$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft File: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json) Hash identifier: +Tj6VPERgPJ7l+Erwgw1mjtH8dvKsztOmQHAtVJWZAo= Subject key identifier: 41:56:23:37:39:AE:2D:FF:9A:C9:C8:8D:1D:2A:45:77:BD:96:D2:40 Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft Manifest number: AE Signing time: Sun 19 Oct 2025 09:31:39 +0000 Manifest this update: Sun 19 Oct 2025 09:31:38 +0000 Manifest next update: Sun 26 Oct 2025 09:31:38 +0000 Files and hashes: 1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: K3N0cK7K5VvEPWM2xmayrymHLxAkP3PngswKIzqMz10=) 2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=) 3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=) 4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656 Validity Not Before: Oct 19 09:31:38 2025 GMT Not After : Oct 26 09:31:38 2025 GMT Subject: CN=68f4affa-538f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:8f:76:1a:b0:27:6a:c4:b6:f9:6f:0e:6c: 4a:5d:cb:a8:15:5c:e1:78:f9:f9:2c:26:be:9d:e2: a5:75:81:10:4c:a2:28:04:5e:76:95:bd:47:ec:f9: 35:a4:9c:fb:31:02:71:a9:bf:9d:85:69:72:c6:e2: 72:c8:9c:48:de:92:a8:cf:00:12:a5:da:88:a6:88: 2f:93:36:32:0b:a6:3c:0c:3c:7a:22:38:77:de:e0: cf:ae:33:39:c5:ee:de:c2:cc:81:9d:49:22:70:60: 16:99:4f:e3:10:e2:07:a9:91:cf:9a:dc:5d:f8:b7: 9e:cc:d0:5b:01:f0:0b:b5:c5:31:c8:f2:11:5b:2f: ad:17:82:9a:8c:dc:e0:51:a6:0d:90:0e:f2:42:69: f8:4a:ac:84:07:34:89:22:2c:5a:c4:e3:13:c1:f3: 3b:27:53:24:c3:39:ac:35:b8:4b:ec:2a:bf:26:c1: 0c:8f:67:25:c6:45:cb:55:a6:e5:83:52:68:38:15: 4d:18:54:36:27:01:d6:39:41:ce:82:1c:d8:d4:49: 56:51:ce:d0:eb:eb:0e:2b:44:a6:75:cc:cc:27:a1: 4f:12:10:b0:ad:0c:48:21:7f:b0:77:4d:12:03:14: 89:b0:00:eb:13:05:61:9f:b0:bc:d9:87:ef:d4:63: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:56:23:37:39:AE:2D:FF:9A:C9:C8:8D:1D:2A:45:77:BD:96:D2:40 X509v3 Authority Key Identifier: keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b1:8f:2b:b1:92:7c:31:cf:d2:27:71:03:59:0e:94:66:77: d2:79:5b:7b:de:48:1f:aa:64:af:a8:0d:d0:d3:c6:69:73:f6: cd:5a:6c:b7:2c:75:90:60:63:21:27:25:13:3e:1a:0e:61:d7: 11:24:a1:5d:d1:d7:7a:d6:db:67:cb:a7:40:12:7c:53:71:cb: 17:d4:54:22:a3:8f:c7:47:4f:88:78:d4:77:a0:ff:15:63:e4: ca:09:fc:df:7a:ba:41:a2:f6:b1:2e:30:00:e2:24:69:44:6a: 01:ff:64:88:07:ef:6a:9d:53:28:86:5d:24:a8:2d:52:72:7d: 90:7c:36:0e:c5:20:4b:6b:b6:c8:6e:33:75:4d:07:06:8f:03: f3:30:2d:e4:e7:63:3a:84:e7:2e:8b:cb:83:ab:df:32:4d:6e: b9:c2:e9:bb:b8:2a:64:56:29:be:69:9a:bd:ca:2e:8c:b3:69: b3:79:d0:ea:e0:ed:45:a3:9c:15:c1:16:df:bc:08:8c:6a:ea: 2f:3e:57:b1:56:bb:e4:82:e7:26:d6:1f:fd:ab:57:1c:4b:ad: 40:34:c6:c3:6d:83:bf:73:21:33:f1:04:04:69:6c:11:2a:01: 38:87:38:25:63:b6:3d:9f:48:a6:47:5b:d4:e8:71:10:64:cf: 70:8e:26:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG M0Q3MDI2NTYwHhcNMjUxMDE5MDkzMTM4WhcNMjUxMDI2MDkzMTM4WjAYMRYwFAYD VQQDEw02OGY0YWZmYS01MzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslKPdhqwJ2rEtvlvDmxKXcuoFVzhePn5LCa+neKldYEQTKIoBF52lb1H7Pk1 pJz7MQJxqb+dhWlyxuJyyJxI3pKozwASpdqIpogvkzYyC6Y8DDx6Ijh33uDPrjM5 xe7ewsyBnUkicGAWmU/jEOIHqZHPmtxd+LeezNBbAfALtcUxyPIRWy+tF4KajNzg UaYNkA7yQmn4SqyEBzSJIixaxOMTwfM7J1MkwzmsNbhL7Cq/JsEMj2clxkXLVabl g1JoOBVNGFQ2JwHWOUHOghzY1ElWUc7Q6+sOK0SmdczMJ6FPEhCwrQxIIX+wd00S AxSJsADrEwVhn7C82Yfv1GMG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFWIzc5 ri3/msnIjR0qRXe9ltJAMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3 MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODJFRi9GQzY1MEI3MkI3MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01W SXhFZDJUa0xHNlB6MXdKbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0sY8rsZJ8Mc/SJ3EDWQ6UZnfSeVt73kgfqmSvqA3Q08Zpc/bNWmy3 LHWQYGMhJyUTPhoOYdcRJKFd0dd61ttny6dAEnxTccsX1FQio4/HR0+IeNR3oP8V Y+TKCfzferpBovaxLjAA4iRpRGoB/2SIB+9qnVMohl0kqC1Scn2QfDYOxSBLa7bI bjN1TQcGjwPzMC3k52M6hOcui8uDq98yTW65wum7uCpkVim+aZq9yi6Ms2mzedDq 4O1Fo5wVwRbfvAiMauovPlexVrvkgucm1h/9q1ccS61ANMbDbYO/cyEz8QQEaWwR KgE4hzglY7Y9n0imR1vU6HEQZM9wjiZW -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:11 2025 by rpki-client