$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: 7+YXKh8XHrV9L6h8y/ca2BkJgj/DO8xEmaQXppXzV8Q= Subject key identifier: EF:B1:4F:F6:7F:67:85:21:08:20:B3:DF:0D:BC:D2:90:04:F9:81:BB Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: A7 Signing time: Wed 17 Sep 2025 06:53:32 +0000 Manifest this update: Wed 17 Sep 2025 06:53:31 +0000 Manifest next update: Wed 24 Sep 2025 06:53:31 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: dpVpfjH0gq7Sjhb6syiA298FD8cy+j4Ob7HRCHqvUOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Sep 17 06:53:31 2025 GMT Not After : Sep 24 06:53:31 2025 GMT Subject: CN=68ca5aec-3237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:b4:6b:79:1c:32:50:3d:a3:f5:cd:66:b1: a8:96:16:6c:e8:c1:5f:24:ec:81:99:82:02:c9:b5: ee:10:2b:c8:a3:0f:46:5f:57:ed:97:ae:02:ea:2b: 40:3d:e7:1b:f9:71:2e:65:4a:ad:e2:b5:e9:51:17: 27:c8:21:ee:6a:ad:35:f3:0e:9a:04:7d:cd:89:2d: 8b:01:f0:bb:20:77:ce:28:54:84:d9:a6:a4:20:c6: 33:08:ea:d4:75:13:40:38:d9:e3:61:c0:3d:6c:33: bc:a9:9a:df:f9:16:c6:3b:8c:b7:34:a3:fd:b8:d3: f2:70:a0:2a:b1:1e:a6:c7:92:e3:c9:f8:fa:16:83: 58:38:77:38:4d:7b:6a:64:86:b5:02:23:d4:f7:65: f0:fd:93:0d:b4:69:17:38:f4:44:28:f0:fc:7e:19: cf:43:8b:7f:6d:9f:1e:10:a3:a1:68:50:0c:ad:dc: 1f:1a:7e:ee:3a:a0:a0:a9:65:18:30:e7:0d:07:61: 6d:4c:fc:6e:bd:c3:4f:ec:7d:c7:e5:b1:09:d6:68: 92:df:9b:46:50:cd:c3:a8:f3:53:ba:a3:96:47:8f: fa:29:ca:65:31:30:8a:18:c0:57:82:ab:74:05:81: b3:e7:68:9d:6a:f6:1d:77:0a:a6:62:49:79:0e:e0: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B1:4F:F6:7F:67:85:21:08:20:B3:DF:0D:BC:D2:90:04:F9:81:BB X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:e0:45:72:a8:5e:ce:5d:38:1b:31:aa:5b:71:aa:45:15:43: ba:39:45:ee:52:64:49:f3:3f:17:2e:0c:1d:40:71:b1:49:41: fb:dd:31:58:75:19:81:62:44:1b:b7:88:0b:47:58:00:21:89: 2a:1e:4d:4b:ad:23:f9:52:09:6d:3e:b8:22:2e:a2:d7:9f:62: 7b:02:76:8f:df:77:2e:ac:6f:20:88:2c:e8:40:69:95:c1:58: 14:01:94:8e:92:c5:8f:bb:55:b2:a7:ee:ac:7e:21:1a:ca:ea: 18:96:53:16:24:46:a7:42:19:05:23:d7:52:73:a3:dd:82:fc: 52:06:09:a7:a5:1f:c0:87:49:2f:32:ab:d2:83:ec:a5:d0:c8: 0f:29:ee:1f:70:54:8d:98:b8:41:cc:97:f1:87:6f:e8:46:62: 1f:8f:3d:20:cc:f3:86:47:2e:cf:40:c9:04:35:e4:60:4e:bd: e3:83:1e:bb:d2:9a:da:12:1e:cf:03:64:31:a8:da:9b:03:23: 4d:5e:2b:4e:8d:aa:ac:01:30:a6:e0:c7:c0:3d:99:2f:7a:d7: b0:a8:31:e1:27:f1:41:38:ea:20:bb:4e:82:a8:f2:95:4c:c2: 57:00:f3:62:a4:b5:e2:be:a5:e3:95:0d:d4:8c:f3:56:ef:f3: d3:fb:43:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC MkYxMjkyNTEwHhcNMjUwOTE3MDY1MzMxWhcNMjUwOTI0MDY1MzMxWjAYMRYwFAYD VQQDEw02OGNhNWFlYy0zMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tm0a3kcMlA9o/XNZrGolhZs6MFfJOyBmYICybXuECvIow9GX1ftl64C6itA Pecb+XEuZUqt4rXpURcnyCHuaq018w6aBH3NiS2LAfC7IHfOKFSE2aakIMYzCOrU dRNAONnjYcA9bDO8qZrf+RbGO4y3NKP9uNPycKAqsR6mx5Ljyfj6FoNYOHc4TXtq ZIa1AiPU92Xw/ZMNtGkXOPREKPD8fhnPQ4t/bZ8eEKOhaFAMrdwfGn7uOqCgqWUY MOcNB2FtTPxuvcNP7H3H5bEJ1miS35tGUM3DqPNTuqOWR4/6KcplMTCKGMBXgqt0 BYGz52idavYddwqmYkl5DuD66wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+xT/Z/ Z4UhCCCz3w280pAE+YG7MB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1 NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI SWdJRVVYUUc0X2F5OFNrbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr4EVyqF7OXTgbMapbcapFFUO6OUXuUmRJ8z8XLgwdQHGxSUH73TFY dRmBYkQbt4gLR1gAIYkqHk1LrSP5UgltPrgiLqLXn2J7AnaP33curG8giCzoQGmV wVgUAZSOksWPu1Wyp+6sfiEayuoYllMWJEanQhkFI9dSc6PdgvxSBgmnpR/Ah0kv MqvSg+yl0MgPKe4fcFSNmLhBzJfxh2/oRmIfjz0gzPOGRy7PQMkENeRgTr3jgx67 0praEh7PA2QxqNqbAyNNXitOjaqsATCm4MfAPZkvetewqDHhJ/FBOOogu06CqPKV TMJXAPNipLXivqXjlQ3UjPNW7/PT+0Ow -----END CERTIFICATE-----Generated at Fri Sep 19 00:46:02 2025 by rpki-client