$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: eAZd3hyCWesEnYOF643aQe8Z0JWkOlr31kDnSobE5pM= Subject key identifier: 9A:B4:00:38:11:DF:FA:5E:FA:89:B5:E1:0D:FE:D8:3A:16:54:0E:AF Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:13:21 +0000 Manifest this update: Sat 23 Aug 2025 08:13:21 +0000 Manifest next update: Sat 30 Aug 2025 08:13:21 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: csM6VDYapp3Zq0V8vOb7rUBsUitnraCC5hZkbtx+Ezc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Aug 23 08:13:21 2025 GMT Not After : Aug 30 08:13:21 2025 GMT Subject: CN=68a97821-450b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:c7:2f:54:0b:16:92:ba:a5:ef:da:df:6a: 2d:2e:5e:2d:8f:be:19:af:59:a1:85:34:0c:8c:8d: ba:7b:0d:9d:26:e3:e2:d0:8c:83:0c:89:5c:b7:e1: 9c:6e:0a:4b:81:9a:8d:61:78:9e:9d:40:b8:e5:dd: ae:ea:b7:b5:53:32:ca:ca:10:9f:be:8a:61:3d:c2: 31:25:92:1c:97:fa:eb:67:cb:b5:d0:0e:7f:5f:85: 27:de:be:77:48:4c:45:6a:68:d6:0c:81:49:fb:41: ab:73:e6:13:eb:59:fb:79:2b:4d:7b:bb:02:aa:59: c6:e7:f5:94:a7:4c:ac:c9:43:54:a1:90:fb:78:b1: 15:4c:2b:c3:23:14:87:92:c9:48:42:80:40:3c:3d: 37:78:2e:cb:f7:5a:27:94:60:8c:61:ee:bf:e5:61: 86:bc:13:ac:bf:26:14:18:8c:09:a2:25:3a:8b:b4: 11:e5:11:bf:41:a9:44:a9:77:f2:ad:4e:56:35:e7: 08:d1:55:12:83:7c:36:75:e2:d2:d5:78:06:25:bd: e9:51:58:b0:d7:85:61:53:56:5b:23:21:52:43:b1: cb:cb:35:9b:21:61:c0:a1:dd:2b:97:52:ed:79:75: 38:1b:3c:99:1d:a2:65:39:68:3b:4f:5d:54:e1:5e: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:00:38:11:DF:FA:5E:FA:89:B5:E1:0D:FE:D8:3A:16:54:0E:AF X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6d:51:a4:21:6d:41:aa:f4:a7:bf:2f:65:d1:54:cd:a0:69: 39:92:0e:8c:b3:18:b6:cc:c0:55:77:33:d3:e4:54:5a:64:58: 2b:22:cd:6d:3c:ca:72:9b:99:1c:6e:30:96:1c:f3:1d:ef:e3: 78:4c:6a:5d:95:48:95:88:45:e3:f2:e1:fe:e3:6b:b7:14:ff: 4f:e1:d1:e8:cf:a1:46:15:99:b0:0a:d3:f0:f1:38:94:be:f7: f3:ed:e5:99:e1:71:7e:f7:dd:04:37:dd:e4:18:23:e1:ae:62: 47:2e:2b:e3:fb:dd:96:2d:41:35:dd:67:79:f8:aa:6c:21:a8: ac:2d:a3:4b:75:69:a5:fd:13:04:28:50:98:a5:4a:79:df:8a: 37:7f:83:b1:ee:50:ae:e0:54:75:36:18:44:cb:a7:4a:65:8b: 68:94:c1:89:d0:7c:0b:cd:31:5e:91:5c:69:54:b5:ca:f8:e8: 2f:2a:0d:1d:ba:7a:9c:23:50:d6:aa:5f:7e:4d:ae:b6:a7:ff: 2e:a3:95:40:37:56:a0:af:63:a2:15:8b:b6:6c:3f:80:99:21: 3b:ff:76:f7:85:25:25:1d:3b:43:1e:41:b4:9d:fb:08:32:3c: 9d:b5:71:97:05:90:56:9f:68:bc:40:9f:c1:ab:83:fb:23:b8: f1:0c:a2:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTA4MjMwODEzMjFaFw0yNTA4MzAwODEzMjFaMBgxFjAUBgNV BAMTDTY4YTk3ODIxLTQ1MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPkMcvVAsWkrql79rfai0uXi2PvhmvWaGFNAyMjbp7DZ0m4+LQjIMMiVy34Zxu CkuBmo1heJ6dQLjl3a7qt7VTMsrKEJ++imE9wjElkhyX+utny7XQDn9fhSfevndI TEVqaNYMgUn7Qatz5hPrWft5K017uwKqWcbn9ZSnTKzJQ1ShkPt4sRVMK8MjFIeS yUhCgEA8PTd4Lsv3WieUYIxh7r/lYYa8E6y/JhQYjAmiJTqLtBHlEb9BqUSpd/Kt TlY15wjRVRKDfDZ14tLVeAYlvelRWLDXhWFTVlsjIVJDscvLNZshYcCh3SuXUu15 dTgbPJkdomU5aDtPXVThXpZJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmrQAOBHf +l76ibXhDf7YOhZUDq8wHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABBtUaQhbUGq9Ke/L2XRVM2gaTmSDoyzGLbMwFV3M9PkVFpkWCsizW08 ynKbmRxuMJYc8x3v43hMal2VSJWIRePy4f7ja7cU/0/h0ejPoUYVmbAK0/DxOJS+ 9/Pt5ZnhcX733QQ33eQYI+GuYkcuK+P73ZYtQTXdZ3n4qmwhqKwto0t1aaX9EwQo UJilSnnfijd/g7HuUK7gVHU2GETLp0pli2iUwYnQfAvNMV6RXGlUtcr46C8qDR26 epwjUNaqX35Nrran/y6jlUA3VqCvY6IVi7ZsP4CZITv/dveFJSUdO0MeQbSd+wgy PJ21cZcFkFafaLxAn8Grg/sjuPEMohY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:28 2025 by rpki-client