$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: hS32Yc7VJF0by+kw4t/DfC4ZQQwo5sZaIY0OnXwtzlA= Subject key identifier: D2:22:01:F0:42:75:26:F9:86:E5:1F:80:E5:2A:F5:33:74:56:69:82 Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 23 Signing time: Wed 17 Sep 2025 08:35:43 +0000 Manifest this update: Wed 17 Sep 2025 08:35:43 +0000 Manifest next update: Wed 24 Sep 2025 08:35:43 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: hIyWArzedveiJKTR7+J/b1pbex9ePoU53OZGLOl7TSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Sep 17 08:35:43 2025 GMT Not After : Sep 24 08:35:43 2025 GMT Subject: CN=68ca72df-950b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9c:24:20:21:66:e6:95:db:81:be:d5:c2:5e: 11:92:d7:4d:d4:c4:b8:52:2c:a7:f7:82:a4:a4:bf: 9b:60:0a:ca:98:2f:da:6c:b5:92:d8:32:10:8b:14: ea:c5:5d:78:f9:87:96:05:c7:c4:d5:d2:a3:79:8f: 54:fa:e9:25:28:99:41:23:9b:0c:62:02:20:f1:4c: 1c:ab:a0:a8:14:bc:d9:97:22:3d:b2:23:70:d4:63: d4:78:a1:fb:ba:8c:82:9a:d8:9a:93:72:bf:b6:81: be:38:91:e5:f8:18:69:6a:92:86:39:88:92:e5:98: 6e:b6:22:2e:97:c0:05:2e:a8:74:fb:74:f5:9b:6f: c7:a4:43:3c:24:3c:f7:21:49:08:02:ee:5f:a9:ea: 33:a3:56:be:4d:22:4a:00:43:38:c6:18:bd:5d:52: ce:18:db:30:93:6c:e0:46:2a:ce:08:3b:1f:f3:3f: f6:38:5d:f8:37:ce:28:48:04:26:cc:e5:11:c5:46: f3:bb:f8:db:57:fb:6d:47:56:c3:a5:71:1f:26:8a: 63:c4:0a:dd:b5:ab:d7:a1:05:e3:d4:64:fc:21:69: ca:74:f0:cd:e4:ed:24:83:3a:15:55:bd:63:ec:ff: e2:1b:2a:91:80:c0:8a:2d:11:d9:25:bc:34:87:81: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:01:F0:42:75:26:F9:86:E5:1F:80:E5:2A:F5:33:74:56:69:82 X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9b:d9:c3:f8:ee:24:f8:0a:66:8a:01:03:a1:0d:c8:aa:6f: f1:53:46:80:4c:0f:d6:12:48:06:0a:14:da:87:a4:29:2b:91: 7d:54:67:7a:98:cc:9a:18:02:d7:d5:49:10:4e:85:31:c1:0b: a2:43:cd:74:be:6c:ab:90:cf:dc:aa:b0:47:37:32:ba:b2:e9: 45:91:fb:8f:10:ca:49:f1:72:7a:aa:a5:3a:87:b3:84:c0:0f: 46:d3:d8:2e:bf:7f:b0:2d:80:0d:61:62:29:5b:a5:3e:49:7d: bd:56:1f:a7:9e:7b:75:c9:08:f6:85:b8:ce:ae:5d:ae:fb:63: f6:fa:53:38:8a:89:1f:a0:8b:ad:bd:9b:41:f8:ed:57:bf:38: a6:c3:7b:88:e9:5b:ca:93:9d:80:b1:0b:3f:0d:55:cb:43:78: e2:40:5e:0a:2c:1c:61:1e:c9:58:ba:e5:39:86:f9:3b:ed:64: 2a:56:95:2b:63:d0:c2:6c:8f:2e:71:bd:a9:b3:1f:a4:4d:b1: b8:8b:05:ef:5d:25:a1:b4:34:cb:74:94:38:46:56:9c:c5:ec: 68:f3:99:d3:77:8f:27:42:ab:60:3d:7c:9c:39:23:49:84:2a: 75:4d:60:bd:4b:7a:c1:56:e7:96:4e:e8:de:9a:de:3c:a5:ce: 22:fe:80:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTA5MTcwODM1NDNaFw0yNTA5MjQwODM1NDNaMBgxFjAUBgNV BAMTDTY4Y2E3MmRmLTk1MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDznCQgIWbmlduBvtXCXhGS103UxLhSLKf3gqSkv5tgCsqYL9pstZLYMhCLFOrF XXj5h5YFx8TV0qN5j1T66SUomUEjmwxiAiDxTByroKgUvNmXIj2yI3DUY9R4ofu6 jIKa2JqTcr+2gb44keX4GGlqkoY5iJLlmG62Ii6XwAUuqHT7dPWbb8ekQzwkPPch SQgC7l+p6jOjVr5NIkoAQzjGGL1dUs4Y2zCTbOBGKs4IOx/zP/Y4Xfg3zihIBCbM 5RHFRvO7+NtX+21HVsOlcR8mimPECt21q9ehBePUZPwhacp08M3k7SSDOhVVvWPs /+IbKpGAwIotEdklvDSHgQK3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0iIB8EJ1 JvmG5R+A5Sr1M3RWaYIwHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE2b2cP47iT4CmaKAQOhDciqb/FTRoBMD9YSSAYKFNqHpCkrkX1UZ3qY zJoYAtfVSRBOhTHBC6JDzXS+bKuQz9yqsEc3Mrqy6UWR+48QyknxcnqqpTqHs4TA D0bT2C6/f7AtgA1hYilbpT5Jfb1WH6eee3XJCPaFuM6uXa77Y/b6UziKiR+gi629 m0H47Ve/OKbDe4jpW8qTnYCxCz8NVctDeOJAXgosHGEeyVi65TmG+TvtZCpWlStj 0MJsjy5xvamzH6RNsbiLBe9dJaG0NMt0lDhGVpzF7GjzmdN3jydCq2A9fJw5I0mE KnVNYL1LesFW55ZO6N6a3jylziL+gCE= -----END CERTIFICATE-----Generated at Thu Sep 18 20:47:25 2025 by rpki-client