$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: VHPSIe6H4tgmctCu4cYh6HFrzSPLNokLspmUBlqQrK4= Subject key identifier: EC:7F:B3:1C:60:D1:77:7B:22:73:23:AF:59:7A:1C:6C:6D:5E:DF:5A Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 0782 Signing time: Fri 22 Aug 2025 21:39:46 +0000 Manifest this update: Fri 22 Aug 2025 21:39:46 +0000 Manifest next update: Fri 29 Aug 2025 21:39:46 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: ByJ8jGdoBrjPWzddcQ2fH+R5xxRYqX+dImIcvGRlcbA=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Aug 22 21:39:46 2025 GMT Not After : Aug 29 21:39:46 2025 GMT Subject: CN=68a8e3a2-7566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:04:c5:ad:43:c4:8b:90:14:08:24:a5:45: 02:5f:78:e5:f0:c5:fb:47:fe:f0:27:52:37:6f:ba: 92:01:61:50:88:02:db:eb:9a:cc:6c:df:f5:c8:84: 96:d6:19:78:ce:6a:d7:8b:d5:07:85:77:3e:19:b7: 1e:56:b8:ed:a9:5c:f7:af:66:d5:7d:f6:77:15:33: f6:9f:de:cf:f5:04:9f:1c:9e:86:b9:81:9a:d3:c5: 8b:b8:f9:18:d2:32:b5:34:80:b3:8e:0f:ec:46:23: 55:6b:48:50:61:39:d1:77:54:c2:a5:9d:f2:25:0a: 61:98:f9:4d:eb:e3:5a:b7:c9:91:65:3c:e6:9d:4e: 74:57:46:28:4a:a6:6a:41:89:b5:16:a5:cb:61:38: f5:40:d0:a1:fb:c5:d9:de:f8:e3:50:73:4e:6a:3f: 9d:e9:8f:91:1f:b6:32:a0:ce:d7:43:c1:f0:96:68: d9:11:43:cc:d3:24:4d:22:97:4a:51:4c:58:9d:1e: d1:d3:a9:29:29:7e:9c:54:38:01:cd:64:14:cb:dc: 85:65:48:05:e1:48:31:8c:64:f7:1e:04:14:2c:94: f1:2d:c7:bf:83:21:57:14:d4:45:00:fa:dc:a5:b1: a7:f2:31:92:b0:05:1e:1d:d5:38:89:0f:5b:e1:19: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7F:B3:1C:60:D1:77:7B:22:73:23:AF:59:7A:1C:6C:6D:5E:DF:5A X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:a1:65:27:61:a3:6c:bd:4e:b5:21:d5:b1:b5:49:27:87: 39:7d:33:f3:0b:4e:f3:f2:b4:64:5b:c8:67:b7:2f:40:62:1c: f2:c2:c9:9c:aa:24:2d:fb:7d:dc:92:f2:4c:3f:be:a6:e9:d0: 65:34:af:dc:d7:b5:11:2b:71:fb:17:5c:b2:95:f6:c3:45:54: 45:76:b0:0b:d4:c8:a7:43:6f:ee:f4:1a:c3:39:70:89:e0:41: 9b:37:f3:58:e0:7a:c6:72:d5:fa:35:ce:39:73:53:a4:cd:92: 8c:7e:68:84:fc:20:91:ad:d6:29:34:98:cb:e2:39:46:9d:b3: d2:76:ae:e3:f1:d4:ea:47:72:72:26:4e:e3:6a:16:b6:f6:b2: cb:db:25:80:88:5d:4c:e9:af:7e:0a:34:b9:32:ca:ea:cd:c2: 0a:7c:18:c3:cd:81:36:46:49:ef:8c:d3:df:0d:53:d5:58:ca: 4c:fe:3f:25:cd:99:e9:c0:73:ef:6b:73:07:9a:2d:46:f3:c0: 6a:b9:56:fb:e7:70:03:41:7b:63:76:6e:84:2f:94:b7:f5:e9: fc:95:73:9b:34:11:10:53:cf:ca:60:d6:0d:17:59:5f:40:71: bf:f8:b5:35:d4:93:5d:f1:d0:4e:d9:c0:fe:f8:ae:69:25:80: 6c:38:b0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwODIyMjEzOTQ2WhcNMjUwODI5MjEzOTQ2WjAYMRYwFAYD VQQDEw02OGE4ZTNhMi03NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg0Exa1DxIuQFAgkpUUCX3jl8MX7R/7wJ1I3b7qSAWFQiALb65rMbN/1yISW 1hl4zmrXi9UHhXc+GbceVrjtqVz3r2bVffZ3FTP2n97P9QSfHJ6GuYGa08WLuPkY 0jK1NICzjg/sRiNVa0hQYTnRd1TCpZ3yJQphmPlN6+Nat8mRZTzmnU50V0YoSqZq QYm1FqXLYTj1QNCh+8XZ3vjjUHNOaj+d6Y+RH7YyoM7XQ8HwlmjZEUPM0yRNIpdK UUxYnR7R06kpKX6cVDgBzWQUy9yFZUgF4UgxjGT3HgQULJTxLce/gyFXFNRFAPrc pbGn8jGSsAUeHdU4iQ9b4RnndwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOx/sxxg 0Xd7InMjr1l6HGxtXt9aMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1HaFlJ2GjbL1OtSHVsbVJJ4c5fTPzC07z8rRkW8hnty9AYhzywsmc qiQt+33ckvJMP76m6dBlNK/c17URK3H7F1yylfbDRVRFdrAL1MinQ2/u9BrDOXCJ 4EGbN/NY4HrGctX6Nc45c1OkzZKMfmiE/CCRrdYpNJjL4jlGnbPSdq7j8dTqR3Jy Jk7jaha29rLL2yWAiF1M6a9+CjS5MsrqzcIKfBjDzYE2RknvjNPfDVPVWMpM/j8l zZnpwHPva3MHmi1G88BquVb753ADQXtjdm6EL5S39en8lXObNBEQU8/KYNYNF1lf QHG/+LU11JNd8dBO2cD++K5pJYBsOLDF -----END CERTIFICATE-----Generated at Sun Aug 24 03:16:08 2025 by rpki-client