$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: maE08ZcXU/DiBcvJxq/n2/V+k4Mj4Oq/W/OcTuU+2i0= Subject key identifier: F1:02:53:0F:A5:E3:B5:6B:69:07:CF:97:CB:35:A9:F9:19:7C:D0:2B Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: F5 Signing time: Fri 19 Sep 2025 05:48:14 +0000 Manifest this update: Fri 19 Sep 2025 05:48:14 +0000 Manifest next update: Fri 26 Sep 2025 05:48:14 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: mElwxvLGAjACf25CfGU57UJkUQ30/la7rOT0qD2IE4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Sep 19 05:48:14 2025 GMT Not After : Sep 26 05:48:14 2025 GMT Subject: CN=68ccee9e-e480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:95:b2:0c:a1:b8:da:3f:0c:58:7a:dc:73: b3:35:0c:7d:64:55:a6:f8:af:7f:b5:b2:fb:12:57: 92:23:43:99:2d:c9:60:e1:5d:d0:b1:31:21:86:84: ee:d5:50:10:ba:35:0c:0f:22:da:97:c7:f4:32:0a: 02:28:58:a6:b5:2b:e6:4a:2c:2d:a1:83:9e:72:a0: e5:9d:4f:ad:d8:79:f2:8f:7f:bd:c7:e6:23:fd:88: f7:63:40:02:13:a1:63:ca:ca:15:87:e0:4e:f4:39: 86:65:a8:46:6e:97:86:5a:fe:76:74:18:81:b5:a5: c5:4c:03:ec:fd:52:f4:c3:1f:32:6c:ae:2f:ee:8c: a5:8d:1b:19:29:0a:26:a8:63:12:29:40:aa:96:5e: 64:7f:72:59:4f:7d:7b:3e:63:df:2a:2c:e8:1c:2e: de:86:e8:bd:78:3c:29:f0:70:d0:85:91:59:9c:c9: 3a:d6:14:5a:02:da:55:36:5f:0e:50:8d:9d:d7:1e: 9d:0c:14:fd:ee:0e:e6:f2:3e:71:76:f4:a1:c6:bc: 4b:fa:82:fa:44:14:ac:c0:0f:c8:41:89:32:c2:cd: 9f:54:49:45:ea:46:2e:4f:65:fa:eb:96:cf:5c:96: 23:38:14:98:6f:4d:01:c6:02:3e:72:5b:e2:95:4c: d5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:02:53:0F:A5:E3:B5:6B:69:07:CF:97:CB:35:A9:F9:19:7C:D0:2B X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e7:34:79:5f:72:ed:29:0b:73:a3:1e:9b:13:43:97:0c:e3: 36:27:80:b8:e9:42:8b:56:b4:40:7a:f1:e2:4e:4e:6a:67:2a: 47:1b:4d:a5:2b:52:de:22:f9:88:75:5f:1f:a3:f1:29:86:65: 3c:1a:c0:e4:92:50:65:e1:55:b1:20:81:6f:92:58:10:49:55: bf:03:46:1e:b0:11:f4:54:3d:92:ff:a9:a0:f6:13:ff:cf:21: c8:40:42:e5:a4:d4:25:9f:37:0c:a5:89:26:b3:d3:9c:0f:7c: c2:c3:92:d8:06:bd:63:4f:c0:4b:f0:fd:03:1e:ad:4a:95:1b: 92:a2:84:b1:d1:cb:0e:22:db:3a:6c:c7:91:12:29:1b:fb:b2: 83:dc:c6:41:9f:f5:15:7a:3a:6b:0c:70:83:74:6a:44:b8:af: f9:a6:b0:16:a6:43:17:9f:ba:1e:ef:62:62:60:9b:d5:79:95: 59:30:31:33:0b:73:4d:3b:71:9f:bf:65:3d:be:72:7a:f6:99: 5f:0b:15:d8:84:c1:c1:68:68:e0:58:8d:cc:4f:45:f9:c0:b7: f3:3f:e0:f8:f3:a7:e5:82:59:1b:13:aa:5e:ba:43:ed:f3:27: 1e:f1:76:2c:4f:e1:23:2e:d8:9a:95:6f:30:ff:e3:70:91:05: 2a:74:0f:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUwOTE5MDU0ODE0WhcNMjUwOTI2MDU0ODE0WjAYMRYwFAYD VQQDEw02OGNjZWU5ZS1lNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XmVsgyhuNo/DFh63HOzNQx9ZFWm+K9/tbL7EleSI0OZLclg4V3QsTEhhoTu 1VAQujUMDyLal8f0MgoCKFimtSvmSiwtoYOecqDlnU+t2Hnyj3+9x+Yj/Yj3Y0AC E6FjysoVh+BO9DmGZahGbpeGWv52dBiBtaXFTAPs/VL0wx8ybK4v7oyljRsZKQom qGMSKUCqll5kf3JZT317PmPfKizoHC7ehui9eDwp8HDQhZFZnMk61hRaAtpVNl8O UI2d1x6dDBT97g7m8j5xdvShxrxL+oL6RBSswA/IQYkyws2fVElF6kYuT2X665bP XJYjOBSYb00BxgI+clvilUzVUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPECUw+l 47VraQfPl8s1qfkZfNArMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz5zR5X3LtKQtzox6bE0OXDOM2J4C46UKLVrRAevHiTk5qZypHG02l K1LeIvmIdV8fo/EphmU8GsDkklBl4VWxIIFvklgQSVW/A0YesBH0VD2S/6mg9hP/ zyHIQELlpNQlnzcMpYkms9OcD3zCw5LYBr1jT8BL8P0DHq1KlRuSooSx0csOIts6 bMeREikb+7KD3MZBn/UVejprDHCDdGpEuK/5prAWpkMXn7oe72JiYJvVeZVZMDEz C3NNO3Gfv2U9vnJ69plfCxXYhMHBaGjgWI3MT0X5wLfzP+D486flglkbE6peukPt 8yce8XYsT+EjLtialW8w/+NwkQUqdA8A -----END CERTIFICATE-----Generated at Fri Sep 19 14:22:02 2025 by rpki-client