$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: cgleUk5Yp+wBi5EdueAKwNn9NKeSI31Z0HqwZQy+kwk= Subject key identifier: 5C:C0:99:CB:D7:3F:24:19:32:1B:CA:CC:32:8D:76:42:B6:37:8B:40 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 85 Signing time: Fri 19 Sep 2025 07:18:20 +0000 Manifest this update: Fri 19 Sep 2025 07:18:20 +0000 Manifest next update: Fri 26 Sep 2025 07:18:20 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: PNhfX1X3IbKZu12SauYIT8aNmHAdOzT2iSp2Q/IhUGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Sep 19 07:18:20 2025 GMT Not After : Sep 26 07:18:20 2025 GMT Subject: CN=68cd03bc-6419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:e7:55:9d:fa:76:71:ac:5d:bc:b7:76:3b: 32:72:44:f2:e0:34:00:da:a1:3c:97:b7:99:ad:0d: 5c:41:34:9f:db:7c:f3:bb:ba:fd:cd:bb:27:0c:5b: 9c:17:c3:30:2c:81:50:c6:2c:62:dd:af:6d:aa:3a: 88:b8:a5:3a:2b:a0:62:86:34:80:74:1c:ce:d0:8f: df:7b:a3:83:07:9d:9c:e7:ef:7c:6f:36:c9:88:cf: f8:99:84:5b:7c:b6:0c:ff:8b:0d:e6:73:cb:ca:db: d2:db:f3:56:38:1f:4d:ad:ce:ed:4c:47:e9:56:47: 8c:f2:c7:c2:f7:37:11:ec:6a:d6:8f:57:7d:e6:67: 7c:4b:4a:eb:f3:46:42:96:f8:df:6b:93:b4:c5:97: 2c:04:26:8e:b5:43:37:df:78:ed:84:19:73:fb:3d: 66:82:3b:bb:ce:7d:61:76:55:b8:70:66:45:5f:58: e3:db:d9:eb:80:31:f4:0b:71:5e:64:2d:8c:62:78: 9a:a8:a0:b5:69:85:b0:07:be:38:bb:11:70:8a:57: a1:bc:f3:84:de:d5:4c:dc:c6:96:f6:d9:f4:b5:29: 3c:5a:1a:92:d5:a9:e7:b7:05:1a:0e:d7:9a:c6:77: d0:7a:79:10:c3:a0:49:97:7e:ab:12:d2:3d:01:c8: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C0:99:CB:D7:3F:24:19:32:1B:CA:CC:32:8D:76:42:B6:37:8B:40 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:31:f9:2f:54:f4:90:ca:2d:ac:35:28:49:47:df:09:43:06: 17:09:1c:48:c9:48:be:91:36:19:bc:00:65:4e:0a:4d:b2:a2: e1:c0:c3:49:20:1a:9f:7b:f7:65:40:61:d7:97:72:24:2c:cc: 3f:12:28:77:3b:d2:a0:0d:c5:31:07:e9:ea:9f:be:3f:80:2e: 15:c5:62:fc:6a:a6:5b:78:a9:b3:46:92:e6:1a:a6:ef:94:b8: cb:eb:47:6e:d4:b2:45:18:e8:2d:0d:65:24:88:36:be:ed:6c: 2e:c1:a0:7b:f4:88:33:2c:a8:9e:0b:ed:c2:fe:1b:30:9d:2c: 0d:98:2e:7a:15:f6:ff:10:fc:70:54:36:03:61:42:5e:9f:b8: 42:36:89:aa:8d:04:a5:7b:0a:47:6e:fe:3c:da:21:75:90:8f: 28:ba:3d:d7:2d:da:20:a5:47:ec:4c:01:7f:f5:7e:c3:11:55: 72:7b:a1:67:8d:65:fd:21:eb:a3:7b:fb:23:7b:93:8e:bc:fc: 5b:b4:c6:d1:9b:79:51:4b:c2:e7:6f:8c:71:2c:ee:d6:5d:07: 20:f2:3f:ff:4e:c4:1a:ce:23:f1:7c:92:a9:91:21:e7:5d:13: c9:d4:7b:4b:65:25:76:ad:d2:58:8c:3a:f1:cd:6d:06:d2:9b: b6:5b:fc:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjUwOTE5MDcxODIwWhcNMjUwOTI2MDcxODIwWjAYMRYwFAYD VQQDEw02OGNkMDNiYy02NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s3nVZ36dnGsXby3djsyckTy4DQA2qE8l7eZrQ1cQTSf23zzu7r9zbsnDFuc F8MwLIFQxixi3a9tqjqIuKU6K6BihjSAdBzO0I/fe6ODB52c5+98bzbJiM/4mYRb fLYM/4sN5nPLytvS2/NWOB9Nrc7tTEfpVkeM8sfC9zcR7GrWj1d95md8S0rr80ZC lvjfa5O0xZcsBCaOtUM333jthBlz+z1mgju7zn1hdlW4cGZFX1jj29nrgDH0C3Fe ZC2MYniaqKC1aYWwB744uxFwilehvPOE3tVM3MaW9tn0tSk8WhqS1anntwUaDtea xnfQenkQw6BJl36rEtI9AcjdowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzAmcvX PyQZMhvKzDKNdkK2N4tAMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASMfkvVPSQyi2sNShJR98JQwYXCRxIyUi+kTYZvABlTgpNsqLhwMNJ IBqfe/dlQGHXl3IkLMw/Eih3O9KgDcUxB+nqn74/gC4VxWL8aqZbeKmzRpLmGqbv lLjL60du1LJFGOgtDWUkiDa+7WwuwaB79IgzLKieC+3C/hswnSwNmC56Ffb/EPxw VDYDYUJen7hCNomqjQSlewpHbv482iF1kI8ouj3XLdogpUfsTAF/9X7DEVVye6Fn jWX9Ieuje/sje5OOvPxbtMbRm3lRS8Lnb4xxLO7WXQcg8j//TsQaziPxfJKpkSHn XRPJ1HtLZSV2rdJYjDrxzW0G0pu2W/wj -----END CERTIFICATE-----Generated at Fri Sep 19 12:37:11 2025 by rpki-client