$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft File: HUXnKUVKJCRGewPPyZfX6xhK52Y.mft (raw, json) Hash identifier: uSbrjXjj7hL1ECDECdmoZ7QSX03GTGCyn8wky1Z/zk4= Subject key identifier: F6:C5:59:5F:65:7C:82:5D:6A:71:AA:DE:7C:AF:01:FA:E9:31:9A:77 Authority key identifier: 1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 Certificate issuer: /CN=A91B15DC/serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft Manifest number: 91 Signing time: Sun 19 Oct 2025 09:43:03 +0000 Manifest this update: Sun 19 Oct 2025 09:43:03 +0000 Manifest next update: Sun 26 Oct 2025 09:43:03 +0000 Files and hashes: 1: HUXnKUVKJCRGewPPyZfX6xhK52Y.crl (hash: PXRcMp8NRODO2TwjLZDI/4zc6jedVIwKPLVHUEgib28=) 2: 14F7BC00CEEF11EFAF6F762FC4F9AE02.roa (hash: ky3VVMd3//RxqftA8fTaKeSx7YmcJGB1DWo9MLV8eHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B15DC, serialNumber=1D45E729454A2424467B03CFC997D7EB184AE766 Validity Not Before: Oct 19 09:43:03 2025 GMT Not After : Oct 26 09:43:03 2025 GMT Subject: CN=68f4b2a7-fcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:a3:ea:a0:04:ec:40:e9:54:59:56:82:63: 34:ba:5f:32:a7:2f:e6:63:85:1d:e4:52:8a:9d:08: b8:2e:3f:9f:bd:99:15:9d:ae:2d:34:39:9c:51:84: 20:6f:57:61:81:c4:97:a6:ee:31:0a:2e:1a:02:fa: 80:e0:dc:16:0f:5a:c0:9d:8c:7b:f2:bb:d0:b2:a7: c1:dc:89:cd:42:ad:75:c3:31:9a:a1:21:72:b9:72: a8:df:53:51:6d:c2:eb:90:34:fc:39:4f:92:06:08: 14:19:52:7d:a7:ba:6e:5b:6e:0d:5e:fc:8b:9b:49: d4:96:43:6b:d9:42:8f:af:df:23:1f:e8:d4:f0:1b: bb:2c:44:b2:16:82:0e:a9:e1:bf:bf:11:e6:85:c1: a2:37:d8:ab:b3:a9:27:10:22:58:86:64:93:59:1f: cd:d2:d0:69:98:59:05:81:22:d4:8b:c2:ca:de:9b: 73:a3:a5:96:c5:4d:f4:80:4d:fb:c4:e5:d9:47:f6: a4:44:3a:37:48:d9:43:4e:a5:0f:e2:38:4f:27:1e: a5:f0:29:b8:c5:17:a9:c6:8c:fa:7e:f1:ea:75:49: 8b:e4:3a:25:58:27:ed:4f:6f:c1:5f:da:4f:f5:62: 8a:3b:47:4b:95:e4:3e:70:82:68:1e:65:50:9e:30: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C5:59:5F:65:7C:82:5D:6A:71:AA:DE:7C:AF:01:FA:E9:31:9A:77 X509v3 Authority Key Identifier: keyid:1D:45:E7:29:45:4A:24:24:46:7B:03:CF:C9:97:D7:EB:18:4A:E7:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUXnKUVKJCRGewPPyZfX6xhK52Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/5823AF86CEED11EFBD655511C4F9AE02/HUXnKUVKJCRGewPPyZfX6xhK52Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:51:3c:77:f0:16:54:2a:88:39:f3:b2:42:ff:56:b5:60:ae: 