$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: e/U0ai+SACd0uszxgO+7GipJg9z61kyYhg5uNhsfd9c= Subject key identifier: 7F:22:98:03:06:7C:35:AA:D5:7E:F9:90:CD:A5:93:83:87:36:D4:4C Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 84 Signing time: Fri 19 Sep 2025 07:18:32 +0000 Manifest this update: Fri 19 Sep 2025 07:18:31 +0000 Manifest next update: Fri 26 Sep 2025 07:18:31 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: l4nzb2Ut/h9NzVfHe2ht99yM3VsT8Uv2KeZHPOFlMJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Sep 19 07:18:31 2025 GMT Not After : Sep 26 07:18:31 2025 GMT Subject: CN=68cd03c7-a281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:88:5e:96:18:aa:d3:6f:36:6e:62:2f:a7: e2:85:ee:4b:cf:f3:e9:cd:c0:ee:ad:45:80:35:00: ed:7b:04:9f:31:a6:d4:83:af:77:32:ed:a2:e7:5b: 43:2f:bc:7c:53:41:41:88:74:89:3d:26:f7:39:05: 75:b3:40:e9:db:fe:a1:7d:4c:c7:19:d0:ae:ae:6a: 40:cd:ce:d1:7c:74:0d:80:85:fc:15:6d:17:70:44: 90:b5:1b:3d:9f:1d:c2:36:41:73:3e:6b:e5:16:52: 0e:f7:3f:e0:a9:c3:0e:73:2f:63:8a:78:10:b8:7d: 3c:d5:7e:a9:5b:be:7c:46:49:1c:47:c3:a0:f6:e0: 49:16:4b:2a:f9:c4:4f:72:4d:f0:3f:d2:0e:a1:94: db:cf:71:c0:e2:b9:24:ec:01:d8:b4:81:1d:85:d4: 30:46:b6:eb:fb:dc:93:46:7f:56:8d:f2:ff:77:a5: e0:2a:db:bb:12:20:65:24:75:ff:31:18:a7:0c:8e: 55:70:1f:8a:e6:60:61:51:e9:0b:ab:d0:cc:1a:1e: 86:4c:b7:06:46:f1:71:12:a9:36:0d:45:1b:42:b2: c9:bf:64:2a:a3:d2:8a:d9:0a:4c:d2:cf:3f:16:f6: 83:fa:6a:72:47:99:eb:85:22:5f:64:09:f7:c9:b0: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:22:98:03:06:7C:35:AA:D5:7E:F9:90:CD:A5:93:83:87:36:D4:4C X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:1c:12:d8:58:57:ac:1d:7f:f2:8c:b6:13:9a:e5:52:5f: 9c:6f:37:31:b2:3b:47:57:be:dd:30:56:6f:7a:45:c2:2c:f1: ff:e6:22:b1:4a:7e:f6:48:78:e3:94:2d:d2:20:70:ed:0d:f2: 53:3c:10:38:ab:05:20:df:32:42:08:a7:53:a8:64:d7:9e:51: 11:93:fb:52:bb:8d:59:b8:98:b4:9d:85:9d:d6:d5:28:ac:c0: 24:2a:99:cf:45:b3:f7:d4:bc:b1:c3:77:71:21:82:6c:a7:fe: 3e:87:83:0f:ad:47:82:ed:cc:d4:b9:53:ee:04:99:ce:d8:12: 3d:c3:1e:03:57:bf:d5:bc:0c:8b:eb:01:c1:8f:d6:5d:bb:44: ac:08:df:cb:eb:82:d6:89:7e:93:f1:0c:a6:ae:cd:d3:6f:3b: 63:6d:4c:6b:83:5a:61:66:2b:d7:28:a3:1e:05:1f:a6:41:5a: 27:2f:31:1d:ef:eb:b1:ab:41:19:0f:36:d8:fe:6d:d0:a2:fb: 3c:1c:a7:25:bb:34:de:1e:27:8d:dc:20:bd:cd:bd:e4:5d:d6: 21:97:f2:48:8d:81:e2:00:65:e2:b0:c4:99:78:15:2d:64:0d: a0:b6:f5:fe:ae:4c:4d:a8:9b:b9:d3:b8:10:3e:96:e6:39:23: 4e:10:2d:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjUwOTE5MDcxODMxWhcNMjUwOTI2MDcxODMxWjAYMRYwFAYD VQQDEw02OGNkMDNjNy1hMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TuIXpYYqtNvNm5iL6fihe5Lz/PpzcDurUWANQDtewSfMabUg693Mu2i51tD L7x8U0FBiHSJPSb3OQV1s0Dp2/6hfUzHGdCurmpAzc7RfHQNgIX8FW0XcESQtRs9 nx3CNkFzPmvlFlIO9z/gqcMOcy9jingQuH081X6pW758RkkcR8Og9uBJFksq+cRP ck3wP9IOoZTbz3HA4rkk7AHYtIEdhdQwRrbr+9yTRn9WjfL/d6XgKtu7EiBlJHX/ MRinDI5VcB+K5mBhUekLq9DMGh6GTLcGRvFxEqk2DUUbQrLJv2Qqo9KK2QpM0s8/ FvaD+mpyR5nrhSJfZAn3ybBmIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8imAMG fDWq1X75kM2lk4OHNtRMMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmRhwS2FhXrB1/8oy2E5rlUl+cbzcxsjtHV77dMFZvekXCLPH/5iKx Sn72SHjjlC3SIHDtDfJTPBA4qwUg3zJCCKdTqGTXnlERk/tSu41ZuJi0nYWd1tUo rMAkKpnPRbP31Lyxw3dxIYJsp/4+h4MPrUeC7czUuVPuBJnO2BI9wx4DV7/VvAyL 6wHBj9Zdu0SsCN/L64LWiX6T8Qymrs3TbztjbUxrg1phZivXKKMeBR+mQVonLzEd 7+uxq0EZDzbY/m3Qovs8HKcluzTeHieN3CC9zb3kXdYhl/JIjYHiAGXisMSZeBUt ZA2gtvX+rkxNqJu507gQPpbmOSNOEC3Z -----END CERTIFICATE-----Generated at Fri Sep 19 15:15:23 2025 by rpki-client