$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft File: h7HuPp7irRoRPyeipU4sC41a-zQ.mft (raw, json) Hash identifier: 9ROyYy3Pum4W9FGPHvkdeS8TH9suXopR0yaKseQCoz8= Subject key identifier: C0:40:5D:8C:DE:36:06:8C:0F:A5:0B:88:82:95:B5:18:89:41:92:4A Authority key identifier: 87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 Certificate issuer: /CN=A91CF9F5/serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft Manifest number: E2 Signing time: Sun 19 Oct 2025 08:32:33 +0000 Manifest this update: Sun 19 Oct 2025 08:32:31 +0000 Manifest next update: Sun 26 Oct 2025 08:32:31 +0000 Files and hashes: 1: h7HuPp7irRoRPyeipU4sC41a-zQ.crl (hash: byTBrwO6mY21tNlkpeI38fCbPYvK+0PubJzCz7IyPUY=) 2: 56EC0F5EABD411F0ADCDD73CC4F9AE02.roa (hash: OqbQu7kEO5HyQlsajTkQ2cRmRukKYtR+ZcR573z3wAk=) 3: 2FAD450250E411F0A6B4892AC4F9AE02.roa (hash: 0Cf8THprMTDVV2fZezKAdgIeiPKZ9IZrYmhz+7CeQ7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9F5, serialNumber=87B1EE3E9EE2AD1A113F27A2A54E2C0B8D5AFB34 Validity Not Before: Oct 19 08:32:31 2025 GMT Not After : Oct 26 08:32:31 2025 GMT Subject: CN=68f4a220-8f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:4d:2e:16:34:55:ef:f8:15:0f:05:ee:48: cf:ee:d2:a7:c5:a3:9d:fe:45:b2:51:b5:4c:b0:c2: b9:b6:59:4c:24:48:df:9f:1b:a4:c4:7e:b3:e5:00: 88:c9:1c:48:49:6a:3a:2a:f6:34:08:d5:74:f5:57: ef:4c:74:3e:f6:83:62:90:e0:0f:54:a2:b8:53:7c: ad:e7:56:21:10:82:4f:d2:15:b4:bc:c6:a4:b0:f0: 86:d3:52:bd:72:73:3c:59:f3:90:2d:a1:20:31:ee: cb:56:ec:f8:fd:38:96:9c:82:cc:c1:67:cd:1c:bb: 81:33:ee:a0:24:e0:52:a6:52:8c:25:4a:7a:e6:a1: fe:ae:70:c8:08:dd:a8:f2:e2:d6:3e:f0:de:0d:a2: 34:87:73:df:0c:dc:17:ca:41:96:7b:40:2e:99:42: 0d:10:58:59:96:9f:ad:8b:d8:25:27:ef:9f:46:db: 0d:24:61:43:84:0a:75:16:3a:a2:4a:3f:7e:f0:a3: 19:1f:44:bf:6a:bf:2d:72:14:25:d1:92:c0:f2:a6: d0:5e:61:94:ac:70:8d:32:de:5f:51:77:cc:42:ec: 64:70:8f:6f:75:f0:1f:15:39:5c:a4:64:9e:bc:ab: 22:fe:9f:4f:66:59:f7:b5:7e:5c:38:b9:b9:72:b2: 45:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:5D:8C:DE:36:06:8C:0F:A5:0B:88:82:95:B5:18:89:41:92:4A X509v3 Authority Key Identifier: keyid:87:B1:EE:3E:9E:E2:AD:1A:11:3F:27:A2:A5:4E:2C:0B:8D:5A:FB:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7HuPp7irRoRPyeipU4sC41a-zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9F5/8B926D2A5B9E11EF8BF9175BC4F9AE02/h7HuPp7irRoRPyeipU4sC41a-zQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:8a:d6:9c:e9:57:26:9b:2c:96:dd:8d:f1:c6:36:5d:d2:1e: