$ rpki-client -vvf rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft File: hneZBT7JF0sRHLtGspf6ZH6YKqU.mft (raw, json) Hash identifier: PSBRrK1lG0o1PZf+pFY0k6zd1y//YP46S6ZMV7CivMI= Subject key identifier: D8:66:31:5A:38:EC:74:C7:BF:3F:B5:08:EE:7D:AC:B7:F7:CF:20:4D Authority key identifier: 86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 Certificate issuer: /CN=A91A00E4/serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft Manifest number: B4 Signing time: Sun 19 Oct 2025 09:11:04 +0000 Manifest this update: Sun 19 Oct 2025 09:11:04 +0000 Manifest next update: Sun 26 Oct 2025 09:11:04 +0000 Files and hashes: 1: hneZBT7JF0sRHLtGspf6ZH6YKqU.crl (hash: wlPZSZp/FMttrrv3+h2Azm1wEfQq9y+vLAP7DDzjb9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A00E4, serialNumber=867799053EC9174B111CBB46B297FA647E982AA5 Validity Not Before: Oct 19 09:11:04 2025 GMT Not After : Oct 26 09:11:04 2025 GMT Subject: CN=68f4ab28-6554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:1b:ac:fc:d2:34:19:08:4f:4c:41:7d:34: da:cd:b5:d8:eb:44:cf:94:fd:a7:27:da:0d:b6:92: 71:8b:f5:1a:5b:88:00:bb:7f:86:01:59:c6:c5:d1: 19:b3:43:aa:24:6d:8f:69:e5:93:9c:2e:6d:3e:5b: b1:e6:d7:43:d7:97:b6:14:b3:50:3f:0c:a3:93:74: c9:a1:31:9f:55:90:12:9b:7f:36:04:91:00:ed:94: 73:18:b0:40:98:4e:a4:1c:63:ce:a1:8f:08:5b:56: 05:82:6a:b1:92:fe:80:01:c8:93:4c:a7:26:c7:7f: 02:c6:7b:fd:7b:9d:83:56:51:fa:37:6e:fb:fe:b4: fb:6b:e5:f3:31:11:d7:3a:78:50:6c:78:9b:3c:2e: cc:56:98:34:98:a4:ce:17:99:53:ed:bf:fd:01:bf: 99:6e:c4:9e:c2:07:37:31:b8:89:54:8a:02:77:29: 5f:b1:a8:66:ae:5c:f0:e2:51:5a:a5:0f:10:c2:dc: 1c:05:04:39:c1:8b:3e:ee:bb:29:5b:9c:92:ed:68: d6:47:4b:c9:22:ea:92:21:3b:6d:65:26:85:63:03: 8a:66:df:3e:93:fa:f2:93:ea:88:28:91:39:eb:f4: de:30:00:e6:a7:ea:e0:d1:31:43:85:f9:66:24:26: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:66:31:5A:38:EC:74:C7:BF:3F:B5:08:EE:7D:AC:B7:F7:CF:20:4D X509v3 Authority Key Identifier: keyid:86:77:99:05:3E:C9:17:4B:11:1C:BB:46:B2:97:FA:64:7E:98:2A:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hneZBT7JF0sRHLtGspf6ZH6YKqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A00E4/5608A4989A6511EF9F7AB226C4F9AE02/hneZBT7JF0sRHLtGspf6ZH6YKqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:0f:64:7e:8f:ac:76:21:94:22:4a:99:53:cf:cd:d7:bc: 6b:f6:ce:d7:90:55:e9:84:2a:aa:66:3f:b6:10:ab:4d:4a:36: fe:8f:50:b5:f1:4f:10:c6:85:67:49:5c:ad:ac:20:d2:41:2d: e1:0c:25:bb:dc:3b:bc:6d:e3:7d:81:4e:61:00:04:47:b1:2d: 28:8a:1c:20:10:48:51:1e:02:b0:c9:3a:5d:ca:71:48:0b:53: f0:36:bc:ee:47:4b:9f:8e:bf:de:b4:f6:d5:2b:bd:aa:7a:5a: ec:22:0f:3e:d9:2b:ef:4d:8f:5a:29:e3:a6:2a:86:02:36:d2: 00:38:c1:c6:57:5f:33:10:34:78:d7:75:37:b6:27:71:85:c3: e4:a9:5d:d3:32:f6:32:25:d7:b8:5b:ed:79:88:0d:23:53:ba: 5b:38:20:6e:75:75:4d:48:df:75:87:63:7e:1a:24:3a:7c:d1: 30:91:41:a6:67:70:1b:d6:d3:3b:58:99:61:2b:b5:e5:8e:bd: f4:34:3b:dd:b4:4a:53:23:97:b2:35:ea:19:97:bb:a0:61:3a: 50:31:41:d0:5d:3b:00:1b:0f:75:85:48:f9:f2:a9:a8:72:e1: 4e:96:0f:7c:b7:6d:22:de:31:26:41:45:3f:73:c1:54:93:be: da:4c:38:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAwRTQxMTAvBgNVBAUTKDg2Nzc5OTA1M0VDOTE3NEIxMTFDQkI0NkIyOTdGQTY0 N0U5ODJBQTUwHhcNMjUxMDE5MDkxMTA0WhcNMjUxMDI2MDkxMTA0WjAYMRYwFAYD VQQDEw02OGY0YWIyOC02NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApB0brPzSNBkIT0xBfTTazbXY60TPlP2nJ9oNtpJxi/UaW4gAu3+GAVnGxdEZ s0OqJG2PaeWTnC5tPlux5tdD15e2FLNQPwyjk3TJoTGfVZASm382BJEA7ZRzGLBA mE6kHGPOoY8IW1YFgmqxkv6AAciTTKcmx38Cxnv9e52DVlH6N277/rT7a+XzMRHX OnhQbHibPC7MVpg0mKTOF5lT7b/9Ab+ZbsSewgc3MbiJVIoCdylfsahmrlzw4lFa pQ8QwtwcBQQ5wYs+7rspW5yS7WjWR0vJIuqSITttZSaFYwOKZt8+k/ryk+qIKJE5 6/TeMADmp+rg0TFDhflmJCZlrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhmMVo4 7HTHvz+1CO59rLf3zyBNMB8GA1UdIwQYMBaAFIZ3mQU+yRdLERy7RrKX+mR+mCql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDBFNC81NjA4QTQ5ODlB NjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYwc1JITHRHc3BmNlpINllL cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huZVpCVDdKRjBzUkhMdEdzcGY2Wkg2WUtxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDBFNC81NjA4QTQ5ODlBNjUxMUVGOUY3QUIyMjZDNEY5QUUwMi9obmVaQlQ3SkYw c1JITHRHc3BmNlpINllLcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFnA9kfo+sdiGUIkqZU8/N17xr9s7XkFXphCqqZj+2EKtNSjb+j1C1 8U8QxoVnSVytrCDSQS3hDCW73Du8beN9gU5hAARHsS0oihwgEEhRHgKwyTpdynFI C1PwNrzuR0ufjr/etPbVK72qelrsIg8+2SvvTY9aKeOmKoYCNtIAOMHGV18zEDR4 13U3tidxhcPkqV3TMvYyJde4W+15iA0jU7pbOCBudXVNSN91h2N+GiQ6fNEwkUGm Z3Ab1tM7WJlhK7Xljr30NDvdtEpTI5eyNeoZl7ugYTpQMUHQXTsAGw91hUj58qmo cuFOlg98t20i3jEmQUU/c8FUk77aTDiO -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:02 2025 by rpki-client