57:06:33:46:38:51:80:ed:3e:5c:ac:de:2e:a9:9c:d1:75:e3: 2d:5f:4a:68:a2:2e:5c:95:82:59:dd:cd:d0:0f:2c:4c:19:e4: e2:55:dc:45:3f:0f:f1:14:f6:09:d5:ae:74:a3:ef:0b:6d:b3: 73:c2:bd:3b:89:21:c2:92:1f:5b:a9:d2:52:f7:f9:44:e3:50: df:a3:a2:d6:8f:3d:4a:9a:f3:b3:25:21:6a:a1:26:e9:41:52: 1c:9c:88:6c:b3:50:cd:4c:a2:7c:a3:38:45:5b:97:3c:7d:50: 75:4f:fb:f2:6a:29:c4:68:97:e7:3f:3d:b8:74:16:10:de:c2: 62:e7:f8:6b:2a:fc:56:79:5e:10:7b:d8:c8:dd:ec:90:bd:c4: 39:f3:4e:fd:a5:92:da:27:06:89:de:2e:b8:77:39:53:3e:1d: 54:4b:15:8e:24:3a:b5:9b:d3:1a:2a:cc:4c:18:70:6a:79:21: 9b:27:e9:1d:4e:c7:19:83:c7:f0:6f:ae:99:5d:3f:74:b7:24: d2:a7:32:54:0c:dd:22:d3:99:a1:44:aa:ad:7d:1e:5e:9c:8e: 05:b0:d9:74:2e:d1:a5:2c:a0:ce:ea:03:6e:a7:a7:14:9a:c0: 68:76:44:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE1REMxMTAvBgNVBAUTKDFENDVFNzI5NDU0QTI0MjQ0NjdCMDNDRkM5OTdEN0VC MTg0QUU3NjYwHhcNMjUxMDE5MDk0MzAzWhcNMjUxMDI2MDk0MzAzWjAYMRYwFAYD VQQDEw02OGY0YjJhNy1mY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcKj6qAE7EDpVFlWgmM0ul8ypy/mY4Ud5FKKnQi4Lj+fvZkVna4tNDmcUYQg b1dhgcSXpu4xCi4aAvqA4NwWD1rAnYx78rvQsqfB3InNQq11wzGaoSFyuXKo31NR bcLrkDT8OU+SBggUGVJ9p7puW24NXvyLm0nUlkNr2UKPr98jH+jU8Bu7LESyFoIO qeG/vxHmhcGiN9irs6knECJYhmSTWR/N0tBpmFkFgSLUi8LK3ptzo6WWxU30gE37 xOXZR/akRDo3SNlDTqUP4jhPJx6l8Cm4xRepxoz6fvHqdUmL5DolWCftT2/BX9pP 9WKKO0dLleQ+cIJoHmVQnjCx0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbFWV9l fIJdanGq3nyvAfrpMZp3MB8GA1UdIwQYMBaAFB1F5ylFSiQkRnsDz8mX1+sYSudm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTVEQy81ODIzQUY4NkNF RUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pDUkdld1BQeVpmWDZ4aEs1 MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVWG5LVVZLSkNSR2V3UFB5WmZYNnhoSzUyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTVEQy81ODIzQUY4NkNFRUQxMUVGQkQ2NTU1MTFDNEY5QUUwMi9IVVhuS1VWS0pD Ukdld1BQeVpmWDZ4aEs1MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUTx38BZUKog587JC/1a1YK5XBjNGOFGA7T5crN4uqZzRdeMtX0po oi5clYJZ3c3QDyxMGeTiVdxFPw/xFPYJ1a50o+8LbbNzwr07iSHCkh9bqdJS9/lE 41Dfo6LWjz1KmvOzJSFqoSbpQVIcnIhss1DNTKJ8ozhFW5c8fVB1T/vyainEaJfn Pz24dBYQ3sJi5/hrKvxWeV4Qe9jI3eyQvcQ58079pZLaJwaJ3i64dzlTPh1USxWO JDq1m9MaKsxMGHBqeSGbJ+kdTscZg8fwb66ZXT90tyTSpzJUDN0i05mhRKqtfR5e nI4FsNl0LtGlLKDO6gNup6cUmsBodkQ1 -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:38 2025 by rpki-client