$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: WQ1r9Ly6aNQ7UA+c/lr7GnMohAGJVe8RFSB5YJq7fSM= Subject key identifier: A0:D3:D2:1C:A9:89:D2:E1:9F:33:B4:66:B1:6F:97:C6:FF:22:07:6E Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 0474 Signing time: Sun 19 Oct 2025 02:00:41 +0000 Manifest this update: Sun 19 Oct 2025 02:00:40 +0000 Manifest next update: Sun 26 Oct 2025 02:00:40 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: 8T+/j7sVAFwThQQ7WKgXQJ0zISgBLxgPN/BI5783Zvc=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Oct 19 02:00:40 2025 GMT Not After : Oct 26 02:00:40 2025 GMT Subject: CN=68f44649-19b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:43:8d:1d:df:ea:fe:dc:c4:21:ff:d0:79: c3:62:3a:3b:24:64:99:76:0b:fe:fc:4d:59:d3:92: 93:fe:e6:7b:31:e5:05:a0:eb:f3:cc:87:f7:55:2b: 83:72:35:1d:90:c1:2a:ba:fa:09:42:28:10:4d:4b: 0c:9a:47:76:2a:26:4b:8a:43:d4:e2:f1:89:dd:30: c9:5f:eb:43:12:7d:b2:32:72:8c:6e:b8:d1:9f:ef: c1:ca:8a:c9:8d:b7:b7:69:88:e9:7d:63:ec:56:52: 0d:8e:76:f8:77:8f:09:50:da:cd:ff:3d:f2:00:e4: 96:b5:72:07:ae:48:cf:88:21:20:48:bb:c4:68:31: 61:6d:71:87:3f:a0:67:32:ea:70:f9:94:fe:1c:00: c9:18:62:29:e0:eb:81:eb:77:5c:a3:fd:a7:98:a1: f4:24:d6:81:8e:d2:5c:7e:0c:b5:29:b9:09:2a:88: 81:85:80:7e:d2:fd:70:5b:e5:8c:7d:d4:e0:88:66: 9e:10:5c:c1:11:30:c0:06:14:ee:b5:28:15:47:db: 7c:6b:31:79:12:2c:2b:cf:32:e9:2e:f8:86:c0:44: 03:4d:1c:96:36:00:c9:5c:d8:7b:2d:ed:3a:c3:80: f3:b5:db:1e:75:17:15:3b:b9:b0:14:3b:3b:ce:5e: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:D2:1C:A9:89:D2:E1:9F:33:B4:66:B1:6F:97:C6:FF:22:07:6E X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b5:fb:be:f3:db:58:ef:27:8e:72:b7:7c:1c:e7:1f:e2:37: 06:c5:7c:a1:62:29:f2:23:22:8e:87:81:45:3d:df:46:b9:c3: 61:c6:12:de:04:cc:e9:0f:18:9d:49:7c:dc:af:3a:06:fc:84: 33:1f:a4:12:06:ab:5f:6f:37:00:55:21:f8:68:3f:ce:64:74: 4c:7b:ff:6c:91:3a:83:de:27:fe:ab:7d:f1:a9:08:e1:25:ca: 24:4a:e0:97:ae:57:2e:80:b3:fd:7c:15:0a:13:8c:29:69:26: 9e:e4:a3:26:fd:d8:f1:47:b7:06:86:33:2f:30:b9:1e:ea:f8: f0:ac:89:87:44:dc:a6:53:b3:ec:d3:26:ad:af:8f:25:41:57: cf:d0:18:31:22:1c:f1:14:e1:3b:d1:40:b6:f0:c6:67:d7:d7: 56:94:41:c9:f2:f4:10:c8:82:45:34:e9:9d:a4:11:71:f6:00: 92:7a:bd:6e:3b:4f:66:2a:09:cd:71:ac:31:d9:e9:43:0d:56: 79:6f:81:e7:d1:92:8e:44:32:bd:8f:a9:2d:f9:ec:80:68:fd: 52:50:46:db:d4:e8:de:17:47:b5:5a:1c:a8:3c:dc:5d:20:50: e2:aa:36:06:df:a1:14:d4:95:c9:d7:7d:8f:81:87:fd:62:15: 0d:04:41:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUxMDE5MDIwMDQwWhcNMjUxMDI2MDIwMDQwWjAYMRYwFAYD VQQDEw02OGY0NDY0OS0xOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgNDjR3f6v7cxCH/0HnDYjo7JGSZdgv+/E1Z05KT/uZ7MeUFoOvzzIf3VSuD cjUdkMEquvoJQigQTUsMmkd2KiZLikPU4vGJ3TDJX+tDEn2yMnKMbrjRn+/ByorJ jbe3aYjpfWPsVlINjnb4d48JUNrN/z3yAOSWtXIHrkjPiCEgSLvEaDFhbXGHP6Bn Mupw+ZT+HADJGGIp4OuB63dco/2nmKH0JNaBjtJcfgy1KbkJKoiBhYB+0v1wW+WM fdTgiGaeEFzBETDABhTutSgVR9t8azF5EiwrzzLpLviGwEQDTRyWNgDJXNh7Le06 w4DztdsedRcVO7mwFDs7zl4i0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDT0hyp idLhnzO0ZrFvl8b/IgduMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUtfu+89tY7yeOcrd8HOcf4jcGxXyhYinyIyKOh4FFPd9GucNhxhLe BMzpDxidSXzcrzoG/IQzH6QSBqtfbzcAVSH4aD/OZHRMe/9skTqD3if+q33xqQjh JcokSuCXrlcugLP9fBUKE4wpaSae5KMm/djxR7cGhjMvMLke6vjwrImHRNymU7Ps 0yatr48lQVfP0BgxIhzxFOE70UC28MZn19dWlEHJ8vQQyIJFNOmdpBFx9gCSer1u O09mKgnNcawx2elDDVZ5b4Hn0ZKORDK9j6kt+eyAaP1SUEbb1OjeF0e1WhyoPNxd IFDiqjYG36EU1JXJ132PgYf9YhUNBEFd -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:34 2025 by rpki-client