWHqytu04ZpkQ vYzzYxAb2cL+LgmoxW5NdcXAtD6Ok/kp5DMyW3urgLJ1CDSkCW2ELdSM6e4lbsP2 CnCrG8117oomCWkMPDCtyPAAyhk0wLZyeDEx4GzY1mvBlOP6UQDGUNBMPRDm7kBe nZJ4PfGhkYgGtYNE5bDO3GyuUQlXxQU9r6y77CorXKypGHEQOEpzxvlywABs1MEO SrHv7u7zXgr3gZ7yGKowUk1rBKeHz7bj -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:58 2025 by rpki-client