$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: rQqbKr5fRo715R9mE/eDk1XKnTXuhttFPtIq3wVdhpw= Subject key identifier: 2E:46:4D:6E:27:76:7C:62:F2:0F:1F:83:3F:75:70:1F:C2:6F:A8:66 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0A1A Signing time: Fri 22 Aug 2025 19:56:16 +0000 Manifest this update: Fri 22 Aug 2025 19:56:16 +0000 Manifest next update: Fri 29 Aug 2025 19:56:16 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: G7rr/8V4aS0FjJe8MnMdiwohSSjeKmMONIYbu1zLCq4=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Aug 22 19:56:16 2025 GMT Not After : Aug 29 19:56:16 2025 GMT Subject: CN=68a8cb60-ccc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:10:9f:3f:92:9f:ab:20:31:ca:ee:ba:e1: 43:1e:06:52:25:aa:ad:4d:4f:79:e8:f5:6d:54:03: d7:67:77:6c:ce:fe:60:94:a7:5e:36:3d:09:c5:86: 06:7e:75:ae:be:0b:8e:55:dd:17:0e:ab:ee:18:07: 9b:1d:8f:6d:52:06:a3:0d:05:d5:3e:78:ce:d2:2b: 64:f7:21:91:70:1c:2b:4e:1b:f8:c2:cc:51:71:3f: fe:4d:78:a6:58:96:5d:63:5d:e5:14:c0:28:bf:9f: 2b:89:ad:f1:71:6e:4e:41:b6:21:14:d5:1e:f9:98: 01:ce:85:5d:9d:51:13:7e:09:75:f6:1a:80:d8:d1: 58:f5:06:27:02:ad:76:e8:01:0b:e0:c0:28:c5:2b: df:1d:9e:38:4c:98:68:0f:50:fe:d6:0c:10:4a:d1: ef:16:dc:05:aa:5e:74:6b:d4:03:4a:60:cd:df:c1: 73:14:71:1f:f1:7f:12:07:fe:c6:4b:fb:22:7d:47: 3a:36:be:ab:b2:06:d7:46:4f:9e:f6:ba:23:80:75: 42:7d:0c:04:5a:cd:e2:d6:4a:11:b9:48:a6:6d:4d: 1a:d7:d8:9a:48:cf:ff:56:75:6a:89:40:a6:ea:3a: 3e:24:ad:20:d8:98:a8:21:60:23:93:0f:c0:2d:b8: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:4D:6E:27:76:7C:62:F2:0F:1F:83:3F:75:70:1F:C2:6F:A8:66 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:1e:de:df:e6:f8:4d:d9:65:8a:36:a2:8d:14:e9:c1:8c:24: 85:36:06:78:09:2e:1c:f5:0d:8c:50:1f:23:6e:a7:d9:3f:0d: 91:b5:57:d2:7c:0d:e8:e7:3d:a3:36:43:e7:19:99:a4:bd:03: 24:bf:90:b0:6a:db:a8:3d:f1:71:56:b5:cb:27:38:f7:a0:d5: 27:a1:16:71:93:cb:35:c9:a1:85:e7:c1:b1:bd:ac:b1:f3:7c: 3f:4a:73:b5:8a:03:4d:56:6b:99:9f:b1:54:b5:d1:c9:75:20: 22:7b:43:76:3c:1b:33:3f:8b:49:82:bb:ae:13:f6:a6:ea:62: 1c:0d:77:be:a7:17:82:b7:ed:c9:76:a6:52:45:8b:14:56:80: f0:5e:24:52:52:99:d3:fa:4e:18:0b:63:50:3a:8f:e2:62:04: 1e:d2:fb:12:38:f6:02:c0:b2:85:55:80:4c:1a:b3:10:5b:f9: 4f:cb:82:aa:0a:93:c8:4f:5a:86:c4:64:5a:20:a5:f7:5a:4e: 04:95:a3:00:dc:c9:3e:53:da:a6:52:b9:65:60:54:b3:59:e8: c4:f2:8e:eb:0e:0a:9b:e3:69:84:46:35:1b:04:c1:8d:98:2a: cd:c6:79:95:d9:67:8b:9e:8d:73:0c:d2:a3:e3:71:4d:bf:a2: 5f:60:39:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjUwODIyMTk1NjE2WhcNMjUwODI5MTk1NjE2WjAYMRYwFAYD VQQDEw02OGE4Y2I2MC1jY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OMQnz+Sn6sgMcruuuFDHgZSJaqtTU956PVtVAPXZ3dszv5glKdeNj0JxYYG fnWuvguOVd0XDqvuGAebHY9tUgajDQXVPnjO0itk9yGRcBwrThv4wsxRcT/+TXim WJZdY13lFMAov58ria3xcW5OQbYhFNUe+ZgBzoVdnVETfgl19hqA2NFY9QYnAq12 6AEL4MAoxSvfHZ44TJhoD1D+1gwQStHvFtwFql50a9QDSmDN38FzFHEf8X8SB/7G S/sifUc6Nr6rsgbXRk+e9rojgHVCfQwEWs3i1koRuUimbU0a19iaSM//VnVqiUCm 6jo+JK0g2JioIWAjkw/ALbhDKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5GTW4n dnxi8g8fgz91cB/Cb6hmMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoHt7f5vhN2WWKNqKNFOnBjCSFNgZ4CS4c9Q2MUB8jbqfZPw2RtVfS fA3o5z2jNkPnGZmkvQMkv5CwatuoPfFxVrXLJzj3oNUnoRZxk8s1yaGF58Gxvayx 83w/SnO1igNNVmuZn7FUtdHJdSAie0N2PBszP4tJgruuE/am6mIcDXe+pxeCt+3J dqZSRYsUVoDwXiRSUpnT+k4YC2NQOo/iYgQe0vsSOPYCwLKFVYBMGrMQW/lPy4Kq CpPIT1qGxGRaIKX3Wk4ElaMA3Mk+U9qmUrllYFSzWejE8o7rDgqb42mERjUbBMGN mCrNxnmV2WeLno1zDNKj43FNv6JfYDk8 -----END CERTIFICATE-----Generated at Sat Aug 23 21:37:56 2025 by rpki-client