$ rpki-client -vvf rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft File: hQaYWfujzd6OwbgaHgTdYFCzgRM.mft (raw, json) Hash identifier: zA+anW7gVmkFGhr1q11h5Gc8M3/7YZYCzAzS6b2Esds= Subject key identifier: 6F:CA:93:FF:89:DB:63:0A:B4:61:82:BE:4F:DB:46:EA:DE:4B:7B:40 Authority key identifier: 85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 Certificate issuer: /CN=A91509C4/serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Certificate serial: 34BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft Manifest number: 34BE Signing time: Thu 18 Sep 2025 14:36:12 +0000 Manifest this update: Thu 18 Sep 2025 14:36:11 +0000 Manifest next update: Thu 25 Sep 2025 14:36:11 +0000 Files and hashes: 1: hQaYWfujzd6OwbgaHgTdYFCzgRM.crl (hash: P9Sq3ogYU7TEx/G+P6tvBAAtRnCRhcSY7pRzQg/qMTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13502 (0x34be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509C4, serialNumber=85069859FBA3CDDE8EC1B81A1E04DD6050B38113 Validity Not Before: Sep 18 14:36:11 2025 GMT Not After : Sep 25 14:36:11 2025 GMT Subject: CN=68cc18dc-51ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:d2:1e:0d:cb:2e:98:fd:ee:18:3d:88:41: 31:3a:af:98:09:3b:ac:df:32:ff:ca:ad:9a:bf:4f: 0a:3f:a2:c1:33:e9:80:01:45:30:b6:1e:db:a9:dc: f7:9e:0c:c8:05:5b:43:c7:a1:d4:23:be:44:57:53: e5:2b:4c:75:6e:9e:3e:94:48:23:42:58:62:e8:90: 04:f7:63:9e:ad:15:b1:9e:dc:dc:6b:ee:67:5d:2c: 4a:c8:7f:02:aa:b6:fa:6a:5b:68:38:e3:b1:a4:8c: dc:f2:01:77:81:a6:04:86:d3:de:ba:96:09:1d:7f: 79:c7:3a:87:99:98:27:c8:89:b8:16:45:ac:d0:63: 49:53:76:54:cd:b8:7f:f4:34:5a:dd:5a:e5:49:6d: 26:1c:f6:62:41:01:8c:4a:54:cc:0a:15:6a:dc:4d: 25:34:c9:33:f6:3c:e8:6c:3e:c6:d0:cf:da:cb:3d: 04:b0:08:3b:48:8e:83:36:16:63:42:58:bb:a6:cc: aa:d0:0b:0f:57:13:f5:6e:1d:ff:18:2f:20:58:9c: 67:57:2e:e2:55:0f:57:52:bc:e7:13:83:b3:67:3a: 6a:cf:7e:d9:5a:e9:f2:75:7f:09:b6:a2:da:74:8d: ae:00:1b:1d:fd:57:58:f2:3e:86:14:ba:17:85:01: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CA:93:FF:89:DB:63:0A:B4:61:82:BE:4F:DB:46:EA:DE:4B:7B:40 X509v3 Authority Key Identifier: keyid:85:06:98:59:FB:A3:CD:DE:8E:C1:B8:1A:1E:04:DD:60:50:B3:81:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hQaYWfujzd6OwbgaHgTdYFCzgRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509C4/4B8961381D8B11E28A33C7E508B02CD2/hQaYWfujzd6OwbgaHgTdYFCzgRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:05:fd:74:42:b9:19:9b:a4:3f:d9:79:0b:34:b3:b2:a7:c3: 