$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: owzHpenMV+i7Uq1ISeleisgwm56FO/DAwv5/LL6V2fU= Subject key identifier: 79:1E:8A:6E:AC:C8:D9:25:08:BB:CC:26:AC:92:FE:03:73:AE:6D:C3 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 94 Signing time: Sun 19 Oct 2025 09:39:07 +0000 Manifest this update: Sun 19 Oct 2025 09:39:06 +0000 Manifest next update: Sun 26 Oct 2025 09:39:06 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: 2v5ZffqZbF3MteTuK5OFotdjKLS0E5SaxBw2VDDh2PM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Oct 19 09:39:06 2025 GMT Not After : Oct 26 09:39:06 2025 GMT Subject: CN=68f4b1ba-013a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:a6:97:00:5b:cc:74:ad:be:d2:83:ee:a9: d2:a5:02:48:2e:14:51:a6:41:c2:6b:70:e4:3d:ee: 84:14:75:c2:1a:ea:1e:27:3f:9e:76:c4:7e:35:fe: d9:9f:b2:e4:9f:6d:74:08:c3:50:59:89:a9:ed:ad: cf:70:fd:b3:40:ad:73:83:3e:63:34:30:db:fe:b7: a4:3b:ac:65:c8:bb:0e:38:26:51:f8:e2:33:38:f6: 4f:25:05:18:7f:ed:eb:ce:ed:75:ea:ad:b1:fa:10: c3:8c:8e:d9:f9:97:59:d1:61:62:af:c4:65:5d:27: 98:8d:64:dc:30:b3:53:4f:f3:ec:0b:b9:bc:06:61: 0f:91:24:e0:91:d5:96:c7:53:a2:88:0e:c2:da:c6: 66:4d:88:0c:bf:04:d5:0b:9e:d2:52:2b:bd:d0:41: a6:0f:e8:76:b7:fc:95:5b:62:f4:41:3a:58:a2:2a: 38:f5:81:03:cf:c2:17:09:41:d3:27:c9:9a:04:31: 01:78:c8:80:36:b7:0c:6a:6d:1c:6f:fb:9a:61:ad: 29:93:a6:be:86:fa:9b:1d:a8:5c:24:2d:90:2d:22: 8d:e2:dd:f2:cd:fe:37:a7:a1:2c:23:b2:f1:02:74: 0a:10:ce:14:49:5b:b4:64:22:63:3c:5a:fc:06:59: 31:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:8A:6E:AC:C8:D9:25:08:BB:CC:26:AC:92:FE:03:73:AE:6D:C3 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c2:dc:06:a4:fc:17:2d:2d:9b:4b:96:2b:54:90:c8:8a:d9: 8b:14:48:c4:2e:9c:0f:dc:32:77:85:0e:36:b1:43:04:2f:70: 2f:fe:8b:79:df:6e:6b:4d:bb:e2:20:b2:ff:24:8d:2f:01:9b: 1c:3f:f4:06:da:6b:d0:05:d4:e8:3a:17:a0:56:25:6e:9b:25: 50:6a:06:5c:5c:a1:40:65:65:a5:f0:48:3e:52:c7:72:71:06: 7a:5a:79:ea:8d:92:2b:09:18:88:1f:5b:8f:70:2f:34:27:51: aa:8c:93:3e:9e:cd:44:46:4b:db:fb:93:ad:1e:3a:a1:3e:07: 16:7f:1f:a8:51:f3:0d:23:b7:ce:41:9d:af:30:bd:32:e9:22: d1:23:18:48:c3:8e:02:ad:e5:38:04:bb:e4:92:3e:80:f0:b7: 84:74:5a:c5:75:a7:36:1b:bd:43:04:8f:61:ef:b1:a9:14:0b: be:60:8b:83:1f:88:ab:cb:2a:a4:e4:4a:6f:12:6b:e6:23:6e: b4:29:a4:cb:96:db:03:b9:ef:77:1f:19:3c:04:2b:ad:3d:b2: ff:4f:c2:3d:41:1c:9b:06:de:64:06:70:28:24:f1:61:a9:17: 8c:bc:70:f4:a5:cc:bd:7a:0f:4b:0d:0d:16:f1:48:c7:bc:5f: 4d:0f:4b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjUxMDE5MDkzOTA2WhcNMjUxMDI2MDkzOTA2WjAYMRYwFAYD VQQDEw02OGY0YjFiYS0wMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4ymlwBbzHStvtKD7qnSpQJILhRRpkHCa3DkPe6EFHXCGuoeJz+edsR+Nf7Z n7Lkn210CMNQWYmp7a3PcP2zQK1zgz5jNDDb/rekO6xlyLsOOCZR+OIzOPZPJQUY f+3rzu116q2x+hDDjI7Z+ZdZ0WFir8RlXSeYjWTcMLNTT/PsC7m8BmEPkSTgkdWW x1OiiA7C2sZmTYgMvwTVC57SUiu90EGmD+h2t/yVW2L0QTpYoio49YEDz8IXCUHT J8maBDEBeMiANrcMam0cb/uaYa0pk6a+hvqbHahcJC2QLSKN4t3yzf43p6EsI7Lx AnQKEM4USVu0ZCJjPFr8BlkxrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkeim6s yNklCLvMJqyS/gNzrm3DMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiwtwGpPwXLS2bS5YrVJDIitmLFEjELpwP3DJ3hQ42sUMEL3Av/ot5 325rTbviILL/JI0vAZscP/QG2mvQBdToOhegViVumyVQagZcXKFAZWWl8Eg+Usdy cQZ6WnnqjZIrCRiIH1uPcC80J1GqjJM+ns1ERkvb+5OtHjqhPgcWfx+oUfMNI7fO QZ2vML0y6SLRIxhIw44CreU4BLvkkj6A8LeEdFrFdac2G71DBI9h77GpFAu+YIuD H4iryyqk5EpvEmvmI260KaTLltsDue93Hxk8BCutPbL/T8I9QRybBt5kBnAoJPFh qReMvHD0pcy9eg9LDQ0W8UjHvF9ND0v6 -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:23 2025 by rpki-client