$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft File: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft (raw, json) Hash identifier: cPIs96PzPfXeAxMRc8LBwjbQaQUFh1BYwUMZi+qKjww= Subject key identifier: C6:BA:D1:C0:50:B5:59:F3:F0:B5:AD:7A:B6:4A:7E:12:BB:1E:B4:14 Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft Manifest number: 0584 Signing time: Wed 17 Sep 2025 00:33:58 +0000 Manifest this update: Wed 17 Sep 2025 00:33:57 +0000 Manifest next update: Wed 24 Sep 2025 00:33:57 +0000 Files and hashes: 1: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl (hash: paEKCU7MnJA4n4GY/0nKIHAgMzayduyMH8+eT8El2mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316B0, serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589 Validity Not Before: Sep 17 00:33:57 2025 GMT Not After : Sep 24 00:33:57 2025 GMT Subject: CN=68ca01f5-9708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:cd:be:a6:6a:ab:ed:ca:a4:0b:ed:28:4e: 17:c9:db:e9:b0:ac:09:0f:14:6c:32:56:24:19:21: 86:98:f5:ce:4a:8b:48:8d:f5:fe:9a:23:17:e8:19: cd:a7:d7:82:4b:c2:79:ee:0a:40:05:74:7f:aa:22: 3e:80:ac:06:ed:e4:22:b9:7c:04:7c:83:3d:9f:dd: dc:39:e5:03:3a:29:05:16:2f:a4:ba:05:5a:8e:4a: 40:dc:6c:75:d4:f2:25:76:1d:f1:16:92:38:33:20: db:69:c8:04:88:8f:d4:d3:50:bc:c4:2a:d6:37:bd: 3a:ff:ce:00:57:01:3a:80:16:73:ba:e7:d1:95:f6: e2:d7:9b:4f:c5:13:bd:32:21:76:46:8a:b3:51:9d: 05:57:9c:7e:0b:45:7a:32:cd:7b:be:4c:86:65:4e: be:e4:d3:70:ff:bf:7a:03:d6:12:62:f7:e1:3e:c0: 6f:18:23:e5:4e:b4:9c:4b:9a:4d:27:9c:1b:15:ee: 70:94:69:10:1f:ff:82:49:e8:bb:53:51:04:f1:d1: a0:bc:4a:e0:f5:18:b0:43:c3:6a:2d:b5:a4:f1:a8: fe:37:f7:3b:99:20:15:d7:ba:48:58:13:77:27:45: c0:26:fe:e6:fb:f3:ab:24:15:b0:96:17:14:73:a6: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:D1:C0:50:B5:59:F3:F0:B5:AD:7A:B6:4A:7E:12:BB:1E:B4:14 X509v3 Authority Key Identifier: keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:29:b8:7e:b7:3a:ba:e1:01:87:31:cd:7d:fb:5c:77:37:40: b5:5f:4e:b9:60:8f:02:0b:1c:7c:90:f9:d8:93:e3:7e:bb:8a: d2:ce:0a:b8:2b:5e:41:c3:d0:fd:fd:38:5b:2a:5e:60:92:77: 60:81:c1:35:f6:45:d0:b5:fa:db:53:50:a7:e6:a1:62:b8:a7: 86:8f:f3:92:9a:ad:4d:d2:93:26:2b:54:fd:50:83:86:96:96: 13:20:3d:44:58:41:46:5c:7f:34:ac:87:96:4f:f8:ec:6a:71: 2a:14:d8:99:9a:cf:0f:37:34:fd:b8:44:8d:85:ff:c8:1f:f5: 74:59:21:65:d4:ef:dc:f3:c4:4c:f7:92:b1:9c:3c:0c:e7:52: ae:44:96:ae:b9:a1:83:d1:e8:20:58:05:95:92:09:e0:5c:10: 4e:ff:59:e3:21:bb:59:0b:46:69:cf:e0:c9:5f:c3:56:84:65: da:73:88:d9:74:6e:5c:74:d9:cb:64:81:4d:95:db:3a:bf:10: 30:8f:2d:3f:64:ec:bc:5e:e1:6f:53:da:50:1e:25:7b:2d:e0: 55:66:0d:1d:14:30:63:5f:ea:7b:f6:da:a4:84:0c:1f:f6:9f: 86:1e:d1:9f:4d:bd:db:7c:58:a6:a8:50:22:cc:93:40:f4:80: 97:a5:40:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2QjAxMTAvBgNVBAUTKEZDNzRCMjVDMERBRDg5M0UxOUU1MjJEQUQ5RDlDMDEy RUI4MkY1ODkwHhcNMjUwOTE3MDAzMzU3WhcNMjUwOTI0MDAzMzU3WjAYMRYwFAYD VQQDEw02OGNhMDFmNS05NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnT7NvqZqq+3KpAvtKE4XydvpsKwJDxRsMlYkGSGGmPXOSotIjfX+miMX6BnN p9eCS8J57gpABXR/qiI+gKwG7eQiuXwEfIM9n93cOeUDOikFFi+kugVajkpA3Gx1 1PIldh3xFpI4MyDbacgEiI/U01C8xCrWN706/84AVwE6gBZzuufRlfbi15tPxRO9 MiF2RoqzUZ0FV5x+C0V6Ms17vkyGZU6+5NNw/796A9YSYvfhPsBvGCPlTrScS5pN J5wbFe5wlGkQH/+CSei7U1EE8dGgvErg9RiwQ8NqLbWk8aj+N/c7mSAV17pIWBN3 J0XAJv7m+/OrJBWwlhcUc6a60wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa60cBQ tVnz8LWterZKfhK7HrQUMB8GA1UdIwQYMBaAFPx0slwNrYk+GeUi2tnZwBLrgvWJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlUNFo1U0xhMmRuQUV1dUM5 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IU3lYQTJ0aVQ0WjVTTGEyZG5BRXV1QzlZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlU NFo1U0xhMmRuQUV1dUM5WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDKbh+tzq64QGHMc19+1x3N0C1X065YI8CCxx8kPnYk+N+u4rSzgq4 K15Bw9D9/ThbKl5gkndggcE19kXQtfrbU1Cn5qFiuKeGj/OSmq1N0pMmK1T9UIOG lpYTID1EWEFGXH80rIeWT/jsanEqFNiZms8PNzT9uESNhf/IH/V0WSFl1O/c88RM 95KxnDwM51KuRJauuaGD0eggWAWVkgngXBBO/1njIbtZC0Zpz+DJX8NWhGXac4jZ dG5cdNnLZIFNlds6vxAwjy0/ZOy8XuFvU9pQHiV7LeBVZg0dFDBjX+p79tqkhAwf 9p+GHtGfTb3bfFimqFAizJNA9ICXpUA/ -----END CERTIFICATE-----Generated at Thu Sep 18 22:00:27 2025 by rpki-client