$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: 2W6IlLaGdyQ6suNEzMT/tXlDlAQz01oUVm8XtOGPCI0= Subject key identifier: 50:12:80:4A:90:97:BC:A4:E0:C3:E8:26:67:8D:D0:A8:5B:5A:5C:3F Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 64 Signing time: Sat 19 Jul 2025 07:13:35 +0000 Manifest this update: Sat 19 Jul 2025 07:13:34 +0000 Manifest next update: Sat 26 Jul 2025 07:13:34 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: vbZwFg1f8oHj9Kxb1nHWoTa/sxAekVGTfu8wI0cgVFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Jul 19 07:13:34 2025 GMT Not After : Jul 26 07:13:34 2025 GMT Subject: CN=687b459e-3c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:b1:c3:95:35:6f:f9:e4:ed:f5:7a:bc:fc: 58:01:c4:d9:3b:e7:35:df:54:b5:2d:46:2e:b5:ea: 3b:76:1f:85:46:9f:c6:a7:e1:80:39:56:34:47:60: 6d:1c:f9:8d:87:2c:b3:08:db:aa:fd:32:77:aa:07: 1e:2d:5e:d6:e5:ca:88:1f:ec:03:67:fa:67:95:76: 34:ad:20:ba:93:4d:0d:0e:19:29:15:0f:db:5b:0f: 92:2f:33:2b:57:7d:a2:f3:3b:0f:2b:1a:48:2a:38: 2b:64:53:89:23:14:24:b2:60:bc:d2:b2:4b:91:e9: 2e:b9:0e:e7:8e:dc:25:47:40:c0:fe:8c:d9:1f:0f: 6e:d0:c6:ec:71:4e:0f:63:2b:cf:70:b4:d7:1e:16: 4f:cd:e8:e6:99:59:94:73:3c:6f:96:3b:a5:ff:59: a1:1a:aa:9a:20:e6:e4:80:64:ff:d0:4e:91:7a:19: 32:60:ce:38:2c:08:22:c4:2b:6a:82:1c:ed:27:15: de:58:f9:79:13:72:4d:96:df:54:4c:2b:d3:e4:68: 30:5a:92:4f:1f:68:dd:6b:70:45:16:69:76:8a:03: df:b9:11:c0:32:29:32:76:1d:2d:1d:93:ea:56:59: 5b:b8:3f:60:4c:b3:11:c3:81:80:5a:01:0f:f0:cc: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:12:80:4A:90:97:BC:A4:E0:C3:E8:26:67:8D:D0:A8:5B:5A:5C:3F X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:26:77:87:cf:d7:04:77:56:06:c0:71:9f:10:7c:ab:7d: 5c:b7:a8:2f:a7:14:2c:1e:38:08:f1:78:77:c6:1f:bd:f3:1c: 2f:c1:ad:55:e6:22:fc:bc:45:a9:2f:75:40:6d:c3:0c:48:d7: ca:6a:57:e3:6d:e2:7c:47:42:e8:09:bf:6c:66:ac:65:d9:1d: 11:ed:73:87:58:32:0e:d7:59:6a:c6:07:bc:e8:c5:97:6f:2d: 48:8f:ec:36:f8:19:f5:ba:03:ec:81:df:7a:66:16:b8:74:23: 09:66:4e:16:d9:f8:b8:ad:3c:53:ca:0f:84:4b:8d:62:39:57: 99:b5:16:74:dd:1c:75:37:85:78:b5:32:bd:38:b4:cc:57:1a: a4:4b:66:5e:f2:ab:c5:f0:a1:c4:13:70:9c:2d:9c:7f:bd:9e: df:71:0d:f8:19:d5:8b:69:97:7e:13:e9:fb:24:e1:6b:98:9c: 57:c2:7e:fa:fc:5e:65:ed:1e:16:b6:e2:ea:30:32:48:34:a4: c1:bd:f4:e1:55:3d:3c:ec:0a:51:7e:9b:99:7c:5f:61:96:91: 6b:2c:77:fa:6b:d3:09:d6:65:3f:a4:ee:46:4c:59:db:c3:81: 41:6e:8f:18:9a:cc:a9:f0:f1:64:f7:7b:36:a0:e3:40:b2:b6: 28:89:13:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoODVDNTY3MjU5MTAzRDlFMjI5MkU2NERCRkI3OUZEMzlC MjU2RkRFNDAeFw0yNTA3MTkwNzEzMzRaFw0yNTA3MjYwNzEzMzRaMBgxFjAUBgNV BAMTDTY4N2I0NTllLTNjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRALHDlTVv+eTt9Xq8/FgBxNk75zXfVLUtRi616jt2H4VGn8an4YA5VjRHYG0c +Y2HLLMI26r9MneqBx4tXtblyogf7ANn+meVdjStILqTTQ0OGSkVD9tbD5IvMytX faLzOw8rGkgqOCtkU4kjFCSyYLzSskuR6S65DueO3CVHQMD+jNkfD27QxuxxTg9j K89wtNceFk/N6OaZWZRzPG+WO6X/WaEaqpog5uSAZP/QTpF6GTJgzjgsCCLEK2qC HO0nFd5Y+XkTck2W31RMK9PkaDBakk8faN1rcEUWaXaKA9+5EcAyKTJ2HS0dk+pW WVu4P2BMsxHDgYBaAQ/wzKdLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUBKASpCX vKTgw+gmZ43QqFtaXD8wHwYDVR0jBBgwFoAUhcVnJZED2eIpLmTb+3n9ObJW/eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzU4M0ZGQzk0Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19l US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGNWbkpaRUQyZUlwTG1UYi0zbjlPYkpXX2VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzU4M0ZGQzk0Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL2hjVm5KWkVEMmVJ cExtVGItM245T2JKV19lUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkpJneHz9cEd1YGwHGfEHyrfVy3qC+nFCweOAjxeHfGH73zHC/BrVXm Ivy8RakvdUBtwwxI18pqV+Nt4nxHQugJv2xmrGXZHRHtc4dYMg7XWWrGB7zoxZdv LUiP7Db4GfW6A+yB33pmFrh0IwlmThbZ+LitPFPKD4RLjWI5V5m1FnTdHHU3hXi1 Mr04tMxXGqRLZl7yq8XwocQTcJwtnH+9nt9xDfgZ1Ytpl34T6fsk4WuYnFfCfvr8 XmXtHha24uowMkg0pMG99OFVPTzsClF+m5l8X2GWkWssd/pr0wnWZT+k7kZMWdvD gUFujxiazKnw8WT3ezag40CytiiJE2Q= -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:41 2025 by rpki-client