$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: SLTmCTtN7TVTKJbj+Z5IT9vKMse84tLRaWKcZ20H0Ow= Subject key identifier: 74:CD:C6:D0:64:4B:2E:37:21:D2:67:E1:9F:06:E6:C9:31:98:F8:92 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 11B2 Signing time: Thu 18 Sep 2025 17:22:00 +0000 Manifest this update: Thu 18 Sep 2025 17:22:00 +0000 Manifest next update: Thu 25 Sep 2025 17:22:00 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: +eNqoFKXJgWOvCRW4Hdq+e5tB8BJw30ez3R1GfvoHB0=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4551 (0x11c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Sep 18 17:22:00 2025 GMT Not After : Sep 25 17:22:00 2025 GMT Subject: CN=68cc3fb8-45a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:33:21:9d:c3:fe:af:75:fe:a7:63:6e:6d: 84:eb:1f:00:06:fc:81:cf:d8:87:55:93:18:dd:a8: d4:7c:1b:81:f5:19:c7:16:8c:ef:e5:e9:76:6e:48: 6e:bc:4b:f5:47:5f:3b:33:72:08:fa:97:41:4d:85: 50:53:22:28:29:5d:d2:17:e9:4c:0c:5a:a6:a2:f0: 02:1f:da:6a:74:f6:e6:65:00:aa:a3:0c:81:b6:e9: c0:0d:df:c9:4e:3a:8a:8d:9e:92:e4:82:79:c7:4f: 60:c1:73:61:93:10:a1:eb:12:13:59:73:b9:c1:cf: ee:1f:cf:2a:54:37:34:72:a0:bb:a2:8c:ea:8f:2d: 49:e8:b1:c4:64:76:1c:96:01:75:9d:23:46:e8:43: 77:32:8a:94:4b:ea:9d:80:af:6f:0c:a5:6c:35:13: 30:14:45:db:56:7c:ee:3c:85:b0:5d:de:44:70:5e: c3:e8:45:ac:f1:27:bf:b1:4c:68:66:ca:0e:c5:24: 68:b3:5d:9c:a2:98:20:56:5c:8c:f8:ff:9e:b9:ab: 06:a5:c9:45:80:8b:e7:46:ec:1b:33:bf:09:57:d4: 70:84:4d:b8:cd:22:b0:b8:e0:da:26:c3:f5:d7:38: 72:95:94:c1:b9:bf:9e:e7:61:ed:a8:9f:1a:5b:50: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:C6:D0:64:4B:2E:37:21:D2:67:E1:9F:06:E6:C9:31:98:F8:92 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c5:00:3a:34:d9:74:1d:a0:0a:13:80:b6:be:9a:cd:6d:84: f8:d0:ce:7d:7a:c3:df:b6:36:f9:f3:3c:29:cd:9c:12:42:c0: 94:a4:f1:07:71:3d:dd:b1:01:eb:fb:b1:41:ac:a1:72:54:9f: f8:be:8a:6f:f0:0a:4d:b6:b4:56:03:e7:db:4f:16:03:a2:46: 10:d1:e1:75:f7:53:db:57:c5:58:45:7e:1c:e8:95:61:b5:c4: 78:d7:79:f7:2c:65:62:0c:9b:7e:95:e3:68:53:74:ad:6f:fb: dd:77:70:d6:61:b6:3f:67:23:7b:bb:18:6f:81:e5:f4:5b:2d: 53:cd:ea:c3:7a:ee:98:c3:7a:75:78:1d:4d:f2:a9:eb:00:68: e2:3d:c3:3e:ef:02:6c:f5:1e:f0:74:55:4c:6e:24:77:27:e2: e6:5b:36:0d:8d:c7:a0:15:c2:a4:b2:14:ad:fd:b0:b5:31:45: 6c:a6:41:d0:c8:e6:a5:8c:32:54:39:be:51:be:70:7b:09:4a: 0b:e7:7a:da:f4:8d:04:fa:41:e9:9e:a7:8a:af:3c:97:ba:ae: 04:23:af:32:f0:5c:5e:f0:76:7a:05:b5:b2:a6:e5:b5:3e:ed: 4b:a3:08:f9:c5:c3:29:a1:6c:95:78:2c:ff:91:b9:0c:0e:2a: 40:96:a9:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUwOTE4MTcyMjAwWhcNMjUwOTI1MTcyMjAwWjAYMRYwFAYD VQQDEw02OGNjM2ZiOC00NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55AzIZ3D/q91/qdjbm2E6x8ABvyBz9iHVZMY3ajUfBuB9RnHFozv5el2bkhu vEv1R187M3II+pdBTYVQUyIoKV3SF+lMDFqmovACH9pqdPbmZQCqowyBtunADd/J TjqKjZ6S5IJ5x09gwXNhkxCh6xITWXO5wc/uH88qVDc0cqC7oozqjy1J6LHEZHYc lgF1nSNG6EN3MoqUS+qdgK9vDKVsNRMwFEXbVnzuPIWwXd5EcF7D6EWs8Se/sUxo ZsoOxSRos12copggVlyM+P+euasGpclFgIvnRuwbM78JV9RwhE24zSKwuODaJsP1 1zhylZTBub+e52HtqJ8aW1CWvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTNxtBk Sy43IdJn4Z8G5skxmPiSMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTxQA6NNl0HaAKE4C2vprNbYT40M59esPftjb58zwpzZwSQsCUpPEH cT3dsQHr+7FBrKFyVJ/4vopv8ApNtrRWA+fbTxYDokYQ0eF191PbV8VYRX4c6JVh tcR413n3LGViDJt+leNoU3Stb/vdd3DWYbY/ZyN7uxhvgeX0Wy1TzerDeu6Yw3p1 eB1N8qnrAGjiPcM+7wJs9R7wdFVMbiR3J+LmWzYNjcegFcKkshSt/bC1MUVspkHQ yOaljDJUOb5RvnB7CUoL53ra9I0E+kHpnqeKrzyXuq4EI68y8Fxe8HZ6BbWypuW1 Pu1Lowj5xcMpoWyVeCz/kbkMDipAlqk0 -----END CERTIFICATE-----Generated at Fri Sep 19 15:10:43 2025 by rpki-client