$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json) Hash identifier: XUCrrk1U07L/g6a2MGX++u8qZz7PH+uHZ80T7zXjSvU= Subject key identifier: F3:65:BF:8A:C5:8E:43:6C:78:83:B7:65:1A:22:93:DF:CD:9C:2D:60 Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Certificate serial: 34BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft Manifest number: 34BC Signing time: Thu 18 Sep 2025 14:26:28 +0000 Manifest this update: Thu 18 Sep 2025 14:26:27 +0000 Manifest next update: Thu 25 Sep 2025 14:26:27 +0000 Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: pZMSiXo4p2/2ojhE1LDDL9jFnJwiVI66OqyYmTEWoNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 14:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13503 (0x34bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Validity Not Before: Sep 18 14:26:27 2025 GMT Not After : Sep 25 14:26:27 2025 GMT Subject: CN=68cc1693-fcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:8b:98:00:d5:32:01:55:f0:fc:cd:5f:40: cb:e5:d7:1a:f2:32:a9:4b:77:f3:41:fd:90:f4:64: 86:65:c5:18:a2:48:2f:9e:1b:5e:60:c6:a6:95:01: cd:5f:91:81:45:a7:73:86:c3:fa:f1:40:e2:10:aa: 81:7a:42:6b:5d:1a:1f:ca:d4:80:e6:28:03:3c:2e: 36:dd:ed:21:43:5c:e0:4b:80:76:02:d3:13:41:30: c0:35:d6:61:f5:00:6c:25:11:aa:6a:73:20:14:9b: 24:c2:c5:fc:81:20:c6:59:07:68:6f:95:05:09:c3: d4:c3:0b:b0:e5:4a:b4:04:82:82:54:a3:44:6e:e8: 80:f5:91:1a:b6:b3:01:85:07:f4:b8:18:c5:67:05: a5:7a:6c:e0:48:c5:4b:94:8a:b4:db:bf:f1:de:28: 5f:18:34:08:b0:89:6b:d0:eb:d9:52:15:2e:03:96: e7:13:8a:c2:9a:35:17:f4:f3:aa:77:c8:d2:f4:1a: 78:e2:b2:9c:78:0a:fd:0e:91:7b:99:75:32:df:d1: 64:56:8e:fc:7b:c7:bf:41:b8:b2:76:52:f2:a6:87: 2e:00:29:39:1b:40:00:c5:87:f3:47:1a:aa:03:6a: 4b:19:38:78:bc:d1:63:76:ba:4e:ed:28:db:7b:6c: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:65:BF:8A:C5:8E:43:6C:78:83:B7:65:1A:22:93:DF:CD:9C:2D:60 X509v3 Authority Key Identifier: keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:74:ce:a5:05:ce:39:48:60:cf:12:ff:40:94:91:fd:d7: cb:c0:01:12:3c:c5:59:69:37:3f:00:84:c2:09:85:1c:5a:64: c4:08:9c:09:19:bb:29:6d:dc:2b:d1:8b:c8:35:75:98:c6:44: 52:d2:ba:68:53:d7:86:cd:3f:7b:ac:bc:e5:bb:03:91:54:f8: 76:0d:ce:1f:fe:ba:7d:a6:b9:a9:8e:41:be:69:3a:a5:0c:c3: 38:53:34:20:55:d0:16:d1:7f:b5:85:c0:fb:2d:dc:c6:9d:05: 59:34:41:06:6f:73:4e:ae:62:f9:61:08:f7:0b:b5:1e:5a:c0: be:25:12:a5:7b:5b:11:aa:d7:cd:60:ae:64:3b:da:14:64:01: d9:fb:17:11:b9:38:9b:32:b9:8d:99:6b:1a:3a:3a:ab:a0:47: 2e:ee:f6:ef:8d:4c:8b:e1:6e:a2:fb:c3:1c:34:f5:aa:57:47: 29:be:f3:91:03:39:59:fa:30:aa:e6:60:4b:a0:1d:dd:aa:b7: f0:37:60:46:d7:3c:11:3e:2c:eb:ea:f9:f4:b3:08:b2:8a:0c: b1:7e:8e:03:4d:f3:2d:27:0d:2c:d0:a3:5a:7d:b2:9c:53:92: 11:4d:3c:e2:f9:0d:04:b0:3c:23:7b:34:77:d6:fd:b8:19:9d: e8:c4:6d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2 MTMxMUJGNEUwHhcNMjUwOTE4MTQyNjI3WhcNMjUwOTI1MTQyNjI3WjAYMRYwFAYD VQQDEw02OGNjMTY5My1mY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/mLmADVMgFV8PzNX0DL5dca8jKpS3fzQf2Q9GSGZcUYokgvnhteYMamlQHN X5GBRadzhsP68UDiEKqBekJrXRofytSA5igDPC423e0hQ1zgS4B2AtMTQTDANdZh 9QBsJRGqanMgFJskwsX8gSDGWQdob5UFCcPUwwuw5Uq0BIKCVKNEbuiA9ZEatrMB hQf0uBjFZwWlemzgSMVLlIq027/x3ihfGDQIsIlr0OvZUhUuA5bnE4rCmjUX9POq d8jS9Bp44rKceAr9DpF7mXUy39FkVo78e8e/QbiydlLypocuACk5G0AAxYfzRxqq A2pLGTh4vNFjdrpO7Sjbe2xSGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNlv4rF jkNseIO3ZRoik9/NnC1gMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDCXTOpQXOOUhgzxL/QJSR/dfLwAESPMVZaTc/AITCCYUcWmTECJwJ Gbspbdwr0YvINXWYxkRS0rpoU9eGzT97rLzluwORVPh2Dc4f/rp9prmpjkG+aTql DMM4UzQgVdAW0X+1hcD7LdzGnQVZNEEGb3NOrmL5YQj3C7UeWsC+JRKle1sRqtfN YK5kO9oUZAHZ+xcRuTibMrmNmWsaOjqroEcu7vbvjUyL4W6i+8McNPWqV0cpvvOR AzlZ+jCq5mBLoB3dqrfwN2BG1zwRPizr6vn0swiyigyxfo4DTfMtJw0s0KNafbKc U5IRTTzi+Q0EsDwjezR31v24GZ3oxG0y -----END CERTIFICATE-----Generated at Fri Sep 19 05:07:19 2025 by rpki-client