$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: PzvKTMvJf98jZmCKzo1LTtngjFh7OBXT9jNbTqh9ySg= Subject key identifier: 1E:59:4F:04:4F:B7:0C:7C:C7:AC:BB:94:52:17:ED:60:DE:02:AA:B8 Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1D53 Signing time: Thu 18 Sep 2025 16:14:57 +0000 Manifest this update: Thu 18 Sep 2025 16:14:56 +0000 Manifest next update: Thu 25 Sep 2025 16:14:56 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: FPZq0Bc/Q9ZpHA/QlJm7Ur2wlex80bvv0SLYX6pWkRY=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: bD5fDxaaGSUwPwbrYDQw/+LS1pV4Lc6xbyyKLC5ox2c=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: T9CcmOYBnNKsJ74gzkX91oYJBjZ0iZKwkKctLlhYFiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7532 (0x1d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Sep 18 16:14:56 2025 GMT Not After : Sep 25 16:14:56 2025 GMT Subject: CN=68cc3001-c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:55:f1:e7:f7:c0:66:4c:de:51:48:7f:74: 58:1b:34:bb:ea:41:78:f0:38:c8:8c:38:29:e5:b9: b0:2a:87:9b:ca:b1:e0:b1:1c:ed:3c:09:4b:df:16: 7e:49:d9:b0:a7:4c:5f:44:3e:60:16:55:14:ab:29: a2:4f:0e:6a:fd:dd:a9:4e:d6:9d:16:6c:2d:ce:d4: c2:55:a6:10:9a:cb:a5:ad:46:97:44:f1:6b:9c:83: 5d:c0:f5:f8:6b:9a:bc:cf:b4:3d:d8:dc:ed:87:a4: 1c:27:17:7d:e6:ce:5b:23:37:9b:f5:23:a9:6d:98: e6:56:c2:16:a6:e4:db:32:9c:d4:1b:39:bd:2f:52: 91:ba:3f:40:96:c6:3b:79:cd:0b:e9:1e:f3:e2:6b: d0:99:85:03:e2:c7:0c:ae:8b:4c:26:47:72:56:d1: e5:8b:db:86:d5:b1:5c:8c:b9:be:16:82:d8:7c:fb: 19:71:24:b0:33:5a:24:5b:12:ef:e2:64:48:d0:d0: f0:3b:69:85:14:d4:33:a1:c9:cb:fd:a0:09:e6:72: 4a:6e:2c:d0:4f:a5:8c:e4:05:94:db:8d:99:32:8d: 52:f1:61:a0:b9:8d:f3:9f:37:94:99:58:53:25:cd: 59:9f:1e:e6:2c:22:d8:fa:92:a8:45:13:27:16:43: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:4F:04:4F:B7:0C:7C:C7:AC:BB:94:52:17:ED:60:DE:02:AA:B8 X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:68:30:da:8f:8a:37:41:48:dc:d9:c5:28:51:6b:0f:83:5a: 91:45:7a:e1:04:d0:ff:45:4a:a9:6d:83:fd:d6:34:10:b0:7b: 9c:ed:92:bf:a4:3f:4d:9a:35:4d:d8:fb:8b:4e:2a:81:5b:f5: 8a:bb:a4:12:0d:c9:4f:b0:21:92:4c:00:2b:84:2e:68:35:a8: 6b:10:e7:f4:9a:ab:b0:72:28:cb:cd:50:27:0c:a8:b2:61:61: 64:c8:ed:f0:e0:41:5c:6b:e7:2f:cc:31:af:5e:fc:66:db:bc: ca:51:96:a8:51:1c:ec:02:8d:ca:c3:ce:b8:55:55:c2:1a:c4: ed:97:83:bf:40:e5:99:77:16:5f:42:e5:50:73:71:24:5b:70: 82:6d:1d:0d:4a:d1:03:12:6d:43:ed:34:31:e8:5c:f8:92:63: 4c:23:39:c7:b1:73:53:b8:04:c1:7d:45:ff:5c:2b:00:35:79: db:1c:49:76:e6:d8:e3:ce:08:8b:da:6a:de:db:3b:8d:74:86: 43:93:36:9d:1e:20:f3:94:4e:d9:45:21:75:e9:b6:42:d1:ef: f3:ef:41:37:33:28:b0:08:bd:05:50:6d:fd:36:f2:f0:9f:13: a9:9c:62:31:75:f2:93:c9:36:87:2e:5f:f3:c1:a5:e8:89:d8: b5:66:62:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjUwOTE4MTYxNDU2WhcNMjUwOTI1MTYxNDU2WjAYMRYwFAYD VQQDEw02OGNjMzAwMS1jM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DJV8ef3wGZM3lFIf3RYGzS76kF48DjIjDgp5bmwKoebyrHgsRztPAlL3xZ+ Sdmwp0xfRD5gFlUUqymiTw5q/d2pTtadFmwtztTCVaYQmsulrUaXRPFrnINdwPX4 a5q8z7Q92Nzth6QcJxd95s5bIzeb9SOpbZjmVsIWpuTbMpzUGzm9L1KRuj9AlsY7 ec0L6R7z4mvQmYUD4scMrotMJkdyVtHli9uG1bFcjLm+FoLYfPsZcSSwM1okWxLv 4mRI0NDwO2mFFNQzocnL/aAJ5nJKbizQT6WM5AWU242ZMo1S8WGguY3znzeUmVhT Jc1Znx7mLCLY+pKoRRMnFkOIbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5ZTwRP twx8x6y7lFIX7WDeAqq4MB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChaDDaj4o3QUjc2cUoUWsPg1qRRXrhBND/RUqpbYP91jQQsHuc7ZK/ pD9NmjVN2PuLTiqBW/WKu6QSDclPsCGSTAArhC5oNahrEOf0mquwcijLzVAnDKiy YWFkyO3w4EFca+cvzDGvXvxm27zKUZaoURzsAo3Kw864VVXCGsTtl4O/QOWZdxZf QuVQc3EkW3CCbR0NStEDEm1D7TQx6Fz4kmNMIznHsXNTuATBfUX/XCsANXnbHEl2 5tjjzgiL2mre2zuNdIZDkzadHiDzlE7ZRSF16bZC0e/z70E3MyiwCL0FUG39NvLw nxOpnGIxdfKTyTaHLl/zwaXoidi1ZmJT -----END CERTIFICATE-----Generated at Thu Sep 18 20:32:31 2025 by rpki-client