$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft File: kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json) Hash identifier: Fq7CZ6WQvMFATtXlNK91tN61VLvYuSqqo/OpFI3cZTM= Subject key identifier: AC:B1:A1:AE:CE:68:84:78:57:B3:6D:A9:78:3A:3D:29:2A:2F:D4:47 Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD Certificate issuer: /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Certificate serial: 03ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft Manifest number: 03E7 Signing time: Sun 19 Oct 2025 02:29:43 +0000 Manifest this update: Sun 19 Oct 2025 02:29:42 +0000 Manifest next update: Sun 26 Oct 2025 02:29:42 +0000 Files and hashes: 1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: EHcx5dP16VR+vKC1jo783QwWg4tbY1BCC/aAwqNGd9Y=) 2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: ys9QvzSFj3FhbpKZdlZ1B6mYP128OL/SXk3uErxC5zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1005 (0x3ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD Validity Not Before: Oct 19 02:29:42 2025 GMT Not After : Oct 26 02:29:42 2025 GMT Subject: CN=68f44d17-f89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:0d:1a:76:68:14:4d:c6:0e:e3:af:08:3b: 9f:17:c3:43:ec:71:86:fc:16:f1:56:cf:6d:d9:dd: cc:80:af:a6:54:39:bb:29:3e:07:73:7e:f5:6d:81: 65:3d:18:ac:49:ab:84:38:27:aa:1b:39:ba:a0:73: 7d:a5:b8:89:23:bc:3e:0e:c7:42:bd:44:2f:4e:95: 63:b3:4e:ab:0d:d1:bf:03:6b:e8:af:4e:d7:61:ad: 6c:e6:a7:76:cd:ff:64:16:3d:1c:ea:f7:a0:8c:77: 4f:fe:a2:df:11:98:83:78:1c:43:99:74:34:8a:98: 55:8b:f2:ee:11:40:18:c2:d1:46:d5:ae:bc:1e:99: 39:35:30:39:4f:70:0f:c2:22:3e:b2:8a:b6:54:4e: 21:e1:16:80:46:7f:52:a8:98:fb:89:6a:f2:f8:77: 04:f5:73:df:15:07:ef:63:b9:21:dc:5d:36:53:04: 9c:6b:c3:b1:cf:4c:a2:cf:ab:25:7b:f3:61:97:17: 03:96:ef:0b:bf:2d:8b:69:97:2f:1e:39:5c:6c:11: 9c:78:4a:e3:8c:0d:df:f4:11:50:3b:ad:ca:e0:33: cd:09:42:78:23:32:db:10:88:e9:15:51:ea:20:86: b6:d3:5d:70:9c:81:bc:b8:62:71:a4:a3:4a:47:a8: 1e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B1:A1:AE:CE:68:84:78:57:B3:6D:A9:78:3A:3D:29:2A:2F:D4:47 X509v3 Authority Key Identifier: keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c3:c3:32:75:ed:d7:46:27:97:df:b8:0a:5a:5b:05:2d:2c: 96:93:da:91:f0:b2:f4:4e:e1:d5:47:e2:93:53:41:26:e0:36: 70:e1:42:f5:af:e1:de:3b:91:f2:c9:1e:71:9f:f9:4f:ff:a9: 51:8d:a6:8c:52:a1:83:4d:ce:b0:62:e9:94:4c:45:09:9a:58: 17:d5:60:54:71:62:04:31:46:56:b3:ab:d5:ae:a3:38:a0:e9: 72:90:aa:8a:76:92:46:67:7a:4d:28:ea:fe:67:ae:d7:fe:78: 9d:01:f9:c8:53:a8:c9:b2:b8:2e:9c:e8:eb:11:5e:7a:df:c8: 06:8f:3d:10:a0:61:32:f6:44:ae:14:60:c8:33:4e:d1:a9:2f: 17:da:29:57:bb:d5:9b:73:48:c3:e2:a2:59:ae:b4:cc:4d:39: d2:68:fe:e8:19:be:a6:2b:9a:8c:40:87:3b:c3:17:1a:98:55: b9:3b:4a:e3:94:17:db:63:e5:7e:4b:27:d1:bb:b3:d9:d9:7c: b3:d3:37:cb:57:81:48:16:1d:7a:9c:ec:e1:9b:0c:9e:fa:8c: 8b:c9:2f:4e:dc:c7:8b:d4:68:0c:58:df:74:eb:ac:75:36:31: d9:07:ba:ac:d5:e9:09:b5:bb:6c:8a:9f:b4:9e:73:d9:d1:99: 7f:36:93:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBNjQxMTAvBgNVBAUTKDkwN0JCMjYyQjU3MTYyM0UzNEIyRTIwQzYwQTcxOEMx NzM5Q0MzQkQwHhcNMjUxMDE5MDIyOTQyWhcNMjUxMDI2MDIyOTQyWjAYMRYwFAYD VQQDEw02OGY0NGQxNy1mODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NsNGnZoFE3GDuOvCDufF8ND7HGG/BbxVs9t2d3MgK+mVDm7KT4Hc371bYFl PRisSauEOCeqGzm6oHN9pbiJI7w+DsdCvUQvTpVjs06rDdG/A2vor07XYa1s5qd2 zf9kFj0c6vegjHdP/qLfEZiDeBxDmXQ0iphVi/LuEUAYwtFG1a68Hpk5NTA5T3AP wiI+soq2VE4h4RaARn9SqJj7iWry+HcE9XPfFQfvY7kh3F02UwSca8Oxz0yiz6sl e/NhlxcDlu8Lvy2LaZcvHjlcbBGceErjjA3f9BFQO63K4DPNCUJ4IzLbEIjpFVHq IIa2011wnIG8uGJxpKNKR6geLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyxoa7O aIR4V7NtqXg6PSkqL9RHMB8GA1UdIwQYMBaAFJB7smK1cWI+NLLiDGCnGMFznMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0E2NC8zNThDNjdCRTlB REExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlqNDBzdUlNWUtjWXdYT2N3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIdXlZclZ4WWo0MHN1SU1ZS2NZd1hPY3c3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0E2NC8zNThDNjdCRTlBREExMUVDODU3MTMzNzhDNEY5QUUwMi9rSHV5WXJWeFlq NDBzdUlNWUtjWXdYT2N3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKw8Myde3XRieX37gKWlsFLSyWk9qR8LL0TuHVR+KTU0Em4DZw4UL1 r+HeO5HyyR5xn/lP/6lRjaaMUqGDTc6wYumUTEUJmlgX1WBUcWIEMUZWs6vVrqM4 oOlykKqKdpJGZ3pNKOr+Z67X/nidAfnIU6jJsrgunOjrEV5638gGjz0QoGEy9kSu FGDIM07RqS8X2ilXu9Wbc0jD4qJZrrTMTTnSaP7oGb6mK5qMQIc7wxcamFW5O0rj lBfbY+V+SyfRu7PZ2Xyz0zfLV4FIFh16nOzhmwye+oyLyS9O3MeL1GgMWN9066x1 NjHZB7qs1ekJtbtsip+0nnPZ0Zl/NpMN -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:13 2025 by rpki-client