$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: uqXIBt+I70/4jEkQyo6ZB991c4X7G91AiQAjwLolL9s= Subject key identifier: DC:A9:80:FA:45:98:8B:39:11:22:7F:31:65:5A:19:86:33:41:9B:DC Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 0790 Signing time: Thu 18 Sep 2025 21:44:32 +0000 Manifest this update: Thu 18 Sep 2025 21:44:31 +0000 Manifest next update: Thu 25 Sep 2025 21:44:31 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: vzJC5FK75T4jNKIEkR3mpEwyWE2VDvQh1ZPP97FB8IQ=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Sep 18 21:44:31 2025 GMT Not After : Sep 25 21:44:31 2025 GMT Subject: CN=68cc7d3f-2109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:e0:62:6f:67:5b:ec:8f:4e:29:1e:70:b1: 16:38:1d:f5:66:9d:c2:2e:29:e1:d1:13:a1:1a:f1: c8:2b:49:a7:4f:7c:e8:71:ac:e2:a2:27:8e:b9:48: 9e:b9:bd:ac:56:ba:3d:72:aa:f3:47:bd:ed:1f:c8: 10:b9:5e:8c:4b:39:9d:63:39:1c:cb:7d:e5:99:48: 66:82:ef:06:2d:c5:d5:3a:ce:2c:33:bd:9c:b8:bd: 07:d5:f1:3e:3d:d0:ce:bb:e0:0b:58:2d:ca:c2:02: f6:4e:83:90:2d:ea:09:0b:4c:08:25:69:ef:72:1b: f1:b0:36:64:52:3b:df:af:db:aa:ea:39:a4:08:ef: ef:c7:0a:8b:12:f3:0a:7c:f9:b2:4d:86:fc:ed:38: 89:4f:7b:0f:16:5a:4b:d6:0c:17:b8:9b:0c:c9:f2: 8f:6c:cf:7f:25:65:8c:f4:04:5c:f0:60:8e:ad:cb: d8:51:3e:2d:50:1d:bf:bd:9d:2a:1a:08:74:69:13: 0e:c2:d9:6c:91:88:32:27:db:21:77:0d:d3:c5:e5: 29:cc:e6:59:fc:59:49:92:59:b0:ac:af:df:d5:f4: 92:56:a8:6b:88:dc:24:97:46:28:d7:0f:b4:20:3a: 2f:62:5a:3c:d0:11:ac:f2:9d:a8:83:07:de:43:05: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A9:80:FA:45:98:8B:39:11:22:7F:31:65:5A:19:86:33:41:9B:DC X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:68:b8:81:d0:e6:cc:0d:87:c7:02:1c:2f:29:12:a2:bf:ad: b2:a6:3a:69:c2:07:a5:4c:7f:32:d8:0e:fb:c4:14:6b:99:16: 63:54:77:b1:c5:79:40:68:d3:98:72:61:c0:80:62:3b:11:9c: c3:cb:6b:b9:79:08:b4:ed:84:1f:10:1c:76:b1:d1:d2:9e:72: 26:a2:7c:ae:52:d5:6a:12:96:3b:90:f5:f0:0c:41:1f:00:51: 07:37:53:19:bd:df:1f:e7:d5:30:1a:26:86:d0:bb:c4:93:b0: fb:94:b5:84:bf:f6:e3:fa:62:b6:9e:8b:68:d9:1f:ef:3b:ee: 5d:e8:02:7b:76:a3:0d:1f:b6:5d:52:c2:bc:c9:0b:f5:35:01: 87:7a:e7:6f:29:1c:50:98:64:cf:e9:ba:8c:67:a0:e9:47:55: 95:3f:c4:ff:da:24:27:aa:c4:14:1f:f9:d4:bd:2e:9f:eb:54: e5:3f:19:e1:3b:d2:3a:73:d3:79:88:b5:40:db:ea:6d:45:02: 41:7b:ac:99:14:33:5d:92:97:35:d5:04:ce:71:a7:18:92:82: 5a:af:41:b6:67:82:b8:7e:52:7a:83:57:9c:e8:a4:66:18:c3: 6b:64:89:48:63:f8:16:5f:21:a0:4b:07:79:0b:43:9a:b9:57: d1:31:ad:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwOTE4MjE0NDMxWhcNMjUwOTI1MjE0NDMxWjAYMRYwFAYD VQQDEw02OGNjN2QzZi0yMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBDgYm9nW+yPTikecLEWOB31Zp3CLinh0ROhGvHIK0mnT3zocazioieOuUie ub2sVro9cqrzR73tH8gQuV6MSzmdYzkcy33lmUhmgu8GLcXVOs4sM72cuL0H1fE+ PdDOu+ALWC3KwgL2ToOQLeoJC0wIJWnvchvxsDZkUjvfr9uq6jmkCO/vxwqLEvMK fPmyTYb87TiJT3sPFlpL1gwXuJsMyfKPbM9/JWWM9ARc8GCOrcvYUT4tUB2/vZ0q Ggh0aRMOwtlskYgyJ9shdw3TxeUpzOZZ/FlJklmwrK/f1fSSVqhriNwkl0Yo1w+0 IDovYlo80BGs8p2ogwfeQwUoswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNypgPpF mIs5ESJ/MWVaGYYzQZvcMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2aLiB0ObMDYfHAhwvKRKiv62ypjppwgelTH8y2A77xBRrmRZjVHex xXlAaNOYcmHAgGI7EZzDy2u5eQi07YQfEBx2sdHSnnImonyuUtVqEpY7kPXwDEEf AFEHN1MZvd8f59UwGiaG0LvEk7D7lLWEv/bj+mK2noto2R/vO+5d6AJ7dqMNH7Zd UsK8yQv1NQGHeudvKRxQmGTP6bqMZ6DpR1WVP8T/2iQnqsQUH/nUvS6f61TlPxnh O9I6c9N5iLVA2+ptRQJBe6yZFDNdkpc11QTOcacYkoJar0G2Z4K4flJ6g1ec6KRm GMNrZIlIY/gWXyGgSwd5C0OauVfRMa0F -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:46 2025 by rpki-client