$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: w6IkUVfW9YkdHF5kgZrLppaQoPCh/8utJ5zx64ctais= Subject key identifier: DF:80:03:AA:1F:4D:E2:32:14:40:58:03:90:8C:CC:BA:FF:A0:DF:D5 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 176D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1763 Signing time: Thu 18 Sep 2025 16:43:44 +0000 Manifest this update: Thu 18 Sep 2025 16:43:44 +0000 Manifest next update: Thu 25 Sep 2025 16:43:44 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: NnpkbG4vGXmIx5VqmhDAn315N/Hyhz86uXxQnxQKoSw=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5997 (0x176d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Sep 18 16:43:44 2025 GMT Not After : Sep 25 16:43:44 2025 GMT Subject: CN=68cc36c0-2a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:92:b4:58:0a:70:f0:fb:8b:eb:f3:23:25: 35:76:c8:99:28:68:45:f3:ce:ca:21:ee:22:46:bb: d7:7a:e8:a3:d4:32:54:d3:be:cb:3c:10:4a:e2:e9: 06:45:9b:5d:ed:23:47:58:1b:6b:65:ba:95:d5:5c: dc:19:56:15:53:88:78:83:da:14:d8:20:11:dd:d1: 65:c7:df:9c:56:bd:b5:86:7d:69:f5:cb:bc:e9:17: 7e:c9:0c:be:ec:01:04:e6:2a:a1:dc:8a:71:d8:83: 2e:72:45:a8:40:96:be:fe:61:f9:bc:66:ae:58:3e: 49:b0:76:98:ba:6a:9e:ea:c5:fb:f6:1b:ff:3d:b2: e4:d6:71:44:49:a1:08:39:58:f0:20:a7:78:2a:d9: 05:82:06:bf:5c:39:d0:e9:7f:a9:d4:b3:7a:e1:20: c1:c5:f1:64:fa:ea:a6:c8:db:cf:86:7f:45:68:26: 89:bd:73:a2:89:31:4b:72:7b:f4:64:b0:f3:af:5b: bb:f0:82:1c:eb:24:84:e7:fd:df:54:61:aa:db:0a: c3:0e:50:0e:13:81:0f:77:24:17:ea:f9:1a:32:d2: 12:c8:31:11:11:80:d9:03:80:da:a5:27:b9:71:3b: 93:18:82:cb:23:fe:60:77:1d:e7:d4:e0:ea:a9:2c: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:80:03:AA:1F:4D:E2:32:14:40:58:03:90:8C:CC:BA:FF:A0:DF:D5 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:5a:43:8a:a1:29:c2:85:7d:c0:99:41:97:f2:c1:58:59:58: 47:81:b4:d1:af:90:2f:90:a5:61:05:7e:29:3c:04:78:a1:88: 56:54:f2:54:24:ba:1b:69:7b:a4:6b:05:70:c0:d1:e6:fb:57: 93:c4:73:a0:e7:33:2f:45:9b:7c:29:41:cb:3d:eb:9d:3a:c2: 3c:0d:5a:5f:0c:35:51:bd:dc:ec:dc:36:fc:04:23:af:2a:10: 89:07:9e:e7:17:23:bf:43:6e:64:61:36:03:ad:0d:12:bc:1b: 5f:3d:71:ea:25:96:47:07:ca:59:0a:16:75:7e:f8:47:3d:a3: 82:ef:f4:ad:31:d5:12:27:68:88:cf:ff:c3:30:e1:b0:23:13: 11:4c:da:35:91:9d:92:1d:e5:05:45:50:e1:f9:2f:70:e1:68: 42:9d:1c:06:f0:1e:c4:0e:43:64:97:1b:f5:e8:e6:b4:a8:ed: 70:59:9d:5b:2d:8b:33:db:92:79:67:4b:f8:d9:27:dc:2f:ca: 28:f8:03:b5:12:22:f1:06:1e:36:a3:6b:ab:99:34:2e:4b:2c: 6e:e9:a6:7b:8e:a1:30:8f:e7:2f:e3:fb:f0:9a:51:9c:62:f0: a0:bc:3a:fe:0a:eb:29:cc:4c:b5:23:11:12:f5:df:bd:49:6c: 08:2c:90:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUwOTE4MTY0MzQ0WhcNMjUwOTI1MTY0MzQ0WjAYMRYwFAYD VQQDEw02OGNjMzZjMC0yYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyv2StFgKcPD7i+vzIyU1dsiZKGhF887KIe4iRrvXeuij1DJU077LPBBK4ukG RZtd7SNHWBtrZbqV1VzcGVYVU4h4g9oU2CAR3dFlx9+cVr21hn1p9cu86Rd+yQy+ 7AEE5iqh3Ipx2IMuckWoQJa+/mH5vGauWD5JsHaYumqe6sX79hv/PbLk1nFESaEI OVjwIKd4KtkFgga/XDnQ6X+p1LN64SDBxfFk+uqmyNvPhn9FaCaJvXOiiTFLcnv0 ZLDzr1u78IIc6ySE5/3fVGGq2wrDDlAOE4EPdyQX6vkaMtISyDEREYDZA4DapSe5 cTuTGILLI/5gdx3n1ODqqSwPlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+AA6of TeIyFEBYA5CMzLr/oN/VMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRWkOKoSnChX3AmUGX8sFYWVhHgbTRr5AvkKVhBX4pPAR4oYhWVPJU JLobaXukawVwwNHm+1eTxHOg5zMvRZt8KUHLPeudOsI8DVpfDDVRvdzs3Db8BCOv KhCJB57nFyO/Q25kYTYDrQ0SvBtfPXHqJZZHB8pZChZ1fvhHPaOC7/StMdUSJ2iI z//DMOGwIxMRTNo1kZ2SHeUFRVDh+S9w4WhCnRwG8B7EDkNklxv16Oa0qO1wWZ1b LYsz25J5Z0v42SfcL8oo+AO1EiLxBh42o2urmTQuSyxu6aZ7jqEwj+cv4/vwmlGc YvCgvDr+CuspzEy1IxES9d+9SWwILJDI -----END CERTIFICATE-----Generated at Fri Sep 19 02:48:36 2025 by rpki-client