$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: L77BqwmHYXadOJYdlsjofic5bnbuKkDaxsu4QNhEgc4= Subject key identifier: 3F:B3:31:EB:60:3F:6B:52:4F:F5:03:35:61:96:2C:50:0F:8A:CF:D4 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0460 Signing time: Tue 09 Sep 2025 00:16:23 +0000 Manifest this update: Tue 09 Sep 2025 00:16:22 +0000 Manifest next update: Tue 16 Sep 2025 00:16:22 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: xJPNp0V94tPlSU0Ugdjs/qWtlL7XVq5MP2KMRGpNIM8=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Sep 9 00:16:22 2025 GMT Not After : Sep 16 00:16:22 2025 GMT Subject: CN=68bf71d7-c83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:70:35:3c:09:ae:9e:ad:f8:68:0b:c8:3a: 33:ba:85:1f:99:c6:9d:b1:b9:5a:8e:d0:2e:75:c5: 02:55:4c:e6:d1:61:33:ba:6c:81:45:2e:7f:a2:26: 46:8c:b5:6e:6d:61:60:8c:71:3e:84:b1:98:d5:2a: 23:02:48:59:16:ee:dc:90:ea:2e:c8:72:ff:15:99: 99:cd:1d:8c:bc:b0:19:7f:fd:82:e4:02:22:16:53: bb:9f:33:5d:1a:23:2c:8b:3f:a3:66:94:6a:26:fb: 6e:1e:8c:0a:e6:97:4a:ed:26:8c:5f:8e:ec:e5:e9: 31:60:6a:b9:22:ad:6e:04:1c:9c:ba:21:1d:fc:14: 59:0d:65:89:a1:ed:27:a2:42:d0:dc:24:14:3d:ab: 86:ca:2d:86:a8:96:f9:3a:fa:9b:66:5b:f5:5f:bc: 88:ab:37:b5:57:e4:b4:01:a4:2d:f2:92:bb:11:1d: 28:d7:d2:b5:b4:61:89:79:de:a2:e1:ec:0f:bc:b6: 37:38:9c:42:52:e5:de:87:74:53:74:3b:c1:80:79: b4:ff:f9:a8:cb:91:9a:31:68:42:5d:1c:dc:77:3a: 29:51:ba:84:6b:71:b2:9e:f5:5c:96:53:14:a6:8e: ec:44:b5:35:f6:a9:4b:ba:02:82:da:e5:8e:9a:fb: ca:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B3:31:EB:60:3F:6B:52:4F:F5:03:35:61:96:2C:50:0F:8A:CF:D4 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:6c:5a:90:1c:c9:28:25:f0:42:95:5e:f3:c2:e4:fe:7e:64: 50:d0:5a:3a:1f:b4:b5:68:2f:d6:2e:81:ea:ab:1d:2f:be:89: 8e:7b:d4:e7:e0:53:12:bd:e0:30:da:2b:2f:17:de:35:58:69: 2c:b3:f0:b4:7c:51:db:28:6d:6c:3c:07:60:79:4d:c9:63:d2: f4:8c:23:88:c3:74:12:32:65:ab:bf:6c:9b:7e:af:4a:de:01: a4:13:67:8c:fd:b8:33:de:d2:09:66:9d:92:ec:97:28:97:6f: 15:2b:a5:7b:c4:73:99:23:36:a0:1c:17:97:fa:56:3d:0f:32: 88:90:94:c7:29:8a:e4:06:47:22:66:61:0b:ff:f3:8a:bd:24: 3d:a0:b5:26:31:2f:b1:e5:73:be:22:16:30:00:cf:a4:b4:27: 0d:0b:39:ec:9e:61:ba:8f:d2:70:df:33:c2:6e:9e:90:7f:64: c5:f5:8b:c0:8c:a5:ae:b8:fc:7e:6b:73:d1:fc:c4:76:f2:e3: 1f:5c:76:d6:3b:a0:ed:eb:83:cc:ca:4f:47:65:da:bd:28:4b: 96:af:2d:df:50:9d:46:90:b7:5c:ca:fc:1c:12:df:d5:2b:94: cb:4a:04:4e:6f:cd:1b:50:a0:cb:76:85:71:a9:99:2e:e0:b1: 9e:00:0f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwOTA5MDAxNjIyWhcNMjUwOTE2MDAxNjIyWjAYMRYwFAYD VQQDEw02OGJmNzFkNy1jODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIJwNTwJrp6t+GgLyDozuoUfmcadsblajtAudcUCVUzm0WEzumyBRS5/oiZG jLVubWFgjHE+hLGY1SojAkhZFu7ckOouyHL/FZmZzR2MvLAZf/2C5AIiFlO7nzNd GiMsiz+jZpRqJvtuHowK5pdK7SaMX47s5ekxYGq5Iq1uBBycuiEd/BRZDWWJoe0n okLQ3CQUPauGyi2GqJb5OvqbZlv1X7yIqze1V+S0AaQt8pK7ER0o19K1tGGJed6i 4ewPvLY3OJxCUuXeh3RTdDvBgHm0//moy5GaMWhCXRzcdzopUbqEa3GynvVcllMU po7sRLU19qlLugKC2uWOmvvKDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+zMetg P2tST/UDNWGWLFAPis/UMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2bFqQHMkoJfBClV7zwuT+fmRQ0Fo6H7S1aC/WLoHqqx0vvomOe9Tn 4FMSveAw2isvF941WGkss/C0fFHbKG1sPAdgeU3JY9L0jCOIw3QSMmWrv2ybfq9K 3gGkE2eM/bgz3tIJZp2S7Jcol28VK6V7xHOZIzagHBeX+lY9DzKIkJTHKYrkBkci ZmEL//OKvSQ9oLUmMS+x5XO+IhYwAM+ktCcNCznsnmG6j9Jw3zPCbp6Qf2TF9YvA jKWuuPx+a3PR/MR28uMfXHbWO6Dt64PMyk9HZdq9KEuWry3fUJ1GkLdcyvwcEt/V K5TLSgROb80bUKDLdoVxqZku4LGeAA+W -----END CERTIFICATE-----Generated at Wed Sep 10 13:45:18 2025 by rpki-client