$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: D/fq+HWs7KeTY+T7D7vK8L5OPggxHn0iFW2bINxa1K0= Subject key identifier: 6F:E4:6C:B1:C8:EB:E6:45:F5:D4:1F:D2:1F:D9:A1:98:DE:F2:4B:83 Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 177C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 1772 Signing time: Sat 18 Oct 2025 16:59:52 +0000 Manifest this update: Sat 18 Oct 2025 16:59:52 +0000 Manifest next update: Sat 25 Oct 2025 16:59:52 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: OWf3RvgnfPE6ZKqFZvdGJRUv8+7LeP0hckt0p0Kch4U=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6012 (0x177c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Oct 18 16:59:52 2025 GMT Not After : Oct 25 16:59:52 2025 GMT Subject: CN=68f3c788-cacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:9f:b5:43:1c:26:7f:ff:f0:0c:8c:44:dd: c7:c3:7b:ee:02:6d:2a:29:7b:fa:15:fd:35:16:e6: 46:12:f4:12:64:b1:4a:00:a8:0c:b9:68:95:5d:81: 4a:d7:a5:85:26:ef:6c:66:55:0b:a7:f9:a8:94:b9: 5b:72:26:22:e9:f6:6f:1d:35:ee:59:9c:ee:44:6c: 08:1b:9b:ef:ec:cd:95:1d:a5:a9:4a:83:36:f9:15: 5b:e6:04:0c:3e:1d:c4:19:9a:d6:42:36:aa:e7:9e: 7d:42:43:1f:8c:45:b9:43:79:ba:0b:4d:b4:e6:6a: b1:94:be:d0:d4:1a:9b:8e:e8:23:ef:20:0e:5e:b4: 5c:96:4c:dc:32:bd:f0:06:e2:57:c4:28:27:45:2f: d7:67:a9:3f:82:78:ff:f8:05:7b:3e:a5:6d:42:10: d6:b5:71:b3:3b:2d:e7:10:e5:be:93:ab:65:08:2e: 51:7a:bd:de:0f:83:d6:5d:fe:9f:ab:69:b2:f0:99: c7:82:3d:dc:19:76:ba:e1:6f:d4:54:f2:bb:69:b9: 29:9f:af:66:ce:cf:bf:c5:68:70:d7:7f:1d:32:2a: ac:35:94:f8:40:56:8c:26:9e:b6:1a:7c:17:9c:a2: e3:b1:5e:bf:e1:76:05:0f:d7:2c:2e:e5:84:16:d0: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E4:6C:B1:C8:EB:E6:45:F5:D4:1F:D2:1F:D9:A1:98:DE:F2:4B:83 X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:43:bd:2c:2f:4d:5a:13:11:9b:eb:cc:b5:02:f4:9f:b4:94: 24:33:c6:17:c5:c4:a8:83:c9:58:eb:8f:06:50:2c:3c:47:13: a2:be:fe:62:34:be:46:83:9c:06:b0:8a:12:09:33:a3:63:17: ec:92:51:51:ae:6e:f4:6e:0d:7d:fb:51:0e:2f:e1:65:63:ab: 7b:49:44:cc:0b:08:93:3a:e7:bd:aa:50:42:e5:fb:47:c5:b2: fa:37:48:fb:a1:23:88:80:13:35:86:68:d6:16:16:85:51:fe: cd:1c:95:7f:eb:4f:37:53:b7:2a:48:0a:00:d6:f6:99:48:4b: a2:8c:7c:e4:da:a4:ed:d5:bc:10:0f:86:e5:c0:8c:b1:58:fa: 13:6c:d1:6a:2d:a8:7e:d3:55:45:ab:3e:7a:c4:76:1f:64:e5: fc:27:ce:bf:7d:0c:08:93:b6:8b:ab:f5:0a:ad:f3:2a:5e:0d: be:d7:71:a9:c7:dd:6f:08:14:69:96:a0:c8:23:0f:d0:6c:27: ae:dd:47:d1:3b:1d:6c:68:b0:67:10:48:60:fa:5a:a8:e9:32: 6c:e1:b4:cb:fd:47:16:54:26:9f:68:77:c2:c8:8e:a3:2c:d8: d8:7f:49:1f:37:33:89:b5:7d:5d:34:0f:97:3c:bd:77:fc:fe: ed:57:5d:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUxMDE4MTY1OTUyWhcNMjUxMDI1MTY1OTUyWjAYMRYwFAYD VQQDEw02OGYzYzc4OC1jYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcuftUMcJn//8AyMRN3Hw3vuAm0qKXv6Ff01FuZGEvQSZLFKAKgMuWiVXYFK 16WFJu9sZlULp/molLlbciYi6fZvHTXuWZzuRGwIG5vv7M2VHaWpSoM2+RVb5gQM Ph3EGZrWQjaq5559QkMfjEW5Q3m6C0205mqxlL7Q1Bqbjugj7yAOXrRclkzcMr3w BuJXxCgnRS/XZ6k/gnj/+AV7PqVtQhDWtXGzOy3nEOW+k6tlCC5Rer3eD4PWXf6f q2my8JnHgj3cGXa64W/UVPK7abkpn69mzs+/xWhw138dMiqsNZT4QFaMJp62GnwX nKLjsV6/4XYFD9csLuWEFtB9CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/kbLHI 6+ZF9dQf0h/ZoZje8kuDMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Q70sL01aExGb68y1AvSftJQkM8YXxcSog8lY648GUCw8RxOivv5i NL5Gg5wGsIoSCTOjYxfsklFRrm70bg19+1EOL+FlY6t7SUTMCwiTOue9qlBC5ftH xbL6N0j7oSOIgBM1hmjWFhaFUf7NHJV/6083U7cqSAoA1vaZSEuijHzk2qTt1bwQ D4blwIyxWPoTbNFqLah+01VFqz56xHYfZOX8J86/fQwIk7aLq/UKrfMqXg2+13Gp x91vCBRplqDIIw/QbCeu3UfROx1saLBnEEhg+lqo6TJs4bTL/UcWVCafaHfCyI6j LNjYf0kfNzOJtX1dNA+XPL13/P7tV11d -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:01 2025 by rpki-client