$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft File: hxSXyIUOQWJXlcT42UXHs9BBbB8.mft (raw, json) Hash identifier: 1xAsqPd93MioKZQ4P/XOALwX7uW9PPQc/MMfXhDn7kY= Subject key identifier: 34:C9:49:16:5F:54:33:12:C8:99:CE:C3:C4:E4:11:02:CA:0E:A9:63 Authority key identifier: 87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F Certificate issuer: /CN=A91C6825/serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft Manifest number: 066D Signing time: Sun 19 Oct 2025 00:04:48 +0000 Manifest this update: Sun 19 Oct 2025 00:04:47 +0000 Manifest next update: Sun 26 Oct 2025 00:04:47 +0000 Files and hashes: 1: hxSXyIUOQWJXlcT42UXHs9BBbB8.crl (hash: F6j1FVOoP4qQNC2ErbWjk4InyY0TkmImuU/5kTlchdE=) 2: 925B815E9ABE11EBA445A74FC4F9AE02.roa (hash: tc+HUzngZ7VVMdvUKEWM7ZZWawGnaExqZ4p3l2kRuv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6825, serialNumber=871497C8850E41625795C4F8D945C7B3D0416C1F Validity Not Before: Oct 19 00:04:47 2025 GMT Not After : Oct 26 00:04:47 2025 GMT Subject: CN=68f42b1f-99de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:47:cf:6e:60:51:86:fb:97:80:17:84:30: ae:6e:dd:77:75:44:79:5a:52:9f:e3:c7:89:cf:bc: 00:c0:86:af:22:5d:83:22:e1:12:ad:ca:7d:62:72: 26:f5:d3:1b:3a:14:a3:8e:49:13:c8:37:6d:7d:a2: 1f:ac:b5:47:8f:7e:d0:c8:ad:3f:01:6d:9c:2c:27: 30:58:27:0c:06:ca:09:8d:3a:5f:88:b7:f4:b5:72: 3b:e1:a4:83:97:02:f6:63:50:cf:89:57:aa:cf:63: 22:5d:ff:e1:e1:c5:ae:26:90:13:52:0b:bd:c5:90: 77:58:8b:c2:e7:28:37:29:da:6d:ff:b5:a6:a8:38: e5:52:3f:45:7e:d3:14:7b:65:64:88:ef:8b:e4:b2: f4:05:31:4e:51:f3:80:6c:7a:45:82:fe:90:e4:fc: ee:76:f3:e8:fa:f2:04:f0:e9:6c:f3:3f:75:01:15: 25:f6:f2:79:9e:96:5d:49:2e:53:a0:4e:55:a9:87: 37:6c:20:4f:a4:a4:30:dd:b9:94:3c:1d:0d:de:78: f5:50:5a:55:62:03:c7:27:b6:c7:bd:7e:88:7c:6c: 93:d9:1c:59:f1:9a:70:90:88:c9:3b:4e:9f:55:0d: ad:dc:9f:aa:80:e8:06:cb:47:4b:4e:a7:df:fd:d6: b5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:49:16:5F:54:33:12:C8:99:CE:C3:C4:E4:11:02:CA:0E:A9:63 X509v3 Authority Key Identifier: keyid:87:14:97:C8:85:0E:41:62:57:95:C4:F8:D9:45:C7:B3:D0:41:6C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxSXyIUOQWJXlcT42UXHs9BBbB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6825/1AA90FB69ABC11EB900A164CC4F9AE02/hxSXyIUOQWJXlcT42UXHs9BBbB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d8:0b:b6:66:12:b8:9e:fb:03:65:6d:4f:9c:1d:2c:57:93: 