$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft File: hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json) Hash identifier: QPcew0uvuwOxJjd0TnReNHPXberNxOYgkzwTUii2EQ4= Subject key identifier: 62:1E:67:2F:E2:C8:39:B9:44:26:A3:AA:1A:FB:A0:7F:3D:CE:FC:11 Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 Certificate issuer: /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft Manifest number: BB Signing time: Sat 19 Jul 2025 06:07:18 +0000 Manifest this update: Sat 19 Jul 2025 06:07:17 +0000 Manifest next update: Sat 26 Jul 2025 06:07:17 +0000 Files and hashes: 1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: GmO2HIPlZdF+GYBfWooTuV6og4QnSkXKdDfarKAW67Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934 Validity Not Before: Jul 19 06:07:17 2025 GMT Not After : Jul 26 06:07:17 2025 GMT Subject: CN=687b3616-6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:4d:e0:1c:39:64:04:c5:11:f9:d6:96:92: d2:3b:3b:2c:a3:11:e6:78:a8:e8:83:d8:f5:46:e0: 0e:27:9c:02:09:0d:43:4f:b2:3d:e7:07:a5:58:c8: 58:fa:16:df:b5:2b:e3:ab:18:15:4b:9c:a6:1c:00: f2:01:11:ef:35:72:6b:59:eb:eb:b5:05:20:47:50: bf:29:39:8d:9c:54:f1:e3:a2:19:a0:dc:10:d3:bd: 08:45:f6:f4:c2:0e:16:34:ed:38:18:04:04:1d:26: 7f:09:17:29:7d:d1:92:b5:2f:bc:4e:b5:9d:32:fd: c5:ab:85:28:b8:60:55:0a:60:06:73:dd:59:81:a9: 28:e9:57:5f:b6:08:77:ae:33:4c:08:8c:00:2e:a5: b8:d1:68:66:17:f3:a4:fa:e8:0b:db:44:0e:d1:27: ae:b3:25:6c:e7:b8:fc:ce:5b:8e:97:1c:58:25:0e: 39:2c:d5:93:35:31:61:a4:16:b5:7d:dc:1f:92:84: 58:a4:6b:5f:31:b1:7e:6d:b4:ec:37:25:0f:56:71: 43:c1:65:bf:ae:c6:4c:bc:d7:6f:29:e1:80:e9:44: 28:2d:e7:33:a2:89:70:67:49:1e:66:72:af:64:9f: c4:ce:bb:ba:cf:fc:17:3d:d4:24:16:89:63:01:6a: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1E:67:2F:E2:C8:39:B9:44:26:A3:AA:1A:FB:A0:7F:3D:CE:FC:11 X509v3 Authority Key Identifier: keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:06:db:e4:c2:e9:e9:ce:9b:d9:41:f8:d3:0c:07:48:e5:67: 9f:21:af:19:e6:db:26:cf:26:01:dc:d5:3d:32:13:70:f3:39: 7b:49:f2:f3:87:69:b9:c5:c6:f7:e8:da:40:51:ba:ae:c9:f0: fe:47:3f:56:74:94:cb:47:7f:61:6b:18:f3:ad:6a:f6:f1:0d: 2c:38:d9:b2:9c:fa:f1:97:8c:df:f3:54:27:fe:a2:c3:e1:16: 7f:d6:10:6b:66:f6:2a:d1:a7:de:e1:5b:7e:86:1f:40:44:28: bc:3b:14:bd:f9:d2:fe:e5:38:d9:cc:e0:af:c6:bf:9a:47:8d: b1:48:18:05:50:1b:85:1e:eb:78:d9:27:5e:31:b7:e0:93:7c: bd:01:5e:c0:73:8e:e3:58:c4:6c:f0:46:f5:56:b2:42:04:70: a1:6a:63:9a:7d:92:ab:84:2f:0b:d7:43:73:2b:cd:83:9c:68: 80:6b:95:3a:76:b1:a4:9d:be:28:64:ce:3e:57:20:c1:f6:39: 83:3c:31:da:66:7a:17:c9:2a:bd:be:26:5d:db:24:25:a9:3d: da:5d:39:61:74:29:42:b1:b5:18:67:2e:b2:4d:1a:17:3c:28: 62:c4:3c:76:17:e3:3e:ae:f2:f7:8a:32:73:82:08:15:93:b1: 41:75:30:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCNUUxMTAvBgNVBAUTKDg1ODA0NTk1MTdGRTFENzdENEQzOEE0MjlGMUQyMUM2 QzkyREU5MzQwHhcNMjUwNzE5MDYwNzE3WhcNMjUwNzI2MDYwNzE3WjAYMRYwFAYD VQQDEw02ODdiMzYxNi02ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhdN4Bw5ZATFEfnWlpLSOzssoxHmeKjog9j1RuAOJ5wCCQ1DT7I95welWMhY +hbftSvjqxgVS5ymHADyARHvNXJrWevrtQUgR1C/KTmNnFTx46IZoNwQ070IRfb0 wg4WNO04GAQEHSZ/CRcpfdGStS+8TrWdMv3Fq4UouGBVCmAGc91Zgako6Vdftgh3 rjNMCIwALqW40WhmF/Ok+ugL20QO0SeusyVs57j8zluOlxxYJQ45LNWTNTFhpBa1 fdwfkoRYpGtfMbF+bbTsNyUPVnFDwWW/rsZMvNdvKeGA6UQoLeczoolwZ0keZnKv ZJ/Ezru6z/wXPdQkFoljAWrtFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIeZy/i yDm5RCajqhr7oH89zvwRMB8GA1UdIwQYMBaAFIWARZUX/h131NOKQp8dIcbJLek0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUI1RS84NUJDRUU0QzQ1 QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhYZlUwNHBDbngwaHhza3Q2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZQkZsUmYtSFhmVTA0cENueDBoeHNrdDZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUI1RS84NUJDRUU0QzQ1QjUxMUVGQkE0QTYyMUVDNEY5QUUwMi9oWUJGbFJmLUhY ZlUwNHBDbngwaHhza3Q2VFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArBtvkwunpzpvZQfjTDAdI5WefIa8Z5tsmzyYB3NU9MhNw8zl7SfLz h2m5xcb36NpAUbquyfD+Rz9WdJTLR39haxjzrWr28Q0sONmynPrxl4zf81Qn/qLD 4RZ/1hBrZvYq0afe4Vt+hh9ARCi8OxS9+dL+5TjZzOCvxr+aR42xSBgFUBuFHut4 2SdeMbfgk3y9AV7Ac47jWMRs8Eb1VrJCBHChamOafZKrhC8L10NzK82DnGiAa5U6 drGknb4oZM4+VyDB9jmDPDHaZnoXySq9viZd2yQlqT3aXTlhdClCsbUYZy6yTRoX PChixDx2F+M+rvL3ijJzgggVk7FBdTDd -----END CERTIFICATE-----Generated at Mon Jul 21 05:50:04 2025 by rpki-client