64:d0:93:57:2c:0d:13:9b:4f:4a:3d:13:41:6b:45:9d:fe:ed: e4:44:c0:f0:de:4f:36:2d:96:5b:cd:6f:80:84:e8:04:73:74: e2:34:4f:98:06:3c:36:27:2d:f5:3f:e2:ac:a9:83:51:59:1f: fe:50:8c:2c:3a:6b:19:0f:11:01:32:60:34:6b:45:d2:c1:72: b5:e9:cc:28:00:c4:53:be:3e:af:4b:8d:5d:36:ce:85:87:53: 29:a5:24:bd:13:24:ed:fd:4c:7b:62:96:d1:e9:d6:8b:74:fb: d1:5f:88:f0:1b:d8:cb:f7:18:c2:3b:fc:09:05:08:0c:e9:9f: 75:c9:34:6e:77:d4:b7:4e:b1:28:06:b7:08:b5:a3:c2:d9:f5: b3:f9:6c:ae:1a:e6:a4:6e:c8:e9:f1:d0:d0:fa:4e:cb:1a:cc: 14:ab:d5:d2:d2:94:88:42:29:dd:1b:60:7a:98:f7:62:2e:d9: d0:b8:47:9e:e4:1c:13:62:5d:d4:5c:72:1f:74:fd:ba:01:ba: ef:a4:f5:e6:9a:a4:58:5e:bd:fd:06:cc:a2:33:e3:f1:49:35: e7:8f:27:90:d4:47:7f:6f:68:33:41:b5:8f:08:b0:23:bd:7a: be:4f:18:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QzQxMTAvBgNVBAUTKDg1MDY5ODU5RkJBM0NEREU4RUMxQjgxQTFFMDRERDYw NTBCMzgxMTMwHhcNMjUwOTE4MTQzNjExWhcNMjUwOTI1MTQzNjExWjAYMRYwFAYD VQQDEw02OGNjMThkYy01MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcjSHg3LLpj97hg9iEExOq+YCTus3zL/yq2av08KP6LBM+mAAUUwth7bqdz3 ngzIBVtDx6HUI75EV1PlK0x1bp4+lEgjQlhi6JAE92OerRWxntzca+5nXSxKyH8C qrb6altoOOOxpIzc8gF3gaYEhtPeupYJHX95xzqHmZgnyIm4FkWs0GNJU3ZUzbh/ 9DRa3VrlSW0mHPZiQQGMSlTMChVq3E0lNMkz9jzobD7G0M/ayz0EsAg7SI6DNhZj Qli7psyq0AsPVxP1bh3/GC8gWJxnVy7iVQ9XUrznE4OzZzpqz37ZWunydX8JtqLa dI2uABsd/VdY8j6GFLoXhQGK6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/Kk/+J 22MKtGGCvk/bRureS3tAMB8GA1UdIwQYMBaAFIUGmFn7o83ejsG4Gh4E3WBQs4ET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlDNC80Qjg5NjEzODFE OEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpkNk93YmdhSGdUZFlGQ3pn Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hRYVlXZnVqemQ2T3diZ2FIZ1RkWUZDemdSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlDNC80Qjg5NjEzODFEOEIxMUUyOEEzM0M3RTUwOEIwMkNEMi9oUWFZV2Z1anpk Nk93YmdhSGdUZFlGQ3pnUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvBf10QrkZm6Q/2XkLNLOyp8Nk0JNXLA0Tm09KPRNBa0Wd/u3kRMDw 3k82LZZbzW+AhOgEc3TiNE+YBjw2Jy31P+KsqYNRWR/+UIwsOmsZDxEBMmA0a0XS wXK16cwoAMRTvj6vS41dNs6Fh1MppSS9EyTt/Ux7YpbR6daLdPvRX4jwG9jL9xjC O/wJBQgM6Z91yTRud9S3TrEoBrcItaPC2fWz+WyuGuakbsjp8dDQ+k7LGswUq9XS 0pSIQindG2B6mPdiLtnQuEee5BwTYl3UXHIfdP26AbrvpPXmmqRYXr39BsyiM+Px STXnjyeQ1Ed/b2gzQbWPCLAjvXq+Txij -----END CERTIFICATE-----Generated at Fri Sep 19 01:18:42 2025 by rpki-client