$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft File: HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json) Hash identifier: Qnqw9+ZXQpoF9CC7ORC9VHepL/x3hMbEwZy6hiR93QQ= Subject key identifier: CE:81:5D:91:B4:30:97:46:BB:44:0A:66:1F:D9:71:53:E6:B4:E7:E5 Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 Certificate issuer: /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft Manifest number: 0225 Signing time: Sun 19 Oct 2025 04:17:38 +0000 Manifest this update: Sun 19 Oct 2025 04:17:37 +0000 Manifest next update: Sun 26 Oct 2025 04:17:37 +0000 Files and hashes: 1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: G5KF20/qtKlV7AnMs53zWKFeUzj/FOycl6wKp4mSX5g=) 2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: 3/Fx9zU+/qcgAJraecgoQhxMCpBayBXQ3IM4m/S+gH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189 Validity Not Before: Oct 19 04:17:37 2025 GMT Not After : Oct 26 04:17:37 2025 GMT Subject: CN=68f46662-5d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:c6:6e:d2:c7:9f:73:1b:f7:c0:1d:34:5e: 0e:1e:ee:b3:e8:2e:a3:aa:d2:2d:6c:28:af:1c:4f: 43:72:cc:70:71:fc:b5:f5:47:3a:b9:60:d3:be:eb: 4d:78:22:2b:d2:84:67:c6:22:b4:83:ab:c8:9f:45: 92:49:eb:a4:9b:90:1b:70:6d:2c:00:89:00:b3:e7: 93:ee:42:4e:11:f0:f4:7b:a1:e9:87:3d:62:bf:fb: db:a6:57:d9:8a:57:8d:8f:3b:9c:5b:3c:15:cf:62: 92:a4:8b:cd:d2:9f:7e:5e:86:cc:c6:f9:92:7c:f9: 06:df:2d:cf:e5:c5:87:91:4f:8a:f1:03:b9:c1:3f: 65:b9:51:f0:cc:3c:c4:87:35:b0:cd:de:f1:c9:c4: 71:e2:b3:d5:06:b8:2b:15:7f:02:33:3f:4b:fc:24: 0c:0a:2f:48:3f:25:23:20:a9:94:e8:ac:d3:10:26: 56:e4:20:8e:10:8e:cb:a4:ba:0b:4e:be:30:35:f7: 46:b2:73:42:b4:a3:b5:ef:85:02:01:9e:39:ee:87: c7:20:63:3e:5f:a8:2a:d6:15:7d:c6:57:fb:a9:45: 90:43:a5:fd:9d:f9:3d:eb:e4:aa:73:7f:15:19:70: 5d:a8:aa:83:3f:76:ce:5c:05:0d:40:a5:27:fc:00: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:81:5D:91:B4:30:97:46:BB:44:0A:66:1F:D9:71:53:E6:B4:E7:E5 X509v3 Authority Key Identifier: keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:7d:40:6f:a8:71:91:cb:62:41:b9:d7:f4:b9:cb:fc:a5:af: 1f:1a:83:7b:5a:fb:10:db:6e:61:0b:09:be:c3:bb:0a:34:17: 5d:9f:9f:e8:a8:da:3c:a9:f9:56:ae:c9:c8:eb:b6:23:ff:a0: 97:79:3c:94:27:38:a6:0d:43:53:a4:11:ec:bf:73:75:ee:15: 1f:01:14:3f:16:02:86:45:23:67:67:b1:70:05:a1:c2:e1:64: 08:f2:c0:8a:21:e4:0d:19:8b:51:23:4a:9b:09:a9:98:51:e4: d5:5e:40:f4:5a:7c:e4:98:ac:ae:f6:22:33:04:0d:4e:f3:86: bf:69:09:f6:37:72:67:b9:8b:9a:d1:6c:51:6b:37:ea:9f:38: 1e:a8:e2:f0:09:63:e5:49:3e:50:34:48:98:89:fa:bc:f9:6b: e9:75:3d:6b:df:1c:f1:14:93:cd:47:10:c0:36:cd:3c:7c:5e: 1b:b7:ee:43:8e:0f:8e:8d:a9:36:a2:55:a8:70:81:74:9f:d5: d3:ab:9d:1e:ef:83:ba:77:eb:d8:e7:84:51:ad:f6:57:65:07: 4e:c0:9c:90:90:ba:7d:c9:0d:8f:07:c6:0e:eb:85:1a:77:eb: 20:1b:9b:1e:e4:8c:b4:bb:fc:dd:23:64:8e:24:f5:4a:5f:6a: f2:7a:ee:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZBRUUxMTAvBgNVBAUTKDFENkMzRTlDNDcyMTJFRTQ4REY5RjU0RTY0OTBBOUE2 MTZENDExODkwHhcNMjUxMDE5MDQxNzM3WhcNMjUxMDI2MDQxNzM3WjAYMRYwFAYD VQQDEw02OGY0NjY2Mi01ZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz3GbtLHn3Mb98AdNF4OHu6z6C6jqtItbCivHE9Dcsxwcfy19Uc6uWDTvutN eCIr0oRnxiK0g6vIn0WSSeukm5AbcG0sAIkAs+eT7kJOEfD0e6Hphz1iv/vbplfZ ileNjzucWzwVz2KSpIvN0p9+XobMxvmSfPkG3y3P5cWHkU+K8QO5wT9luVHwzDzE hzWwzd7xycRx4rPVBrgrFX8CMz9L/CQMCi9IPyUjIKmU6KzTECZW5CCOEI7LpLoL Tr4wNfdGsnNCtKO174UCAZ457ofHIGM+X6gq1hV9xlf7qUWQQ6X9nfk96+Sqc38V GXBdqKqDP3bOXAUNQKUn/ACA8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6BXZG0 MJdGu0QKZh/ZcVPmtOflMB8GA1UdIwQYMBaAFB1sPpxHIS7kjfn1TmSQqaYW1BGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkFFRS80RjMzMjg4MjY2 NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1U04tZlZPWkpDcHBoYlVF WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXdy1uRWNoTHVTTi1mVk9aSkNwcGhiVUVZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkFFRS80RjMzMjg4MjY2NDYxMUVEOEQyQzc1MEZDNEY5QUUwMi9IV3ctbkVjaEx1 U04tZlZPWkpDcHBoYlVFWWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBafUBvqHGRy2JBudf0ucv8pa8fGoN7WvsQ225hCwm+w7sKNBddn5/o qNo8qflWrsnI67Yj/6CXeTyUJzimDUNTpBHsv3N17hUfARQ/FgKGRSNnZ7FwBaHC 4WQI8sCKIeQNGYtRI0qbCamYUeTVXkD0WnzkmKyu9iIzBA1O84a/aQn2N3JnuYua 0WxRazfqnzgeqOLwCWPlST5QNEiYifq8+WvpdT1r3xzxFJPNRxDANs08fF4bt+5D jg+Ojak2olWocIF0n9XTq50e74O6d+vY54RRrfZXZQdOwJyQkLp9yQ2PB8YO64Ua d+sgG5se5Iy0u/zdI2SOJPVKX2ryeu72 -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:47 2025 by rpki-client