$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft File: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft (raw, json) Hash identifier: WuhaQkoUINQE8oa2i55iKVx6nCHi+HXD+McQSYNKZFQ= Subject key identifier: B6:18:0D:7D:70:0A:13:1D:4D:A8:20:CF:77:3A:60:09:AC:03:6E:1D Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Certificate serial: 1D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft Manifest number: 1D62 Signing time: Sat 18 Oct 2025 16:26:53 +0000 Manifest this update: Sat 18 Oct 2025 16:26:52 +0000 Manifest next update: Sat 25 Oct 2025 16:26:52 +0000 Files and hashes: 1: hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl (hash: 6yyEcs9YXVkrUv44obeq03hZC5f0K5yBmMQFy0bhH38=) 2: F959A9A0F11011EB8E63FC73C4F9AE02.roa (hash: bD5fDxaaGSUwPwbrYDQw/+LS1pV4Lc6xbyyKLC5ox2c=) 3: 2C9502D83C4011EA852C097BC4F9AE02.roa (hash: T9CcmOYBnNKsJ74gzkX91oYJBjZ0iZKwkKctLlhYFiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7547 (0x1d7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696 Validity Not Before: Oct 18 16:26:52 2025 GMT Not After : Oct 25 16:26:52 2025 GMT Subject: CN=68f3bfcd-4158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:90:69:17:79:b5:db:d4:b8:b1:45:6c:a3: d8:1e:f1:02:cb:77:7a:dd:9d:e3:ef:c4:0d:b8:76: 53:db:ef:86:08:62:3e:1c:ba:75:80:98:18:78:1c: a6:1b:c6:70:eb:cd:76:1c:c5:db:22:77:60:70:c8: 9d:8e:03:78:c9:e5:6e:6a:b5:fb:aa:b1:66:e7:dd: a7:4b:bb:33:9d:50:a9:e2:6e:bd:07:9d:fc:a0:b5: b4:aa:3b:65:7e:d1:44:df:a2:fb:0f:01:e0:ee:26: ee:ee:85:70:62:84:6a:f2:0a:ca:53:2c:20:1c:f8: e3:16:e2:18:8a:cb:1b:70:8c:f4:1f:22:ba:10:1c: e5:de:ab:58:a6:d7:4e:05:da:14:c1:fc:c9:e7:05: 8f:8f:3d:80:e0:a0:11:f2:0f:c0:56:de:f9:0f:db: ae:6a:8b:78:4f:68:60:ec:d2:d9:87:e5:45:f3:c3: 92:2c:f8:39:76:4a:f1:96:cf:2c:24:b0:50:8c:ff: 4b:c9:e2:77:de:57:bc:b7:95:35:63:e8:51:63:7c: 94:48:67:23:ad:ea:86:45:a6:cd:fe:b0:64:b9:ba: 98:02:a2:d5:24:ca:8a:b0:0b:81:e2:e6:83:fc:c8: 36:09:8d:76:e3:7a:a2:15:a1:f0:67:35:5a:f1:7e: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:18:0D:7D:70:0A:13:1D:4D:A8:20:CF:77:3A:60:09:AC:03:6E:1D X509v3 Authority Key Identifier: keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:32:80:bd:d2:a4:3f:58:c1:ed:87:c2:1b:b1:1b:00:77:32: d8:7c:f0:ba:78:39:54:88:69:66:0d:b2:66:05:25:01:8d:7f: cb:bc:24:30:c7:ab:af:be:54:1a:a7:2e:8b:45:23:ed:ca:0c: 61:4c:75:11:99:6e:94:01:39:bb:26:72:cd:58:d0:8a:26:f6: 7e:0d:76:2e:0d:47:7b:3e:b9:7f:eb:d4:58:95:b8:28:0e:9f: 87:20:02:62:50:47:6f:24:68:ab:b9:b4:5c:f1:93:8c:d8:ce: cb:a0:8d:39:e0:29:a3:c7:81:3d:65:28:38:11:c3:f7:1f:1d: 18:84:3d:f7:06:38:66:d5:6e:74:d5:64:c8:78:1b:a7:d5:99: 1f:fb:46:8c:a5:2a:a8:2e:ce:b4:99:fb:7f:54:cf:94:f2:6b: cc:31:2e:2c:5e:d7:7c:55:4e:43:4a:f4:4b:d0:e5:ae:82:85: 91:9d:30:8c:4f:e5:97:44:c8:4f:55:ff:ca:36:77:fe:41:d0: 06:ca:2d:16:cd:3d:e4:15:d8:0f:9d:a6:0b:82:91:9a:cc:36: 65:dd:47:45:82:bf:4c:8e:ac:da:22:bd:58:0a:0e:50:1f:09: 66:14:9a:ad:95:e5:07:2d:66:68:6e:46:ab:fc:dd:4f:cb:0c: 65:84:a6:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBOEMxMTAvBgNVBAUTKDg3MEI5Q0QyRTQxREFCMDVCRDU1MjdDOTE1MEU5NDg5 NTk3MTY2OTYwHhcNMjUxMDE4MTYyNjUyWhcNMjUxMDI1MTYyNjUyWjAYMRYwFAYD VQQDEw02OGYzYmZjZC00MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuqQaRd5tdvUuLFFbKPYHvECy3d63Z3j78QNuHZT2++GCGI+HLp1gJgYeBym G8Zw6812HMXbIndgcMidjgN4yeVuarX7qrFm592nS7sznVCp4m69B538oLW0qjtl ftFE36L7DwHg7ibu7oVwYoRq8grKUywgHPjjFuIYissbcIz0HyK6EBzl3qtYptdO BdoUwfzJ5wWPjz2A4KAR8g/AVt75D9uuaot4T2hg7NLZh+VF88OSLPg5dkrxls8s JLBQjP9LyeJ33le8t5U1Y+hRY3yUSGcjreqGRabN/rBkubqYAqLVJMqKsAuB4uaD /Mg2CY1243qiFaHwZzVa8X4/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYYDX1w ChMdTaggz3c6YAmsA24dMB8GA1UdIwQYMBaAFIcLnNLkHasFvVUnyRUOlIlZcWaW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUE4Qy9GMjdCOUNERUJC ODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3VzlWU2ZKRlE2VWlWbHha cFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h3dWMwdVFkcXdXOVZTZkpGUTZVaVZseFpwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUE4Qy9GMjdCOUNERUJCODYxMUU2OEZGNTBDNTdDNEY5QUUwMi9od3VjMHVRZHF3 VzlWU2ZKRlE2VWlWbHhacFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJMoC90qQ/WMHth8IbsRsAdzLYfPC6eDlUiGlmDbJmBSUBjX/LvCQw x6uvvlQapy6LRSPtygxhTHURmW6UATm7JnLNWNCKJvZ+DXYuDUd7Prl/69RYlbgo Dp+HIAJiUEdvJGirubRc8ZOM2M7LoI054Cmjx4E9ZSg4EcP3Hx0YhD33Bjhm1W50 1WTIeBun1Zkf+0aMpSqoLs60mft/VM+U8mvMMS4sXtd8VU5DSvRL0OWugoWRnTCM T+WXRMhPVf/KNnf+QdAGyi0WzT3kFdgPnaYLgpGazDZl3UdFgr9MjqzaIr1YCg5Q HwlmFJqtleUHLWZobkar/N1PywxlhKb8 -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:31 2025 by rpki-client