$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: NN9E1sqf/LN68zmVX1fzqVT0l3oObpsKGgpLbnDT8mY= Subject key identifier: 35:05:63:0E:E2:05:DF:C1:5C:0C:10:81:B5:15:E4:45:AF:11:42:A7 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C90 Signing time: Sat 18 Oct 2025 19:08:21 +0000 Manifest this update: Sat 18 Oct 2025 19:08:20 +0000 Manifest next update: Sat 25 Oct 2025 19:08:20 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: xJO17CRT61S6YQd2He6skyUMmvSWYkFPlUuS1I6QPcU=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: rUTKhJ4mbBn/gtcjaqFary2usRDlDOu+VtUbm3mrKXA=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3246 (0xcae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 18 19:08:20 2025 GMT Not After : Oct 25 19:08:20 2025 GMT Subject: CN=68f3e5a4-6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:ac:25:6b:d6:6b:11:75:da:63:fb:b2:d8: 9f:cc:03:59:68:92:9f:96:8d:44:b8:b9:28:1d:f6: 7f:70:68:0e:d8:d7:8a:5d:8d:70:85:2c:da:dc:05: 95:d2:ea:cb:9c:ed:07:f2:6f:a3:00:b3:32:82:7a: 95:3e:4a:23:c6:65:5e:55:71:c1:19:e3:ea:15:db: 0c:13:81:6b:95:46:82:44:91:3c:d1:ae:0d:ef:dc: 67:09:7c:e2:b3:d9:b6:26:b8:62:a2:bc:65:3b:ad: c5:78:87:c3:2c:e1:e0:14:a5:c8:f5:32:fa:7a:f7: e6:25:7f:91:03:c9:2c:96:c2:dc:ca:63:48:9e:6e: ce:2d:fa:4d:90:ff:36:60:4d:91:f8:f0:17:2d:fb: 5a:ff:2f:c1:f8:8d:35:28:5f:11:ab:31:8a:3e:86: d2:37:b0:8c:bd:5c:f6:17:d2:74:23:53:21:0d:ca: d5:1d:e2:ed:d3:1d:9d:bf:52:04:38:59:68:dd:7d: bc:01:de:d1:49:c6:0d:c9:4c:b9:ca:87:68:f9:71: 80:4a:0a:81:10:46:4f:d6:13:8e:ad:f3:b4:1e:2f: 1b:b7:96:ce:04:a5:a3:ae:a8:31:77:b6:77:49:e9: c2:9f:36:89:2b:38:37:d8:e9:47:46:c9:ad:2f:d9: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:63:0E:E2:05:DF:C1:5C:0C:10:81:B5:15:E4:45:AF:11:42:A7 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:04:58:35:52:67:c1:1e:a1:2b:6f:5f:e1:bc:69:e7:76:b9: bc:7f:30:e6:57:ee:e8:61:b9:ad:64:9a:05:f5:4f:b6:87:c4: 20:d0:f1:4c:dc:ed:40:00:97:2a:05:5d:76:b8:32:b5:b8:8e: 79:ce:d6:33:dc:08:b6:29:6f:04:b9:a4:2b:77:4e:f8:e0:04: f7:19:66:00:fc:85:7b:90:60:e4:43:8d:b7:40:cd:3d:1e:70: 35:87:c3:c4:2b:36:ef:6d:8e:00:39:22:57:9a:ca:55:1d:63: ea:93:14:a7:79:89:11:c1:8a:d5:dc:57:75:4f:f4:66:71:4e: 59:33:db:89:41:ff:91:9b:34:83:5e:c4:2b:40:2c:17:9d:70: c2:5b:98:28:be:38:81:f5:79:cd:02:6c:b6:86:ac:4e:70:86: 5e:39:89:53:20:d6:94:04:ea:83:1b:48:3c:a1:c8:f3:ff:6d: 0e:66:81:22:3d:df:64:5d:54:a3:ea:81:cb:bd:0a:42:56:72: fa:9e:ac:1c:a4:7f:24:3f:bd:70:d3:dd:43:37:9b:5f:c3:94: 29:e3:01:9a:87:1d:28:c4:fe:79:6f:19:b2:10:06:46:3f:79: a5:75:24:48:3d:5a:d7:8d:38:12:3d:83:ba:69:a4:81:2f:19: 2e:3e:77:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMDE4MTkwODIwWhcNMjUxMDI1MTkwODIwWjAYMRYwFAYD VQQDEw02OGYzZTVhNC02ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E2sJWvWaxF12mP7stifzANZaJKflo1EuLkoHfZ/cGgO2NeKXY1whSza3AWV 0urLnO0H8m+jALMygnqVPkojxmVeVXHBGePqFdsME4FrlUaCRJE80a4N79xnCXzi s9m2JrhiorxlO63FeIfDLOHgFKXI9TL6evfmJX+RA8kslsLcymNInm7OLfpNkP82 YE2R+PAXLfta/y/B+I01KF8RqzGKPobSN7CMvVz2F9J0I1MhDcrVHeLt0x2dv1IE OFlo3X28Ad7RScYNyUy5yodo+XGASgqBEEZP1hOOrfO0Hi8bt5bOBKWjrqgxd7Z3 SenCnzaJKzg32OlHRsmtL9kn7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUFYw7i Bd/BXAwQgbUV5EWvEUKnMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZBFg1UmfBHqErb1/hvGnndrm8fzDmV+7oYbmtZJoF9U+2h8Qg0PFM 3O1AAJcqBV12uDK1uI55ztYz3Ai2KW8EuaQrd0744AT3GWYA/IV7kGDkQ423QM09 HnA1h8PEKzbvbY4AOSJXmspVHWPqkxSneYkRwYrV3Fd1T/RmcU5ZM9uJQf+RmzSD XsQrQCwXnXDCW5govjiB9XnNAmy2hqxOcIZeOYlTINaUBOqDG0g8ocjz/20OZoEi Pd9kXVSj6oHLvQpCVnL6nqwcpH8kP71w091DN5tfw5Qp4wGahx0oxP55bxmyEAZG P3mldSRIPVrXjTgSPYO6aaSBLxkuPne6 -----END CERTIFICATE-----Generated at Mon Oct 20 05:40:38 2025 by rpki-client