$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: CJvaMNneWLulDVtaYruYwW+Mn6gabQl2lbB7AHG0O08= Subject key identifier: 5A:25:42:2B:9E:33:1F:62:09:05:78:46:9E:4D:DE:D1:38:6B:29:5D Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: E3 Signing time: Sun 19 Oct 2025 08:28:33 +0000 Manifest this update: Sun 19 Oct 2025 08:28:32 +0000 Manifest next update: Sun 26 Oct 2025 08:28:32 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: m1SWhlxepKDFFtGCqXuP+oe4bC0Bzs+b9u+8QrmGFGQ=) 2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Oct 19 08:28:32 2025 GMT Not After : Oct 26 08:28:32 2025 GMT Subject: CN=68f4a131-5ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b3:0e:f2:6b:5d:fe:9d:76:25:a0:7c:36:71: 28:fd:40:14:ba:b1:c5:ee:7f:f4:e7:4e:72:db:6b: c7:99:02:df:ae:f2:93:00:25:b7:85:8c:bd:df:8a: c1:80:43:c7:d8:79:30:84:3b:e0:cb:c0:02:db:43: 05:91:11:26:ff:bd:6c:81:2a:73:2b:cf:c0:b4:11: cf:43:ca:9c:65:6e:89:ce:a0:76:af:b7:3f:04:3d: f5:d0:fc:5a:61:c4:59:5c:a4:c9:b2:22:37:e2:ec: d8:86:f1:a5:c1:72:1e:a7:b1:e9:24:49:3f:54:42: 75:77:2f:56:a7:e7:f1:33:db:34:0f:06:c1:ba:a5: 80:bf:29:5f:be:4f:53:7a:5a:05:fc:da:57:7a:dd: 08:eb:0a:f6:2c:de:9a:61:b1:29:1c:b8:d7:04:7a: 91:f7:15:f6:38:81:3f:9c:4a:6f:98:d8:99:2f:bb: 55:37:04:45:ab:16:a2:cb:55:19:05:91:14:19:32: f3:7f:33:e4:c5:38:af:7c:21:38:5d:1e:e5:27:02: 1f:ed:87:dc:bc:ff:fc:bf:a2:d8:95:b5:31:c4:e3: 62:28:50:a5:1c:e7:6b:d9:4a:fd:71:15:13:57:84: 9f:ff:02:6e:a7:eb:b9:6f:a8:50:89:7b:24:3a:59: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:42:2B:9E:33:1F:62:09:05:78:46:9E:4D:DE:D1:38:6B:29:5D X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b6:7a:14:56:f3:ef:c5:2a:90:b2:b7:ae:7d:b9:ad:98:c3: 18:b0:24:b9:d7:68:9f:7b:01:e6:e7:73:31:e0:fc:3f:c8:86: 0d:f4:df:0d:cd:4f:a3:76:5d:64:a1:32:22:80:d9:47:94:cf: bf:75:86:42:b9:d4:70:24:0a:f9:87:96:6e:5a:4a:b0:c6:95: 8f:8c:87:3f:09:76:af:81:76:0a:fd:02:d7:48:3b:c6:c9:8a: d6:72:03:26:2b:6e:43:d3:b5:9b:97:08:e0:dc:7d:bc:70:db: 5d:6a:4b:b2:37:55:50:49:3f:7d:4b:ae:db:08:34:2e:ae:5e: f1:9a:5d:40:e5:ec:12:47:32:e2:d4:1b:fd:e3:3a:80:00:de: 4d:c5:3a:37:f1:f8:76:e1:0f:8a:60:e0:95:b5:d5:82:5a:ea: bb:e3:8c:52:cd:4a:04:bb:6e:79:98:15:03:b3:ef:ec:3e:be: 75:2d:fa:0c:11:d7:16:32:30:71:bf:13:92:68:ea:84:09:d5: 86:f0:de:8e:f7:c2:d8:49:62:e4:ce:77:47:61:88:5d:2f:e8: 95:92:04:7e:79:41:e2:8c:7c:e8:32:b6:4a:9f:17:b3:49:9a: d6:e5:f3:83:71:e4:3d:73:61:09:8b:c0:6d:65:53:7c:72:27: db:59:e6:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUxMDE5MDgyODMyWhcNMjUxMDI2MDgyODMyWjAYMRYwFAYD VQQDEw02OGY0YTEzMS01ZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rMO8mtd/p12JaB8NnEo/UAUurHF7n/0505y22vHmQLfrvKTACW3hYy934rB gEPH2HkwhDvgy8AC20MFkREm/71sgSpzK8/AtBHPQ8qcZW6JzqB2r7c/BD310Pxa YcRZXKTJsiI34uzYhvGlwXIep7HpJEk/VEJ1dy9Wp+fxM9s0DwbBuqWAvylfvk9T eloF/NpXet0I6wr2LN6aYbEpHLjXBHqR9xX2OIE/nEpvmNiZL7tVNwRFqxaiy1UZ BZEUGTLzfzPkxTivfCE4XR7lJwIf7YfcvP/8v6LYlbUxxONiKFClHOdr2Ur9cRUT V4Sf/wJup+u5b6hQiXskOlm6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFolQiue Mx9iCQV4Rp5N3tE4ayldMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCatnoUVvPvxSqQsreufbmtmMMYsCS512ifewHm53Mx4Pw/yIYN9N8N zU+jdl1koTIigNlHlM+/dYZCudRwJAr5h5ZuWkqwxpWPjIc/CXavgXYK/QLXSDvG yYrWcgMmK25D07Wblwjg3H28cNtdakuyN1VQST99S67bCDQurl7xml1A5ewSRzLi 1Bv94zqAAN5NxTo38fh24Q+KYOCVtdWCWuq744xSzUoEu255mBUDs+/sPr51LfoM EdcWMjBxvxOSaOqECdWG8N6O98LYSWLkzndHYYhdL+iVkgR+eUHijHzoMrZKnxez SZrW5fODceQ9c2EJi8BtZVN8cifbWeat -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:06 2025 by rpki-client