$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft File: hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json) Hash identifier: jOqF3DsgdF3gx4R0H7oa5Kdx+O/B734QLQuNY+8IEy0= Subject key identifier: 6A:A6:7F:CD:2C:D7:F6:96:38:6C:D8:10:A0:EA:82:7E:BE:C7:AC:FD Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft Manifest number: 0D Signing time: Wed 17 Sep 2025 08:51:27 +0000 Manifest this update: Wed 17 Sep 2025 08:51:26 +0000 Manifest next update: Wed 24 Sep 2025 08:51:26 +0000 Files and hashes: 1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: b3vBQ6ZUhycoTX4Jrm7hlvFHJ2Dr2DACImk5EeOvTA0=) 2: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: FD/7U7XSmgg6Fwdvyfw/wFBPedO+DNiEk5bwRU3tAxw=) 3: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Validity Not Before: Sep 17 08:51:26 2025 GMT Not After : Sep 24 08:51:26 2025 GMT Subject: CN=68ca768e-48b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:61:da:ac:db:5e:a6:5e:4e:f8:0d:b1:61:d9: 22:99:f1:64:91:43:d5:fb:71:a3:72:76:8a:08:b3: b3:db:2e:eb:8e:14:b9:c1:3b:fe:30:6c:5f:ed:56: 43:2f:97:d6:d9:13:35:3a:08:68:af:4d:56:01:77: 13:ad:ef:ea:6e:5b:b7:99:b9:f3:48:15:68:15:1e: 8c:76:89:ac:1c:15:01:29:12:c2:38:7f:ed:89:b0: 41:52:1b:d6:16:53:16:bd:b8:7b:45:1b:20:54:95: 26:16:10:af:84:7d:a8:88:b1:0d:9e:fc:7a:b5:f8: 11:35:59:3c:82:44:92:ef:df:b4:d4:34:24:e6:c6: 38:55:39:eb:e0:8c:9b:5c:f8:3b:fe:4f:35:d2:a9: c6:d9:8b:3c:54:f3:65:40:f5:43:b9:dc:8d:87:76: 56:20:69:d7:2e:a0:8b:b3:52:5d:4d:0c:65:c0:ba: fa:cd:32:f1:94:90:f4:26:94:5a:6a:48:8f:42:06: 31:96:46:ed:d9:1f:27:5b:c9:bb:2d:a3:cc:2f:76: 80:86:fd:86:64:26:ad:87:80:27:e0:ac:77:6a:07: b1:0b:f7:45:53:f2:b4:ea:cd:03:5f:28:9c:60:54: ad:48:68:69:bc:b6:66:3b:00:63:a5:ba:dc:81:00: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A6:7F:CD:2C:D7:F6:96:38:6C:D8:10:A0:EA:82:7E:BE:C7:AC:FD X509v3 Authority Key Identifier: keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:22:fe:d9:39:b5:c5:63:8d:84:1e:db:ca:d3:e8:ba:43:66: 2a:d9:f9:08:46:c4:d9:c2:27:a1:ec:6e:76:0c:53:ad:33:c1: c4:ea:63:c7:4f:0a:8a:99:07:24:f6:05:ce:e5:b8:06:28:14: da:1c:8c:77:4b:cf:9a:8e:91:69:7b:e5:38:19:cf:41:81:aa: c0:18:e5:b5:75:b4:5b:89:f1:4a:0e:22:d0:c0:73:5e:6b:3f: 23:32:df:7d:ca:c6:1f:e2:2d:03:d6:e8:12:53:c4:a7:42:92: 8e:0b:38:a8:48:e2:0c:94:42:0c:37:0e:d1:f1:f8:ea:c4:a0: 2d:78:99:34:a2:f8:9a:c6:82:07:5b:32:59:e4:9b:53:cc:3b: 84:fb:7f:7b:e8:52:8a:b4:22:aa:1d:d8:52:88:42:ec:d2:db: bc:11:6b:35:2b:85:02:fb:d6:e1:4a:d0:0d:d4:55:5a:cb:a2: a3:5a:6c:a4:56:68:33:81:f4:a0:88:e9:e1:32:d0:d8:07:d7: 69:e5:42:37:0b:08:77:b4:37:8c:e3:93:29:4e:8e:8a:d3:9a: b6:8a:7c:2b:58:c6:7a:83:08:15:b1:0b:83:31:2c:3a:8a:72: de:11:b6:19:1e:80:cb:f6:8b:71:3f:7f:5f:51:62:12:7a:30: 71:e4:fe:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzU2NzExMC8GA1UEBRMoODU2QkMxOUZFRUJFQjBCNTU5NUYwM0JCMTIxNDgzRTUz QTgxMDNDQzAeFw0yNTA5MTcwODUxMjZaFw0yNTA5MjQwODUxMjZaMBgxFjAUBgNV BAMTDTY4Y2E3NjhlLTQ4YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkYdqs216mXk74DbFh2SKZ8WSRQ9X7caNydooIs7PbLuuOFLnBO/4wbF/tVkMv l9bZEzU6CGivTVYBdxOt7+puW7eZufNIFWgVHox2iawcFQEpEsI4f+2JsEFSG9YW Uxa9uHtFGyBUlSYWEK+EfaiIsQ2e/Hq1+BE1WTyCRJLv37TUNCTmxjhVOevgjJtc +Dv+TzXSqcbZizxU82VA9UO53I2HdlYgadcuoIuzUl1NDGXAuvrNMvGUkPQmlFpq SI9CBjGWRu3ZHydbybsto8wvdoCG/YZkJq2HgCfgrHdqB7EL90VT8rTqzQNfKJxg VK1IaGm8tmY7AGOlutyBAItZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaqZ/zSzX 9pY4bNgQoOqCfr7HrP0wHwYDVR0jBBgwFoAUhWvBn+6+sLVZXwO7EhSD5TqBA8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTY3LzQwRUYyRkQwODZD RjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFd2Qm4tNi1zTFZaWHdPN0VoU0Q1VHFCQTh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NTY3LzQwRUYyRkQwODZDRjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xW Wlh3TzdFaFNENVRxQkE4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAIi/tk5tcVjjYQe28rT6LpDZirZ+QhGxNnCJ6HsbnYMU60zwcTqY8dP CoqZByT2Bc7luAYoFNocjHdLz5qOkWl75TgZz0GBqsAY5bV1tFuJ8UoOItDAc15r PyMy333Kxh/iLQPW6BJTxKdCko4LOKhI4gyUQgw3DtHx+OrEoC14mTSi+JrGggdb Mlnkm1PMO4T7f3voUoq0Iqod2FKIQuzS27wRazUrhQL71uFK0A3UVVrLoqNabKRW aDOB9KCI6eEy0NgH12nlQjcLCHe0N4zjkylOjorTmraKfCtYxnqDCBWxC4MxLDqK ct4RthkegMv2i3E/f19RYhJ6MHHk/gU= -----END CERTIFICATE-----Generated at Fri Sep 19 00:46:56 2025 by rpki-client