a7:86:56:a3:53:66:31:7b:42:c1:97:12:d6:c4:8d:49:50:d9: 02:6c:59:4e:72:0f:7d:72:13:76:95:73:41:cd:c6:0c:9b:f5: d4:ca:f3:20:40:e3:ea:07:d3:c0:c3:52:39:c4:38:ed:08:62: f4:fa:60:55:16:95:43:31:7d:f5:7d:50:ac:67:88:71:f2:ce: 9c:5d:24:4a:f7:71:b1:07:e3:82:70:b7:90:9d:21:2c:be:8b: 9d:6f:84:2d:96:af:3b:ac:43:7e:b9:02:4a:e9:e3:88:a4:64: 75:a7:a1:27:f5:e5:fa:4b:b2:d6:c3:ed:b0:48:0b:7b:41:7a: b1:52:6b:d5:03:13:cc:2d:75:57:41:8d:cc:17:c0:16:c5:da: ad:d7:53:01:3d:be:09:20:fe:66:13:6b:59:15:ae:50:28:5f: a7:5d:07:2a:3a:75:cd:d3:c9:ec:61:eb:f4:95:fe:e2:2a:7c: 5b:b8:fe:19:1d:bc:7b:c0:ac:9d:31:a2:f1:54:8d:cc:41:a6: 6f:80:57:55:90:f6:e9:cc:3e:ac:82:ff:ed:48:ff:0e:b3:01: db:3c:1d:0a:b5:5f:3d:e9:17:9a:89:4f:e0:f1:5f:49:d4:05: 7c:e4:bd:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y5RjUxMTAvBgNVBAUTKDg3QjFFRTNFOUVFMkFEMUExMTNGMjdBMkE1NEUyQzBC OEQ1QUZCMzQwHhcNMjUxMDE5MDgzMjMxWhcNMjUxMDI2MDgzMjMxWjAYMRYwFAYD VQQDEw02OGY0YTIyMC04ZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyINNLhY0Ve/4FQ8F7kjP7tKnxaOd/kWyUbVMsMK5tllMJEjfnxukxH6z5QCI yRxISWo6KvY0CNV09VfvTHQ+9oNikOAPVKK4U3yt51YhEIJP0hW0vMaksPCG01K9 cnM8WfOQLaEgMe7LVuz4/TiWnILMwWfNHLuBM+6gJOBSplKMJUp65qH+rnDICN2o 8uLWPvDeDaI0h3PfDNwXykGWe0AumUINEFhZlp+ti9glJ++fRtsNJGFDhAp1Fjqi Sj9+8KMZH0S/ar8tchQl0ZLA8qbQXmGUrHCNMt5fUXfMQuxkcI9vdfAfFTlcpGSe vKsi/p9PZln3tX5cOLm5crJFxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBAXYze NgaMD6ULiIKVtRiJQZJKMB8GA1UdIwQYMBaAFIex7j6e4q0aET8noqVOLAuNWvs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjlGNS84QjkyNkQyQTVC OUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJSb1JQeWVpcFU0c0M0MWEt elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3SHVQcDdpclJvUlB5ZWlwVTRzQzQxYS16US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlGNS84QjkyNkQyQTVCOUUxMUVGOEJGOTE3NUJDNEY5QUUwMi9oN0h1UHA3aXJS b1JQeWVpcFU0c0M0MWEtelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFitac6VcmmyyW3Y3xxjZd0h6nhlajU2Yxe0LBlxLWxI1JUNkCbFlO cg99chN2lXNBzcYMm/XUyvMgQOPqB9PAw1I5xDjtCGL0+mBVFpVDMX31fVCsZ4hx 8s6cXSRK93GxB+OCcLeQnSEsvoudb4Qtlq87rEN+uQJK6eOIpGR1p6En9eX6S7LW w+2wSAt7QXqxUmvVAxPMLXVXQY3MF8AWxdqt11MBPb4JIP5mE2tZFa5QKF+nXQcq OnXN08nsYev0lf7iKnxbuP4ZHbx7wKydMaLxVI3MQaZvgFdVkPbpzD6sgv/tSP8O swHbPB0KtV896ReaiU/g8V9J1AV85L33 -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:34 2025 by rpki-client