$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: HS9Mxs5/LiAo1ZxJgdJe7x9rXSUYWw/YtBfqOO8qcoQ= Subject key identifier: EB:0F:6F:10:7E:9C:2D:2E:46:CA:6D:19:23:B8:06:CF:64:7A:F6:4F Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0A8E Signing time: Sat 18 Oct 2025 20:33:18 +0000 Manifest this update: Sat 18 Oct 2025 20:33:18 +0000 Manifest next update: Sat 25 Oct 2025 20:33:17 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: BRl4kIIRwUQIDZKeJA+ibePGwLq2cJlJRqqeWImsEi0=) 2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: i3esyJrHHzIBHRmVCNUz0W4VMdpIDRgi+XPXqZ5CNEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Oct 18 20:33:18 2025 GMT Not After : Oct 25 20:33:17 2025 GMT Subject: CN=68f3f98e-fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6c:b1:ca:5c:a6:6b:85:1b:54:b8:a9:ad:10: cd:25:1f:a3:43:d3:da:10:7b:6e:1f:1f:4e:e6:87: e5:a2:0d:b8:a0:eb:fd:cb:0d:5e:f5:87:9d:56:8b: b5:63:4d:e3:55:fa:4f:d2:1c:57:a2:90:f7:a8:09: cb:72:37:a6:b9:65:32:13:86:11:2f:68:01:9d:29: ff:dc:8f:36:72:d7:b1:47:7b:2e:7f:fb:33:d5:9b: 34:9f:e5:a0:78:44:62:c4:05:97:30:47:65:77:a3: c8:ed:31:8d:65:63:59:e1:04:e4:a9:57:f5:dd:93: ac:55:fe:7a:2a:29:90:6c:7f:64:ff:96:d9:aa:1c: d2:2a:a4:13:ad:71:eb:cf:d0:64:9b:23:65:2c:60: 98:3c:9f:7d:c0:b0:6d:19:ce:2b:04:15:ea:68:7f: 2d:98:0f:44:bb:7f:7e:d5:48:48:e8:74:3b:5a:99: dd:3d:12:e0:4d:89:88:5a:b7:69:d4:68:31:7e:11: eb:35:20:3c:fc:9b:03:09:b3:f3:3e:06:47:5f:bc: 41:a0:63:f3:18:08:b6:39:d7:3f:11:98:47:77:2e: 7b:2b:fe:72:c9:59:a0:f6:ac:77:5d:f8:70:53:62: c7:e7:ba:e6:68:fa:24:a6:00:93:c5:b4:e7:75:fb: 99:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:6F:10:7E:9C:2D:2E:46:CA:6D:19:23:B8:06:CF:64:7A:F6:4F X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:cc:21:73:bc:d2:39:a5:26:4f:78:f8:71:e9:06:52:ec:89: 61:b2:21:0d:0e:ed:7b:2b:0a:08:87:9f:6a:6f:c2:4e:2f:8b: 2e:ba:92:c6:eb:f9:6f:13:e4:e8:4f:f0:ba:48:53:11:98:1d: a0:45:67:32:22:fb:40:b9:b8:9c:06:3b:42:15:9d:4a:76:1b: 6f:8f:94:f2:0e:c0:86:e1:2a:6c:ee:05:bc:46:c7:f2:e7:51: 65:62:b4:2e:93:f7:eb:52:40:9e:bd:d0:a8:65:53:79:e9:24: 8a:59:c7:d3:9b:cc:80:5c:f7:ea:d1:b5:8c:47:88:ea:36:f3: 91:ce:2e:5b:e5:bf:da:fe:46:c7:08:4c:53:30:83:85:71:0f: 90:9c:24:f1:44:76:32:96:d0:3a:dc:71:ee:9c:04:2d:dd:9c: 56:c3:f5:2d:5d:6b:dc:5f:a4:4f:fa:f1:1a:0a:85:46:e3:49: 5e:cc:ec:33:61:2d:3e:ad:d2:d3:27:f0:43:27:57:ff:45:0c: c0:06:d4:ef:ab:18:37:fe:06:84:82:27:d9:3c:37:e8:52:9e: 2b:f5:15:3a:0a:68:92:64:89:a2:08:40:c7:69:7a:da:c7:de: d9:d4:67:7f:be:37:a9:1a:7c:ba:d5:fb:fd:0c:b5:1c:6d:a4: 42:6e:7c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUxMDE4MjAzMzE4WhcNMjUxMDI1MjAzMzE3WjAYMRYwFAYD VQQDEw02OGYzZjk4ZS1mYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5myxylyma4UbVLiprRDNJR+jQ9PaEHtuHx9O5oflog24oOv9yw1e9YedVou1 Y03jVfpP0hxXopD3qAnLcjemuWUyE4YRL2gBnSn/3I82ctexR3suf/sz1Zs0n+Wg eERixAWXMEdld6PI7TGNZWNZ4QTkqVf13ZOsVf56KimQbH9k/5bZqhzSKqQTrXHr z9BkmyNlLGCYPJ99wLBtGc4rBBXqaH8tmA9Eu39+1UhI6HQ7WpndPRLgTYmIWrdp 1GgxfhHrNSA8/JsDCbPzPgZHX7xBoGPzGAi2Odc/EZhHdy57K/5yyVmg9qx3Xfhw U2LH57rmaPokpgCTxbTndfuZ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsPbxB+ nC0uRsptGSO4Bs9kevZPMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCszCFzvNI5pSZPePhx6QZS7IlhsiENDu17KwoIh59qb8JOL4suupLG 6/lvE+ToT/C6SFMRmB2gRWcyIvtAubicBjtCFZ1Kdhtvj5TyDsCG4Sps7gW8Rsfy 51FlYrQuk/frUkCevdCoZVN56SSKWcfTm8yAXPfq0bWMR4jqNvORzi5b5b/a/kbH CExTMIOFcQ+QnCTxRHYyltA63HHunAQt3ZxWw/UtXWvcX6RP+vEaCoVG40lezOwz YS0+rdLTJ/BDJ1f/RQzABtTvqxg3/gaEgifZPDfoUp4r9RU6CmiSZImiCEDHaXra x97Z1Gd/vjepGny61fv9DLUcbaRCbnys -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:31 2025 by rpki-client