$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json) Hash identifier: Kjj04yjkM2GKho+/T1w+iFzqb06BmdNmIhJbUKR0ihY= Subject key identifier: 6A:8F:44:E8:6B:3D:A3:B3:7D:6B:BD:8C:06:D5:96:11:6C:57:45:36 Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft Manifest number: 05 Signing time: Wed 17 Sep 2025 08:55:32 +0000 Manifest this update: Wed 17 Sep 2025 08:55:31 +0000 Manifest next update: Wed 24 Sep 2025 08:55:31 +0000 Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: 1KdAM9SnlBt5qdB4DgkJPwfPWWLs0igTsfKsjHNKK9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Sep 17 08:55:31 2025 GMT Not After : Sep 24 08:55:31 2025 GMT Subject: CN=68ca7784-40fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:f1:3d:af:5d:26:dc:44:c0:d0:65:08:50: 7f:1d:1d:72:23:02:30:77:a1:f2:57:b9:f5:ab:bd: 00:8b:ab:38:9a:cc:44:14:11:d2:22:2c:b9:3f:f6: dc:12:5b:b2:2b:15:7e:fc:9f:c7:6f:02:66:cd:c2: 61:c4:2e:bb:fe:84:94:1a:1d:b5:83:05:27:8d:44: 68:bc:87:d3:30:1a:d6:c9:89:33:af:ca:9e:1c:6c: 65:21:89:e8:16:a0:f4:7c:52:16:eb:c9:f1:2e:de: 2c:0d:8b:7d:ba:09:30:f4:56:f5:a8:21:b4:93:85: 9f:eb:87:4c:78:66:b8:bc:37:81:0c:11:37:f4:5c: eb:da:69:d0:c3:35:f4:11:40:41:05:9f:4b:48:3c: e3:3d:f7:1f:c0:3f:36:a8:22:16:4c:3a:dc:ba:a3: 80:fc:64:b7:05:6d:e4:70:9a:6a:4c:53:5c:79:b9: fc:4d:b6:46:30:59:2a:8f:1f:1b:3b:a4:3e:ea:de: 50:82:8d:04:f5:9e:bd:a8:4d:03:f2:25:39:5e:2d: c4:49:c6:df:a4:2b:5a:7b:ed:0b:55:01:63:23:05: 8d:ad:59:d5:c3:56:63:6e:32:4a:e2:2a:1e:a5:26: e0:5c:d7:ba:bc:f9:55:e3:44:e3:eb:7f:68:c1:61: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:44:E8:6B:3D:A3:B3:7D:6B:BD:8C:06:D5:96:11:6C:57:45:36 X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:e8:97:bf:44:69:7b:11:f5:8b:da:69:0f:fc:96:8c:9f:f3: d4:c8:7d:f5:40:ed:ac:ef:0c:d7:f9:57:be:c3:67:d5:0b:2d: e8:fe:d4:31:43:ef:a9:e0:d3:67:7e:82:e4:d2:4c:5c:0b:2a: ad:56:69:16:f5:49:9c:9e:0d:db:4b:a2:09:be:22:0a:ce:a1: a9:50:62:08:6b:8c:4f:92:88:00:a6:43:ed:6b:69:b1:dc:32: 4c:1d:61:53:cc:a2:f5:aa:16:17:13:8c:e5:e8:ef:e5:3e:7f: 37:61:69:ad:04:36:a0:c3:21:3d:07:0c:04:52:9d:67:16:36: 8e:7c:7b:5e:a4:33:79:a8:37:d5:1b:eb:f7:08:04:ca:5d:48: 48:27:19:90:5d:06:a6:8b:2e:9d:82:d2:69:f8:90:57:38:62: c6:01:e6:a1:02:fe:38:d7:d3:0a:b1:a7:59:81:4b:b0:40:ee: 6a:3b:a1:6f:0e:4d:2c:ce:eb:20:46:e1:2d:9f:6a:85:23:ad: c6:7d:77:93:e6:a1:1a:c9:1c:ef:02:9c:0f:57:41:52:90:54: f4:99:dc:fa:ea:f9:64:d3:c7:9e:b1:5d:ca:9c:1d:82:ce:2b: 7d:ad:72:19:aa:62:ff:7a:32:52:14:05:3f:8f:03:f7:34:83: a5:ba:a6:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNTA5MTcwODU1MzFaFw0yNTA5MjQwODU1MzFaMBgxFjAUBgNV BAMTDTY4Y2E3Nzg0LTQwZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6VvE9r10m3ETA0GUIUH8dHXIjAjB3ofJXufWrvQCLqziazEQUEdIiLLk/9twS W7IrFX78n8dvAmbNwmHELrv+hJQaHbWDBSeNRGi8h9MwGtbJiTOvyp4cbGUhiegW oPR8UhbryfEu3iwNi326CTD0VvWoIbSThZ/rh0x4Zri8N4EMETf0XOvaadDDNfQR QEEFn0tIPOM99x/APzaoIhZMOty6o4D8ZLcFbeRwmmpMU1x5ufxNtkYwWSqPHxs7 pD7q3lCCjQT1nr2oTQPyJTleLcRJxt+kK1p77QtVAWMjBY2tWdXDVmNuMkriKh6l JuBc17q8+VXjROPrf2jBYRP3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUao9E6Gs9 o7N9a72MBtWWEWxXRTYwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV QkNaUkNCN0hYQW1aMzhKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjol79EaXsR9YvaaQ/8loyf89TIffVA7azvDNf5V77DZ9ULLej+1DFD 76ng02d+guTSTFwLKq1WaRb1SZyeDdtLogm+IgrOoalQYghrjE+SiACmQ+1rabHc MkwdYVPMovWqFhcTjOXo7+U+fzdhaa0ENqDDIT0HDARSnWcWNo58e16kM3moN9Ub 6/cIBMpdSEgnGZBdBqaLLp2C0mn4kFc4YsYB5qEC/jjX0wqxp1mBS7BA7mo7oW8O TSzO6yBG4S2faoUjrcZ9d5PmoRrJHO8CnA9XQVKQVPSZ3Prq+WTTx56xXcqcHYLO K32tchmqYv96MlIUBT+PA/c0g6W6plU= -----END CERTIFICATE-----Generated at Thu Sep 18 23:45:34 2025 by rpki-client