$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft File: hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json) Hash identifier: eEZurbSD9q3rYGTE/LIBDHnrp4VzUJXHVUYWn/aOXK4= Subject key identifier: 59:CD:AE:FC:C7:61:A1:69:A7:72:35:DF:E7:D7:46:58:D5:9B:C6:C3 Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA Certificate issuer: /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft Manifest number: 010E Signing time: Sun 19 Oct 2025 07:53:02 +0000 Manifest this update: Sun 19 Oct 2025 07:53:01 +0000 Manifest next update: Sun 26 Oct 2025 07:53:01 +0000 Files and hashes: 1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: UbxdnZPL9339Nj1ZeIfE84cG/1FfU1j1dzVMlr2Pw2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA Validity Not Before: Oct 19 07:53:01 2025 GMT Not After : Oct 26 07:53:01 2025 GMT Subject: CN=68f498de-b271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:5a:7d:1b:18:61:cd:2b:19:39:82:71:29: e4:b1:d3:d0:d3:cf:2c:58:9f:32:80:7b:ba:f3:a0: 91:fe:59:79:84:3b:e3:dd:87:42:8a:de:0b:2d:82: cc:e7:ad:83:bf:a6:1c:b3:95:6c:ea:0e:e7:9c:e0: c3:29:58:f7:1c:a5:a0:32:6e:d4:20:b0:77:57:5a: db:dd:11:b9:9d:76:69:2f:56:72:0c:7a:69:94:3c: d9:cb:b7:a4:8b:84:9d:7c:0f:4b:06:3e:ae:65:52: ce:06:27:eb:e0:47:a5:c9:f5:02:3b:1f:4d:ad:cb: 0d:18:a8:0d:8b:96:60:65:ee:78:78:6e:32:87:74: 68:39:95:db:37:cc:7e:58:3d:86:fc:7c:c8:19:c8: a9:65:81:82:3b:b2:d4:12:fa:2a:9d:bc:0b:bf:7d: 29:24:2b:13:6d:23:e4:a5:3b:71:5f:ae:3f:aa:a7: 9d:79:1b:90:4e:bf:1a:91:50:83:b0:09:1a:18:ed: e5:77:7d:2b:10:ca:ac:ec:06:bc:03:42:28:4d:65: b3:41:01:d5:56:42:69:da:a6:95:56:e3:f9:45:a3: cb:c2:d8:7e:b4:ce:de:3d:45:81:51:b0:ec:e9:3c: 49:25:64:5f:69:f2:90:99:3b:6a:eb:18:8b:fc:69: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:AE:FC:C7:61:A1:69:A7:72:35:DF:E7:D7:46:58:D5:9B:C6:C3 X509v3 Authority Key Identifier: keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:15:45:33:af:34:b9:0b:fb:07:0f:4d:35:7d:f8:37:db:81: aa:7b:be:7e:9f:8d:81:46:04:2e:c0:f3:a9:f4:1f:1d:51:d7: aa:12:42:09:d6:ae:9f:74:36:21:1d:71:bb:57:5e:ca:da:90: db:8d:5c:58:b9:c1:d4:dd:54:36:26:a1:0f:36:0d:64:ce:80: 9e:88:c2:6c:48:6a:65:fb:9b:cd:7d:1b:8b:b9:e1:d6:64:2e: b4:25:60:d5:5f:38:de:a5:59:46:57:7d:31:40:42:06:3e:91: 0a:63:76:90:85:1f:a5:95:2b:c5:17:ea:7e:39:12:e3:75:1f: e6:2c:3a:f5:23:7d:42:8a:ea:b2:89:d3:4e:9a:9d:e7:75:56: 11:69:da:4f:a2:c0:66:ad:54:42:22:68:ff:08:d9:62:f1:1d: 8a:db:0d:ea:1f:84:dc:ff:90:2f:9e:3f:a7:c8:77:d8:36:ac: db:4e:74:f9:96:f9:71:0d:45:a3:b5:bc:97:c4:57:b3:62:5b: fe:3a:5c:e2:d4:a2:a4:00:9a:2d:8b:fb:57:c3:27:9c:e4:11: 00:76:aa:3b:45:00:47:96:4a:13:2f:a1:1a:9c:ac:7d:84:80: af:54:d3:0a:97:74:19:86:87:f6:72:3f:6f:09:bb:28:56:ec: 3a:c7:7f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDg0MzI0N0MwQUMxODFGQzM2NjY2QTQ0MzcyMUFGMjFE OURBNjUwREEwHhcNMjUxMDE5MDc1MzAxWhcNMjUxMDI2MDc1MzAxWjAYMRYwFAYD VQQDEw02OGY0OThkZS1iMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteRafRsYYc0rGTmCcSnksdPQ088sWJ8ygHu686CR/ll5hDvj3YdCit4LLYLM 562Dv6Ycs5Vs6g7nnODDKVj3HKWgMm7UILB3V1rb3RG5nXZpL1ZyDHpplDzZy7ek i4SdfA9LBj6uZVLOBifr4EelyfUCOx9NrcsNGKgNi5ZgZe54eG4yh3RoOZXbN8x+ WD2G/HzIGcipZYGCO7LUEvoqnbwLv30pJCsTbSPkpTtxX64/qqedeRuQTr8akVCD sAkaGO3ld30rEMqs7Aa8A0IoTWWzQQHVVkJp2qaVVuP5RaPLwth+tM7ePUWBUbDs 6TxJJWRfafKQmTtq6xiL/GlU8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnNrvzH YaFpp3I13+fXRljVm8bDMB8GA1UdIwQYMBaAFIQyR8CsGB/DZmakQ3Ia8h2dplDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9CQzUyMUE1NDE5 MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4Tm1acVJEY2hyeUhaMm1V Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hESkh3S3dZSDhObVpxUkRjaHJ5SFoybVVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFFMC9CQzUyMUE1NDE5MEExMUVGQTkwRUM5MjlDNEY5QUUwMi9oREpId0t3WUg4 Tm1acVJEY2hyeUhaMm1VTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLFUUzrzS5C/sHD001ffg324Gqe75+n42BRgQuwPOp9B8dUdeqEkIJ 1q6fdDYhHXG7V17K2pDbjVxYucHU3VQ2JqEPNg1kzoCeiMJsSGpl+5vNfRuLueHW ZC60JWDVXzjepVlGV30xQEIGPpEKY3aQhR+llSvFF+p+ORLjdR/mLDr1I31Ciuqy idNOmp3ndVYRadpPosBmrVRCImj/CNli8R2K2w3qH4Tc/5Avnj+nyHfYNqzbTnT5 lvlxDUWjtbyXxFezYlv+Olzi1KKkAJoti/tXwyec5BEAdqo7RQBHlkoTL6EanKx9 hICvVNMKl3QZhof2cj9vCbsoVuw6x3/h -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:52 2025 by rpki-client