$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft File: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json) Hash identifier: DFh8VfaqjFx4l5S/WT3ZzyME2kZSz7a3PqtXUXL8o+M= Subject key identifier: 4C:48:7F:6B:BD:78:09:8D:81:9D:F0:DC:E4:B7:CC:1F:9C:83:52:3F Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft Manifest number: 07C9 Signing time: Wed 20 Aug 2025 21:13:41 +0000 Manifest this update: Wed 20 Aug 2025 21:13:41 +0000 Manifest next update: Wed 27 Aug 2025 21:13:41 +0000 Files and hashes: 1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: lv+K4WexNNkiMaQV2G3cWTiNjdp9FfVf0yVSWd8JY1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6 Validity Not Before: Aug 20 21:13:41 2025 GMT Not After : Aug 27 21:13:41 2025 GMT Subject: CN=68a63a85-a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:97:35:fd:7f:d7:48:34:b9:9c:40:79:7d: f2:d6:10:8a:de:2a:8c:ba:8e:29:bd:38:b9:5c:44: dc:cd:50:16:f1:10:02:4c:3d:a8:87:d6:90:70:e3: d8:51:4e:d5:10:e3:db:53:8e:4a:7b:b0:6e:11:08: b9:59:9a:b4:2d:10:48:74:54:d3:93:62:b2:6d:ff: 3a:1c:ae:d6:ad:b0:f4:63:26:9c:78:d6:78:16:cb: 56:33:8b:bc:a9:90:b0:9b:a1:0c:93:c6:da:4f:aa: 7f:4f:4d:e7:e7:40:ed:4d:fe:89:9c:5c:0f:62:ab: 1f:56:c1:4e:61:79:67:fb:11:f5:94:5a:a7:b9:b5: 77:2c:b1:9b:3a:d7:33:04:eb:42:7a:01:a2:bd:6d: 5c:50:a8:27:34:04:48:a5:6c:c9:3e:49:20:99:cc: f7:3e:1e:ea:3a:fa:15:dc:74:35:aa:a4:ed:90:98: a7:23:c4:a3:1c:7f:a7:4b:3c:07:d3:be:d6:7e:09: 2b:e9:6b:0f:75:ed:c8:e5:91:a6:06:19:7b:17:71: 90:16:89:c4:84:4a:5d:bd:eb:c8:ed:1c:82:ab:e7: 35:96:7b:9d:9e:08:02:bb:d7:7b:10:8a:9c:36:23: 55:79:1a:02:7b:94:38:f1:3a:c4:18:52:7b:1d:17: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:48:7F:6B:BD:78:09:8D:81:9D:F0:DC:E4:B7:CC:1F:9C:83:52:3F X509v3 Authority Key Identifier: keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a8:a1:18:01:a2:ba:52:58:8f:9a:c0:4f:76:df:b3:87:a1: 32:78:9b:e5:41:3b:d8:93:67:d0:94:1f:63:b6:05:06:55:ac: 0e:d0:3b:1d:7a:18:e9:cc:5b:49:9b:84:20:e3:25:a2:e8:0b: 87:fc:92:11:d2:5b:0e:54:50:b4:80:aa:4c:58:de:74:d7:79: 98:3f:1d:a6:93:e1:55:f8:ef:10:3c:72:8d:77:b2:8e:94:4f: 0b:19:5b:fb:cf:e1:20:10:41:a1:a3:b4:3e:38:ff:47:2b:92: 3a:66:72:54:05:53:a9:fb:1c:c4:0a:71:c1:cb:9b:48:59:5f: 19:02:b3:56:ff:d6:ff:a0:af:83:82:72:15:86:e8:a6:a7:6c: 50:e3:61:66:41:6c:97:e1:c3:8e:5b:e0:31:c2:99:9b:c3:7f: 40:96:cc:10:2a:ac:91:51:9d:86:93:58:cd:d6:da:b4:2d:58: f6:91:60:55:9b:17:7d:63:de:1f:63:61:a7:10:71:b2:c3:8a: 9f:a3:84:4d:79:15:55:30:b0:49:17:a4:16:ab:11:ce:a4:9a: 02:72:09:82:9c:74:46:69:6e:57:7b:08:5a:74:dc:fa:b0:df: bb:bb:4c:5f:2c:c9:34:e9:3a:1e:ba:38:5f:e6:05:83:cf:a2: 8f:e0:95:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3NTkxMTAvBgNVBAUTKDg2MjIzMzNEQkMwNzczMzgwQkEzNzY0N0RDQzNGM0U2 NTVGMzRCQzYwHhcNMjUwODIwMjExMzQxWhcNMjUwODI3MjExMzQxWjAYMRYwFAYD VQQDEw02OGE2M2E4NS1hODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP2XNf1/10g0uZxAeX3y1hCK3iqMuo4pvTi5XETczVAW8RACTD2oh9aQcOPY UU7VEOPbU45Ke7BuEQi5WZq0LRBIdFTTk2Kybf86HK7WrbD0YyaceNZ4FstWM4u8 qZCwm6EMk8baT6p/T03n50DtTf6JnFwPYqsfVsFOYXln+xH1lFqnubV3LLGbOtcz BOtCegGivW1cUKgnNARIpWzJPkkgmcz3Ph7qOvoV3HQ1qqTtkJinI8SjHH+nSzwH 077Wfgkr6WsPde3I5ZGmBhl7F3GQFonEhEpdvevI7RyCq+c1lnudnggCu9d7EIqc NiNVeRoCe5Q48TrEGFJ7HReKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExIf2u9 eAmNgZ3w3OS3zB+cg1I/MB8GA1UdIwQYMBaAFIYiMz28B3M4C6N2R9zD8+ZV80vG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzc1OS8wOTBGNUFBQTA1 MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6Z0xvM1pIM01QejVsWHpT OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hpSXpQYndIY3pnTG8zWkgzTVB6NWxYelM4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mzc1OS8wOTBGNUFBQTA1MTkxMUVCOUQ1MERENkVDNEY5QUUwMi9oaUl6UGJ3SGN6 Z0xvM1pIM01QejVsWHpTOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qKEYAaK6UliPmsBPdt+zh6EyeJvlQTvYk2fQlB9jtgUGVawO0Dsd ehjpzFtJm4Qg4yWi6AuH/JIR0lsOVFC0gKpMWN5013mYPx2mk+FV+O8QPHKNd7KO lE8LGVv7z+EgEEGho7Q+OP9HK5I6ZnJUBVOp+xzECnHBy5tIWV8ZArNW/9b/oK+D gnIVhuimp2xQ42FmQWyX4cOOW+Axwpmbw39AlswQKqyRUZ2Gk1jN1tq0LVj2kWBV mxd9Y94fY2GnEHGyw4qfo4RNeRVVMLBJF6QWqxHOpJoCcgmCnHRGaW5XewhadNz6 sN+7u0xfLMk06Toeujhf5gWDz6KP4JUc -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:36 2025 by rpki-client