$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: saiyLYkkiKmi6/wbxP3pd/BIM5CwGgE54DQcTrUPnmY= Subject key identifier: 92:07:72:7F:00:61:14:93:89:36:A5:37:95:15:38:3A:03:AA:86:B9 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 1195 Signing time: Thu 24 Jul 2025 17:22:36 +0000 Manifest this update: Thu 24 Jul 2025 17:22:36 +0000 Manifest next update: Thu 31 Jul 2025 17:22:36 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: knbDV3E2ODspzeRrgE+HgXs6Cd1wqWQxYBp6a+cDwAA=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4522 (0x11aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Jul 24 17:22:36 2025 GMT Not After : Jul 31 17:22:36 2025 GMT Subject: CN=68826bdc-c4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:cd:4a:82:2b:14:61:46:67:c8:26:9a:99: 64:4f:01:96:43:e9:a9:54:cf:82:54:7c:41:65:47: d7:36:31:b5:b3:93:cd:dd:00:54:6a:92:d1:c4:0d: b2:c4:ad:4d:b4:27:eb:72:d4:db:32:2c:24:7f:c5: 30:b8:5b:f4:b8:7c:93:35:cf:f6:d6:6c:eb:88:b9: 72:76:0f:3e:7b:25:57:2a:72:23:94:1e:06:d9:80: b8:66:42:5b:dc:ac:18:ca:59:10:10:c2:e1:40:3a: 8d:aa:51:fb:56:ba:6d:62:af:73:b5:4f:67:34:e8: 0b:39:f2:1d:96:c7:90:f0:38:54:5d:18:02:ff:50: fc:7b:eb:19:49:96:89:4e:f6:ed:5c:a5:be:22:be: 88:35:1d:65:5b:79:bb:b8:df:bd:4e:0a:64:96:b1: 93:7b:25:ab:02:a4:48:37:d2:6d:0a:ce:18:a2:46: 16:27:2b:7f:b3:fd:79:a6:a7:43:6b:35:ee:06:9e: 5d:81:eb:78:22:d9:1f:e9:10:a7:fa:e6:bc:c9:75: 67:9f:6b:c0:d0:74:75:54:d0:24:dd:91:3f:75:97: 93:95:5d:7c:72:4c:b6:93:77:c6:f5:b6:c0:8a:7d: 0e:05:9d:b1:6e:96:31:cf:f9:d0:94:b2:26:1a:e2: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:07:72:7F:00:61:14:93:89:36:A5:37:95:15:38:3A:03:AA:86:B9 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:79:5d:eb:f4:d4:0f:15:c6:f5:e1:3c:f9:5c:3a:cf:df:5f: 70:58:f5:23:c0:8e:f4:ea:2e:be:ad:3b:4b:e0:fb:fc:4a:9c: 42:f1:ff:13:d8:e0:8f:6a:78:19:8e:00:67:df:ff:dd:32:4c: b0:68:82:3c:96:98:d9:aa:42:f4:e0:e3:5b:4a:81:c4:7b:3a: d2:0a:70:a7:cc:80:0e:b5:6a:42:ee:cf:76:93:39:50:63:da: fe:4f:a0:cb:db:d0:ff:20:d0:e7:ca:c1:67:df:64:a4:e9:e5: 5f:76:f9:b6:5e:23:03:da:09:27:a9:2a:b0:ef:07:93:02:61: e5:3a:b4:de:39:c8:13:09:46:d6:cc:db:b3:65:22:6e:07:81: 79:1e:5b:b0:15:b4:96:0d:52:f1:f6:11:19:d0:90:e2:be:5d: d0:e7:a0:42:bb:f6:9b:e9:43:73:ce:80:d1:66:08:87:76:3f: 2b:21:08:13:20:c8:f0:6f:e2:38:3e:02:74:f7:33:cf:14:32: 2a:89:e6:4c:7b:88:e4:3f:66:9b:cf:b6:28:8a:21:10:29:d4: 34:40:a0:4e:be:f3:31:70:c9:6b:5a:26:9f:61:98:c6:4a:7d: 48:5d:4f:eb:38:e0:8d:e6:c1:2a:a5:83:4b:44:3f:9f:04:f6: 50:db:5a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwNzI0MTcyMjM2WhcNMjUwNzMxMTcyMjM2WjAYMRYwFAYD VQQDEw02ODgyNmJkYy1jNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp7NSoIrFGFGZ8gmmplkTwGWQ+mpVM+CVHxBZUfXNjG1s5PN3QBUapLRxA2y xK1NtCfrctTbMiwkf8UwuFv0uHyTNc/21mzriLlydg8+eyVXKnIjlB4G2YC4ZkJb 3KwYylkQEMLhQDqNqlH7VrptYq9ztU9nNOgLOfIdlseQ8DhUXRgC/1D8e+sZSZaJ TvbtXKW+Ir6INR1lW3m7uN+9TgpklrGTeyWrAqRIN9JtCs4YokYWJyt/s/15pqdD azXuBp5dget4Itkf6RCn+ua8yXVnn2vA0HR1VNAk3ZE/dZeTlV18cky2k3fG9bbA in0OBZ2xbpYxz/nQlLImGuJ/NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIHcn8A YRSTiTalN5UVODoDqoa5MB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAteV3r9NQPFcb14Tz5XDrP319wWPUjwI706i6+rTtL4Pv8SpxC8f8T 2OCPangZjgBn3//dMkywaII8lpjZqkL04ONbSoHEezrSCnCnzIAOtWpC7s92kzlQ Y9r+T6DL29D/INDnysFn32Sk6eVfdvm2XiMD2gknqSqw7weTAmHlOrTeOcgTCUbW zNuzZSJuB4F5HluwFbSWDVLx9hEZ0JDivl3Q56BCu/ab6UNzzoDRZgiHdj8rIQgT IMjwb+I4PgJ09zPPFDIqieZMe4jkP2abz7YoiiEQKdQ0QKBOvvMxcMlrWiafYZjG Sn1IXU/rOOCN5sEqpYNLRD+fBPZQ21r5 -----END CERTIFICATE-----Generated at Fri Jul 25 20:59:42 2025 by rpki-client