48:9f:e4:7c:74:3a:e6:bb:c6:1a:47:b5:b0:33:a2:fd:e6:68: 3b:8f:90:96:77:b8:cd:30:c6:58:7e:cc:d4:85:3f:82:85:23: 46:79:65:74:fd:f9:88:89:0d:16:81:e6:c2:a5:26:6e:05:cc: f4:2d:04:89:08:38:00:c2:09:ca:86:7d:8a:74:04:f4:f7:fa: b9:bc:b7:a3:58:05:05:db:fa:99:53:14:5e:ea:4d:68:ce:75: b5:40:de:a6:c6:5c:89:a2:c9:ab:26:a6:d7:6d:a4:5e:c1:fb: 36:d7:5e:1e:8a:c2:e3:82:7a:62:2f:e5:7a:f1:fd:9a:8e:e8: 3c:b7:f2:89:b3:0b:d1:fb:bf:2a:1c:6a:da:37:60:bd:ee:e8: 30:a0:6a:76:43:00:71:55:f7:fc:1f:5f:76:fd:4c:f0:a3:91: 68:4f:8e:39:de:46:e5:ba:a0:13:b8:61:ec:cf:63:bd:05:de: 22:db:f3:03:70:79:78:ae:14:58:be:e6:6f:0d:27:34:1a:29: 9d:6a:79:ea:00:64:12:6d:14:fc:44:cc:fb:45:af:db:f3:ca: f6:c6:fd:51:8c:f0:5f:6a:c9:34:65:bb:3c:99:c1:42:39:0f: 9d:c6:79:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4MjUxMTAvBgNVBAUTKDg3MTQ5N0M4ODUwRTQxNjI1Nzk1QzRGOEQ5NDVDN0Iz RDA0MTZDMUYwHhcNMjUxMDE5MDAwNDQ3WhcNMjUxMDI2MDAwNDQ3WjAYMRYwFAYD VQQDEw02OGY0MmIxZi05OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eNHz25gUYb7l4AXhDCubt13dUR5WlKf48eJz7wAwIavIl2DIuESrcp9YnIm 9dMbOhSjjkkTyDdtfaIfrLVHj37QyK0/AW2cLCcwWCcMBsoJjTpfiLf0tXI74aSD lwL2Y1DPiVeqz2MiXf/h4cWuJpATUgu9xZB3WIvC5yg3Kdpt/7WmqDjlUj9FftMU e2VkiO+L5LL0BTFOUfOAbHpFgv6Q5PzudvPo+vIE8Ols8z91ARUl9vJ5npZdSS5T oE5VqYc3bCBPpKQw3bmUPB0N3nj1UFpVYgPHJ7bHvX6IfGyT2RxZ8ZpwkIjJO06f VQ2t3J+qgOgGy0dLTqff/da19QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTJSRZf VDMSyJnOw8TkEQLKDqljMB8GA1UdIwQYMBaAFIcUl8iFDkFiV5XE+NlFx7PQQWwf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjgyNS8xQUE5MEZCNjlB QkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FXSlhsY1Q0MlVYSHM5QkJi QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h4U1h5SVVPUVdKWGxjVDQyVVhIczlCQmJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjgyNS8xQUE5MEZCNjlBQkMxMUVCOTAwQTE2NENDNEY5QUUwMi9oeFNYeUlVT1FX SlhsY1Q0MlVYSHM5QkJiQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV2Au2ZhK4nvsDZW1PnB0sV5NIn+R8dDrmu8YaR7WwM6L95mg7j5CW d7jNMMZYfszUhT+ChSNGeWV0/fmIiQ0WgebCpSZuBcz0LQSJCDgAwgnKhn2KdAT0 9/q5vLejWAUF2/qZUxRe6k1oznW1QN6mxlyJosmrJqbXbaRewfs2114eisLjgnpi L+V68f2ajug8t/KJswvR+78qHGraN2C97ugwoGp2QwBxVff8H192/Uzwo5FoT445 3kbluqATuGHsz2O9Bd4i2/MDcHl4rhRYvuZvDSc0GimdannqAGQSbRT8RMz7Ra/b 88r2xv1RjPBfask0Zbs8mcFCOQ+dxnnm -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:25 2025 by rpki-client