$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft File: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft (raw, json) Hash identifier: hTQ3NNplvFfzg8g+whEcYA508qXCJlROoijmq46fJAc= Subject key identifier: 07:CA:94:E4:A1:9C:64:2C:10:8B:6C:63:BC:20:C5:98:01:9E:9B:66 Authority key identifier: 1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 Certificate issuer: /CN=A91B7046/serialNumber=1EFE829F160078C06C9A15696542579687450B74 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft Manifest number: 010A Signing time: Fri 19 Sep 2025 01:16:40 +0000 Manifest this update: Fri 19 Sep 2025 01:16:40 +0000 Manifest next update: Fri 26 Sep 2025 01:16:40 +0000 Files and hashes: 1: Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl (hash: bGM3xPC80qlKGPKlFfWVFglJXFKmzAn9alBcjmORXlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7046, serialNumber=1EFE829F160078C06C9A15696542579687450B74 Validity Not Before: Sep 19 01:16:40 2025 GMT Not After : Sep 26 01:16:40 2025 GMT Subject: CN=68ccaef8-f15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:46:16:e6:1c:aa:9f:e3:cf:ba:57:06:4b: 90:88:00:58:e5:56:31:d0:1d:fb:7c:59:92:83:51: b6:ba:b3:af:07:fc:1a:80:a3:b9:74:80:1f:7e:ce: 52:30:d1:2c:f1:0b:6a:00:2d:82:c2:04:87:9b:e5: e6:1f:56:57:c2:fd:67:f1:3a:fd:4c:92:0c:85:bd: e2:f6:df:7c:fa:4a:08:f3:0d:52:ee:d7:d3:ed:7f: 07:ea:db:86:43:84:a0:d5:b6:ac:0c:47:66:4f:40: fb:00:c7:72:8a:c1:6a:6c:0d:29:85:5a:19:c7:55: da:da:bc:eb:6b:00:8d:67:7f:23:84:81:5b:29:7f: 00:ae:27:fe:55:9d:3a:20:56:12:37:0d:16:19:af: 07:68:f9:c2:05:b3:bb:1f:5f:1b:31:aa:5a:b1:5a: ff:2f:3c:a2:73:13:42:d5:06:5e:18:32:c8:7d:e7: 66:79:d9:42:41:c2:d2:89:6d:ce:e3:7c:d5:7f:f5: 8b:2d:b1:27:a4:4f:fd:d4:a5:1f:f1:79:68:81:70: 2e:49:e7:d2:00:46:a9:4a:b4:49:bf:5f:3e:70:ad: 85:c6:61:ac:b9:a0:80:c0:fd:94:ff:f7:67:ae:62: 47:9c:fb:1a:d7:83:02:0f:ea:ab:3a:68:f4:f3:a7: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CA:94:E4:A1:9C:64:2C:10:8B:6C:63:BC:20:C5:98:01:9E:9B:66 X509v3 Authority Key Identifier: keyid:1E:FE:82:9F:16:00:78:C0:6C:9A:15:69:65:42:57:96:87:45:0B:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7046/A22003D2FDFB11EEA910D787C4F9AE02/Hv6CnxYAeMBsmhVpZUJXlodFC3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:19:d9:88:6a:d2:67:72:01:b9:cd:0f:f5:fa:b8:cb:2e: 78:18:1c:b1:0e:00:af:38:5a:59:de:af:e4:59:d9:3a:c0:2f: 9b:f2:7c:17:6e:b4:95:ac:5c:c4:d0:33:4a:d9:43:d6:c8:6c: f9:b6:37:ab:5e:14:3a:e8:23:aa:83:ec:72:2f:65:f0:78:0d: 61:c3:3b:4d:0a:f2:33:49:b4:27:96:c1:2e:6b:e1:97:a1:2e: fe:cb:d5:c0:6a:77:0f:21:52:70:bf:42:d3:5b:29:37:5e:ea: 80:0a:83:e3:d9:c3:4c:49:cc:35:2d:9b:db:67:52:99:e2:8a: e3:ab:1f:9e:3e:c2:92:59:d9:0d:a8:a3:02:8a:ec:e7:74:d1: f5:ae:17:82:f7:11:9c:28:8f:8e:ae:70:49:93:37:f4:8e:0f: d6:e8:08:44:19:0b:00:4c:f7:77:60:a0:40:68:b2:78:51:7c: 3f:dc:b9:a2:5d:d3:29:57:6d:12:e2:54:dd:2a:9f:4c:d8:43: 0f:32:01:f7:83:47:af:4d:3f:67:d3:b5:6d:16:68:bc:12:41: b4:c6:f9:58:49:f8:ae:8d:8c:21:ce:88:4e:b8:7d:3e:00:fc: 9b:09:7a:92:e5:18:e2:4d:48:42:28:79:24:c9:8a:e7:93:2c: 7f:e6:96:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcwNDYxMTAvBgNVBAUTKDFFRkU4MjlGMTYwMDc4QzA2QzlBMTU2OTY1NDI1Nzk2 ODc0NTBCNzQwHhcNMjUwOTE5MDExNjQwWhcNMjUwOTI2MDExNjQwWjAYMRYwFAYD VQQDEw02OGNjYWVmOC1mMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD9GFuYcqp/jz7pXBkuQiABY5VYx0B37fFmSg1G2urOvB/wagKO5dIAffs5S MNEs8QtqAC2CwgSHm+XmH1ZXwv1n8Tr9TJIMhb3i9t98+koI8w1S7tfT7X8H6tuG Q4Sg1basDEdmT0D7AMdyisFqbA0phVoZx1Xa2rzrawCNZ38jhIFbKX8Arif+VZ06 IFYSNw0WGa8HaPnCBbO7H18bMapasVr/LzyicxNC1QZeGDLIfedmedlCQcLSiW3O 43zVf/WLLbEnpE/91KUf8XlogXAuSefSAEapSrRJv18+cK2FxmGsuaCAwP2U//dn rmJHnPsa14MCD+qrOmj086edqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfKlOSh nGQsEItsY7wgxZgBnptmMB8GA1UdIwQYMBaAFB7+gp8WAHjAbJoVaWVCV5aHRQt0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzA0Ni9BMjIwMDNEMkZE RkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVNQnNtaFZwWlVKWGxvZEZD M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NkNueFlBZU1Cc21oVnBaVUpYbG9kRkMzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzA0Ni9BMjIwMDNEMkZERkIxMUVFQTkxMEQ3ODdDNEY5QUUwMi9IdjZDbnhZQWVN QnNtaFZwWlVKWGxvZEZDM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1gRnZiGrSZ3IBuc0P9fq4yy54GByxDgCvOFpZ3q/kWdk6wC+b8nwX brSVrFzE0DNK2UPWyGz5tjerXhQ66COqg+xyL2XweA1hwztNCvIzSbQnlsEua+GX oS7+y9XAancPIVJwv0LTWyk3XuqACoPj2cNMScw1LZvbZ1KZ4orjqx+ePsKSWdkN qKMCiuzndNH1rheC9xGcKI+OrnBJkzf0jg/W6AhEGQsATPd3YKBAaLJ4UXw/3Lmi XdMpV20S4lTdKp9M2EMPMgH3g0evTT9n07VtFmi8EkG0xvlYSfiujYwhzohOuH0+ APybCXqS5RjiTUhCKHkkyYrnkyx/5pas -----END CERTIFICATE-----Generated at Fri Sep 19 07:29:55 2025 by rpki-client