$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: P0sTIGpe6rWIVQUe2Aqc7J4gdfCSLinHj+gmuBAnhmI= Subject key identifier: E2:65:CB:04:9D:5B:EC:6C:40:8B:A0:17:8B:A8:76:B7:36:11:2F:AA Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A64 Signing time: Sat 18 Oct 2025 16:41:32 +0000 Manifest this update: Sat 18 Oct 2025 16:41:32 +0000 Manifest next update: Sat 25 Oct 2025 16:41:32 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: d3fF30t4Hj2MzzeOJs0DO7373BNv6CAWOlgJG9X2szk=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6765 (0x1a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Oct 18 16:41:32 2025 GMT Not After : Oct 25 16:41:32 2025 GMT Subject: CN=68f3c33c-5aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:b2:fb:9b:19:63:bf:34:31:1b:97:37:84: e9:22:9a:4d:b0:e5:eb:19:32:40:1b:77:0c:6f:f8: 4c:25:3a:93:3c:11:15:6e:ea:fc:c5:68:90:b3:6f: c6:50:b4:47:1d:5d:6c:25:de:72:28:d2:e3:c7:ce: 38:f0:54:1a:89:00:c1:a8:ea:12:47:07:c0:c4:ac: d2:38:6a:70:e6:6c:74:21:24:05:fc:7d:60:20:f5: 71:a7:1c:73:cc:ac:3d:1c:a3:3f:1d:50:01:cb:26: 79:e2:69:be:22:27:c1:dd:e3:14:e9:f4:06:08:73: 04:b5:4e:a2:b0:8e:4f:f8:31:33:48:57:a9:be:5f: 47:49:37:d4:d5:76:19:c8:2a:10:30:ac:a0:88:4c: 89:e9:b1:59:04:1f:75:3f:f6:b0:32:1c:8a:c0:2d: 84:68:5a:fd:89:f4:d2:8e:81:c3:d4:45:8e:1f:82: 6f:e0:9a:a1:b4:0e:de:af:54:1a:f3:28:e3:e9:40: 6f:22:41:03:81:f7:9b:b6:37:60:92:aa:f7:39:ef: 3f:58:c0:5f:5b:c5:41:76:b8:99:c2:a0:4e:a9:65: 31:8e:74:ea:18:31:58:4b:66:63:fe:c6:d5:18:77: af:92:25:9c:5d:f7:f9:f4:c4:34:52:07:0e:80:34: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:65:CB:04:9D:5B:EC:6C:40:8B:A0:17:8B:A8:76:B7:36:11:2F:AA X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cf:b9:15:70:11:18:9a:19:8e:71:78:ab:0b:54:2c:1b:3b: 57:0b:51:37:80:4a:bf:53:46:69:49:40:79:ff:e3:6f:28:bf: 1e:86:c3:ce:f5:ef:19:4a:ec:81:75:ec:80:a9:aa:b1:10:de: ec:6e:23:5f:36:8f:f0:d7:4c:b8:87:6a:d2:cf:24:f0:21:06: 1b:00:11:8a:bd:5e:25:56:84:75:31:11:fb:ce:b6:1e:38:7d: 43:a1:b2:07:8a:43:e8:94:cb:bc:65:3e:10:bb:0d:8e:6b:df: 85:0d:e5:0e:7c:34:ee:cc:ee:3e:a0:48:57:b3:e3:50:ab:93: 84:18:4b:13:32:e7:bb:40:3b:25:30:f3:ae:b6:f9:73:41:94: e0:f7:5c:a4:a7:11:f9:53:23:da:cd:80:3c:d0:09:ce:ec:29: d2:e1:6d:3c:8d:30:54:86:e0:76:22:cb:2b:a3:06:52:15:4d: f9:ba:b2:54:ee:c1:24:ad:cb:ef:23:74:84:01:9c:80:17:92: 14:06:37:99:87:4e:6e:a3:3f:f2:3d:9a:63:35:f2:4e:07:87: 36:9e:03:97:53:5e:5b:7d:be:2d:c0:81:67:a0:02:8d:7f:e2: 5c:d1:b6:94:2e:43:ad:c8:d7:dc:82:7a:3b:96:b7:16:33:97: a3:0f:d1:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUxMDE4MTY0MTMyWhcNMjUxMDI1MTY0MTMyWjAYMRYwFAYD VQQDEw02OGYzYzMzYy01YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMqy+5sZY780MRuXN4TpIppNsOXrGTJAG3cMb/hMJTqTPBEVbur8xWiQs2/G ULRHHV1sJd5yKNLjx8448FQaiQDBqOoSRwfAxKzSOGpw5mx0ISQF/H1gIPVxpxxz zKw9HKM/HVAByyZ54mm+IifB3eMU6fQGCHMEtU6isI5P+DEzSFepvl9HSTfU1XYZ yCoQMKygiEyJ6bFZBB91P/awMhyKwC2EaFr9ifTSjoHD1EWOH4Jv4JqhtA7er1Qa 8yjj6UBvIkEDgfebtjdgkqr3Oe8/WMBfW8VBdriZwqBOqWUxjnTqGDFYS2Zj/sbV GHevkiWcXff59MQ0UgcOgDQgaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJlywSd W+xsQIugF4uodrc2ES+qMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNz7kVcBEYmhmOcXirC1QsGztXC1E3gEq/U0ZpSUB5/+NvKL8ehsPO 9e8ZSuyBdeyAqaqxEN7sbiNfNo/w10y4h2rSzyTwIQYbABGKvV4lVoR1MRH7zrYe OH1DobIHikPolMu8ZT4Quw2Oa9+FDeUOfDTuzO4+oEhXs+NQq5OEGEsTMue7QDsl MPOutvlzQZTg91ykpxH5UyPazYA80AnO7CnS4W08jTBUhuB2IssrowZSFU35urJU 7sEkrcvvI3SEAZyAF5IUBjeZh05uoz/yPZpjNfJOB4c2ngOXU15bfb4twIFnoAKN f+Jc0baULkOtyNfcgno7lrcWM5ejD9F0 -----END CERTIFICATE-----Generated at Mon Oct 20 16:43:10 2025 by rpki-client