$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: n6DCUWw9kHYLvYDgHY3cmljT1AFVa7XWyYN3vC9jcRo= Subject key identifier: 52:C6:B8:7A:B0:E7:27:45:76:43:74:77:D8:B3:0A:F9:42:35:E5:B1 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 066E Signing time: Wed 20 Aug 2025 22:34:51 +0000 Manifest this update: Wed 20 Aug 2025 22:34:51 +0000 Manifest next update: Wed 27 Aug 2025 22:34:51 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: 4zpvxn55dRfF7s2K6Cxe7OH/dgRq+04kbj9Q0DalDM4=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Aug 20 22:34:51 2025 GMT Not After : Aug 27 22:34:51 2025 GMT Subject: CN=68a64d8b-3489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:51:65:87:bb:73:06:20:79:ce:c6:72:9c: 3f:4e:88:ba:f5:44:bc:29:44:84:18:64:d0:17:7e: 42:d3:c9:23:43:52:2b:57:8c:99:7a:89:18:27:47: 67:55:03:eb:99:c2:60:23:0e:fe:0c:ef:c1:b3:b0: 40:c5:48:c7:8c:cc:80:c4:a0:61:9b:be:55:de:db: f9:b7:99:14:ce:25:6e:35:ab:19:d9:57:8e:b7:23: 7d:a2:eb:65:65:42:bc:f0:78:85:02:16:ed:b1:47: c3:08:9b:ad:4b:e2:4f:0e:31:92:ba:41:e4:b1:66: a3:7d:28:c9:69:86:2e:a1:2b:b0:fd:f1:8e:94:3b: a3:3a:39:03:ab:f0:19:a0:5d:50:c7:9d:18:10:03: c4:60:42:6a:f3:61:f4:ef:7d:3f:3c:37:c1:29:16: 88:75:77:a3:3c:18:16:e4:b4:64:b7:10:16:9d:99: c8:f2:d9:62:4e:59:16:af:3b:c7:e5:eb:94:8d:70: f9:00:b4:a5:2a:a5:6f:48:66:52:cb:1d:a0:27:6b: 93:0f:3d:1e:46:86:3f:4d:a7:a4:c9:76:99:83:a9: 86:f6:fd:bc:f6:1b:f5:0a:05:69:ce:4a:32:46:7e: 25:17:94:b0:e0:92:4c:47:0e:45:2a:d0:90:53:dc: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:B8:7A:B0:E7:27:45:76:43:74:77:D8:B3:0A:F9:42:35:E5:B1 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c9:d8:fa:55:76:35:68:d4:3a:51:d7:82:6c:0b:e0:bd:47: f9:45:5c:55:a7:1f:58:82:7b:78:a5:ce:e3:92:b6:98:e6:a0: 95:97:44:65:8d:80:1e:af:35:5a:50:f3:5c:0b:4a:b4:24:6d: 55:b3:bc:5c:71:25:23:a4:84:0a:62:b5:0f:32:33:8c:4a:e5: be:de:9d:3a:49:5a:e9:c6:2e:d6:49:d0:81:b2:4f:cc:08:05: a3:94:10:26:75:f8:c1:ac:b2:9c:27:61:1e:12:c8:5e:c7:73: f7:72:be:0c:1f:7f:1e:76:90:53:68:46:ae:9d:3d:e8:8b:59: 94:de:4f:79:49:ba:ed:0d:b0:84:2d:56:31:d6:6e:65:c9:d2: 4e:b0:43:2d:9a:18:28:ad:9e:ef:c8:87:1e:ed:49:a8:47:16: f6:53:1e:0a:17:79:79:47:47:30:5a:14:14:2d:6e:42:cd:65: d5:aa:3b:a2:c6:59:85:35:68:df:b3:8c:9b:6f:98:b8:4e:97: a4:a3:ff:55:65:52:48:db:14:ed:0d:49:65:33:2b:a7:b6:44: 02:8c:cb:cd:64:bc:1e:15:cd:cd:70:0f:60:c9:8b:b4:e5:70: 1a:d8:44:39:fb:ba:1b:93:62:71:13:46:9d:33:96:51:9d:ed: 9d:5d:fc:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUwODIwMjIzNDUxWhcNMjUwODI3MjIzNDUxWjAYMRYwFAYD VQQDEw02OGE2NGQ4Yi0zNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUtRZYe7cwYgec7Gcpw/Toi69US8KUSEGGTQF35C08kjQ1IrV4yZeokYJ0dn VQPrmcJgIw7+DO/Bs7BAxUjHjMyAxKBhm75V3tv5t5kUziVuNasZ2VeOtyN9outl ZUK88HiFAhbtsUfDCJutS+JPDjGSukHksWajfSjJaYYuoSuw/fGOlDujOjkDq/AZ oF1Qx50YEAPEYEJq82H0730/PDfBKRaIdXejPBgW5LRktxAWnZnI8tliTlkWrzvH 5euUjXD5ALSlKqVvSGZSyx2gJ2uTDz0eRoY/TaekyXaZg6mG9v289hv1CgVpzkoy Rn4lF5Sw4JJMRw5FKtCQU9xqQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLGuHqw 5ydFdkN0d9izCvlCNeWxMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHydj6VXY1aNQ6UdeCbAvgvUf5RVxVpx9Ygnt4pc7jkraY5qCVl0Rl jYAerzVaUPNcC0q0JG1Vs7xccSUjpIQKYrUPMjOMSuW+3p06SVrpxi7WSdCBsk/M CAWjlBAmdfjBrLKcJ2EeEshex3P3cr4MH38edpBTaEaunT3oi1mU3k95SbrtDbCE LVYx1m5lydJOsEMtmhgorZ7vyIce7UmoRxb2Ux4KF3l5R0cwWhQULW5CzWXVqjui xlmFNWjfs4ybb5i4Tpeko/9VZVJI2xTtDUllMyuntkQCjMvNZLweFc3NcA9gyYu0 5XAa2EQ5+7obk2JxE0adM5ZRne2dXfwa -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:13 2025 by rpki-client