$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json) Hash identifier: Vk5uPu+gn9AtVzNLjEJnt2J4jP4ZPv1Cj9/s/7K6yQU= Subject key identifier: 90:3F:63:94:BF:3A:D2:C0:EA:39:A3:A0:C4:53:7C:41:B6:87:B4:6A Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft Manifest number: 015A Signing time: Sun 19 Oct 2025 06:48:10 +0000 Manifest this update: Sun 19 Oct 2025 06:48:09 +0000 Manifest next update: Sun 26 Oct 2025 06:48:09 +0000 Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: f0/DF7PbL1nl8nbIAF42JpQhbi01tIyqJFzA9faITYw=) 2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: vxxrjf6mh6He/Qk48r/ND4XKn6+HAksWQduimGVP494=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060 Validity Not Before: Oct 19 06:48:09 2025 GMT Not After : Oct 26 06:48:09 2025 GMT Subject: CN=68f489a9-299d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:de:1b:48:55:ae:a0:95:83:c8:66:b9:a1: 64:cc:d2:07:05:5f:58:4b:7c:13:2a:a6:78:51:56: 62:90:41:59:59:4a:6e:db:dd:c4:f3:79:06:68:a7: 8c:8a:f8:ef:49:b1:49:ef:da:ed:79:06:f9:6f:19: 95:e2:15:26:62:3e:8b:af:b8:b7:51:1c:b3:44:e2: eb:bf:db:03:05:cb:0b:12:8e:79:36:ad:5e:a6:9c: d0:d3:e8:bf:60:b2:e5:ec:6a:e6:9e:a5:5f:e8:00: b7:f1:74:c3:d4:10:80:17:fb:3f:7d:14:ec:19:36: 45:85:dd:49:ab:fb:18:1d:16:35:55:b7:a0:c8:24: dc:6e:69:64:47:f1:25:46:9d:a4:8e:b2:a0:20:5a: 6f:ca:37:89:78:2a:16:84:25:2b:25:91:6d:c4:51: 7a:3c:b4:d8:64:49:76:26:ff:49:01:96:9d:55:43: 0a:46:33:1a:c1:94:25:68:23:85:72:d5:44:e9:13: 58:2b:5c:10:aa:f2:a3:18:0f:e1:55:d8:f0:73:8a: fb:b9:b7:55:d2:f5:f8:bc:d2:ef:33:79:2b:e4:c0: 51:aa:69:31:cd:91:d5:46:de:ac:50:1b:03:24:b5: f9:bf:89:b4:66:b3:f8:a0:6e:66:ad:52:0e:90:4c: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3F:63:94:BF:3A:D2:C0:EA:39:A3:A0:C4:53:7C:41:B6:87:B4:6A X509v3 Authority Key Identifier: keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e2:08:b5:2d:6f:50:ad:ec:3c:8a:10:b4:34:11:be:cb:a6: b3:ca:ac:f8:6b:be:f4:58:35:2f:77:98:53:59:0a:a5:2d:7a: 62:80:24:fb:59:69:69:3f:c5:e3:37:aa:07:8a:58:18:48:ac: 0d:2e:14:b7:14:f0:54:fe:39:92:9c:13:a8:cc:c0:ec:88:f8: 9f:30:63:b7:2b:fa:31:11:f5:ba:eb:78:37:80:51:e1:37:d9: f3:07:8d:ad:1f:ef:20:71:c1:c4:21:88:80:41:b0:c2:80:00: e0:fc:d0:52:6f:79:8c:cd:7e:19:a3:67:15:1f:08:42:de:e0: 76:07:bc:eb:c3:f3:ed:76:88:ec:9d:ee:f7:78:1f:87:ff:3a: 8c:51:1d:43:d1:1e:f7:d5:ee:84:4b:b5:50:0c:e5:0b:7a:ff: fb:0d:b2:ab:25:ba:36:11:77:77:8d:4d:76:9b:66:6c:b8:65: 0c:59:af:1b:a3:5d:45:a6:b9:18:86:b2:64:ee:11:31:53:2f: d6:de:f2:e1:40:64:1f:21:7c:9e:ab:cf:7e:ca:4e:c8:7d:f9: 56:c4:70:31:89:ba:55:52:5d:a3:2f:ab:1d:79:92:ce:c1:c0: 1d:90:aa:16:f0:8a:e9:e6:69:b6:68:32:99:a5:46:09:3d:ee: 33:11:76:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4 OEExOTAwNjAwHhcNMjUxMDE5MDY0ODA5WhcNMjUxMDI2MDY0ODA5WjAYMRYwFAYD VQQDEw02OGY0ODlhOS0yOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvfeG0hVrqCVg8hmuaFkzNIHBV9YS3wTKqZ4UVZikEFZWUpu293E83kGaKeM ivjvSbFJ79rteQb5bxmV4hUmYj6Lr7i3URyzROLrv9sDBcsLEo55Nq1eppzQ0+i/ YLLl7GrmnqVf6AC38XTD1BCAF/s/fRTsGTZFhd1Jq/sYHRY1VbegyCTcbmlkR/El Rp2kjrKgIFpvyjeJeCoWhCUrJZFtxFF6PLTYZEl2Jv9JAZadVUMKRjMawZQlaCOF ctVE6RNYK1wQqvKjGA/hVdjwc4r7ubdV0vX4vNLvM3kr5MBRqmkxzZHVRt6sUBsD JLX5v4m0ZrP4oG5mrVIOkEybIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJA/Y5S/ OtLA6jmjoMRTfEG2h7RqMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3 RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB4gi1LW9Qrew8ihC0NBG+y6azyqz4a770WDUvd5hTWQqlLXpigCT7 WWlpP8XjN6oHilgYSKwNLhS3FPBU/jmSnBOozMDsiPifMGO3K/oxEfW663g3gFHh N9nzB42tH+8gccHEIYiAQbDCgADg/NBSb3mMzX4Zo2cVHwhC3uB2B7zrw/Ptdojs ne73eB+H/zqMUR1D0R731e6ES7VQDOULev/7DbKrJbo2EXd3jU12m2ZsuGUMWa8b o11FprkYhrJk7hExUy/W3vLhQGQfIXyeq89+yk7IfflWxHAxibpVUl2jL6sdeZLO wcAdkKoW8Irp5mm2aDKZpUYJPe4zEXaw -----END CERTIFICATE-----Generated at Mon Oct 20 04:20:34 2025 by rpki-client