$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: JyWU0Ex3F6MZrnW41eUpkk3jBVhwdVoRXtpPYtdb358= Subject key identifier: B1:FD:27:10:96:1F:49:75:5B:87:85:A2:92:64:72:09:31:9D:DD:CB Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 0656 Signing time: Sun 19 Oct 2025 00:10:55 +0000 Manifest this update: Sun 19 Oct 2025 00:10:55 +0000 Manifest next update: Sun 26 Oct 2025 00:10:55 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: wgbYu73FFjZ7j2XuwWRhpYhAVFKvxBG3JGBAwnr4cPA=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Oct 19 00:10:55 2025 GMT Not After : Oct 26 00:10:55 2025 GMT Subject: CN=68f42c8f-5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:23:b7:8f:9f:01:7d:c8:51:d5:e2:c3:13:49: 60:8d:dc:5e:4a:ac:5f:16:62:eb:4e:65:b5:de:99: 5d:07:bf:7c:0c:35:12:4c:23:93:16:22:bc:5f:50: 64:22:f9:84:84:a9:6b:5e:3e:da:66:66:8c:3d:3b: 70:66:ab:9e:3d:e1:3c:f3:f3:dc:80:62:e0:5d:3f: 32:ba:78:57:82:dc:27:e6:91:c1:8e:b3:7e:95:76: 48:d3:32:64:7d:0d:8e:01:65:bd:ec:12:c6:fe:e8: 90:fa:75:4c:1b:94:cb:79:a1:ad:aa:f8:de:c2:2c: bc:44:12:17:19:42:7f:ff:5a:72:7f:36:c3:c8:8b: 6b:3c:0b:e4:eb:ba:43:5e:a4:53:19:ef:ad:e1:13: fb:1b:a6:91:8b:4a:2d:0c:4a:f2:23:98:bc:1b:1f: e1:bf:58:57:20:f2:89:31:e7:5c:cd:6c:74:dc:9b: 04:e4:93:7c:51:fc:5c:4c:d3:16:f4:97:a0:b5:9c: 62:49:9a:ba:9c:fd:b7:8c:96:11:60:ec:d5:4f:af: 0e:04:0f:84:47:79:7d:ec:12:4d:8b:a5:ef:c4:25: 0c:a3:63:e7:14:97:11:d1:da:1c:52:d3:05:77:0e: df:75:28:f6:12:5b:ab:15:01:15:44:ef:74:28:25: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:27:10:96:1F:49:75:5B:87:85:A2:92:64:72:09:31:9D:DD:CB X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:d2:fc:65:13:a3:5c:43:0e:c3:35:1a:24:1c:9a:45:45:85: d4:5d:60:be:99:56:2f:c3:7c:3f:f2:a7:00:29:71:98:98:0d: a8:4c:a9:42:35:3b:d4:cd:11:86:2c:de:59:81:b1:92:df:47: 37:52:8a:33:a6:72:e8:ee:68:c8:75:d7:31:93:0d:16:aa:88: cf:d7:ea:ff:a1:1e:a7:a3:13:d6:8a:14:f3:80:94:b6:f2:cc: e6:f8:60:32:1b:5d:a9:2f:99:d8:57:eb:87:77:ba:44:66:81: fd:a6:f8:b9:a3:0b:17:55:3b:e2:bf:c9:b8:9c:6a:e8:54:04: 2d:e8:2f:92:ba:a6:e3:f0:9a:c4:f5:13:59:04:7c:6c:4a:9c: 88:d9:6c:bf:e5:99:86:48:c6:4e:7f:0f:aa:6c:29:78:c6:b6: 67:57:c9:b3:f5:a5:24:4c:22:67:6b:cc:9d:a6:a9:03:d9:cf: 03:68:34:21:8e:10:b4:33:2f:1d:42:b0:3e:9f:1c:fd:08:2a: 44:79:be:b8:c7:06:07:2b:85:f0:32:51:b9:40:23:7c:b5:5b: d7:90:a3:96:ca:d8:d6:65:bf:04:cf:2a:87:62:09:15:71:3b: 24:d9:7e:00:df:d2:d8:7c:cb:f5:33:de:da:1c:ae:20:40:12: 60:f3:8e:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUxMDE5MDAxMDU1WhcNMjUxMDI2MDAxMDU1WjAYMRYwFAYD VQQDEw02OGY0MmM4Zi01MjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviO3j58BfchR1eLDE0lgjdxeSqxfFmLrTmW13pldB798DDUSTCOTFiK8X1Bk IvmEhKlrXj7aZmaMPTtwZquePeE88/PcgGLgXT8yunhXgtwn5pHBjrN+lXZI0zJk fQ2OAWW97BLG/uiQ+nVMG5TLeaGtqvjewiy8RBIXGUJ//1pyfzbDyItrPAvk67pD XqRTGe+t4RP7G6aRi0otDEryI5i8Gx/hv1hXIPKJMedczWx03JsE5JN8UfxcTNMW 9JegtZxiSZq6nP23jJYRYOzVT68OBA+ER3l97BJNi6XvxCUMo2PnFJcR0docUtMF dw7fdSj2ElurFQEVRO90KCUBjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH9JxCW H0l1W4eFopJkcgkxnd3LMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDf0vxlE6NcQw7DNRokHJpFRYXUXWC+mVYvw3w/8qcAKXGYmA2oTKlC NTvUzRGGLN5ZgbGS30c3UoozpnLo7mjIddcxkw0WqojP1+r/oR6noxPWihTzgJS2 8szm+GAyG12pL5nYV+uHd7pEZoH9pvi5owsXVTviv8m4nGroVAQt6C+Suqbj8JrE 9RNZBHxsSpyI2Wy/5ZmGSMZOfw+qbCl4xrZnV8mz9aUkTCJna8ydpqkD2c8DaDQh jhC0My8dQrA+nxz9CCpEeb64xwYHK4XwMlG5QCN8tVvXkKOWytjWZb8EzyqHYgkV cTsk2X4A39LYfMv1M97aHK4gQBJg844p -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:25 2025 by rpki-client