$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: XnXJqVhxChmM28PrNNfJdFlIN/+H8ma2NxkjnoP5kJg= Subject key identifier: 58:61:09:4B:24:BF:86:1E:EA:91:6E:FE:3B:67:65:CA:70:AD:A2:13 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 06A7 Signing time: Sat 18 Oct 2025 23:50:19 +0000 Manifest this update: Sat 18 Oct 2025 23:50:18 +0000 Manifest next update: Sat 25 Oct 2025 23:50:18 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: BMW87U/KUqMbWYXUt1EjR3wyOHrkUhAm9ANsc9GbnlY=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (hash: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: SRwuKl9iZ5F1PmABZLmK117SIfLF/ZW+yQgLNckgk2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Oct 18 23:50:18 2025 GMT Not After : Oct 25 23:50:18 2025 GMT Subject: CN=68f427bb-f921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:d8:72:f2:c6:80:cd:07:a7:b2:8a:88:be: 0d:1d:be:93:9b:b4:d1:36:e6:05:7d:8a:f6:98:c5: 40:c1:8e:3b:8a:bb:9a:a1:e1:42:8e:91:2d:c7:44: 99:66:91:83:88:18:47:72:a1:37:5b:df:4c:2e:b4: 9e:0c:50:3a:ac:0b:19:55:96:e0:dd:31:2b:cb:72: c7:eb:6c:8d:e6:a6:20:d5:69:d7:de:89:3a:d9:b1: e0:21:d8:11:0e:c3:1d:53:03:30:fb:99:a1:0f:fb: 60:85:06:4f:b7:99:36:8a:54:ff:44:2a:71:20:be: 3a:36:6b:d6:38:3b:5a:e2:9a:cc:24:38:dc:7e:76: 5d:c4:96:95:e4:89:6e:65:51:92:9d:45:f6:42:37: f4:10:d7:86:93:eb:3b:44:2f:07:2f:ae:d1:db:ee: 0c:57:dc:6a:fc:16:ce:89:3e:39:d5:de:11:0b:ca: 2c:9e:e8:40:f7:24:fc:e3:b4:b2:a8:7c:7b:2e:c9: 7a:94:ad:2e:35:55:fa:94:6a:e5:cf:82:a1:b1:f9: 4c:86:a4:e9:8e:26:90:75:7a:02:10:1d:5e:2e:b1: 7d:62:68:a3:77:eb:56:5f:a4:9e:56:b6:27:23:a7: d0:3c:d8:cc:9a:04:10:a1:90:24:38:81:e1:84:7b: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:61:09:4B:24:BF:86:1E:EA:91:6E:FE:3B:67:65:CA:70:AD:A2:13 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:c0:1d:72:15:ad:76:a1:2e:96:ac:e8:9c:69:fc:11:c1: 3d:ff:f0:1c:f3:e9:b1:1a:fa:9c:7e:58:b7:be:20:e9:da:7d: 92:a9:ef:68:6f:43:f3:90:d9:93:10:2b:11:21:dc:b7:2e:c9: c2:e6:41:f2:79:14:b0:b8:bf:b4:8c:89:79:db:e5:7c:24:33: 4c:fc:5a:b9:9a:1c:9c:58:bf:5e:fc:52:6b:54:24:c5:72:ef: 33:26:74:3b:6f:16:c9:2f:c2:68:a0:91:ad:f7:54:f5:4f:4e: 62:02:56:3b:6b:2c:58:2a:24:3b:d1:7a:a8:2a:7a:ea:f3:85: f1:7d:b8:b0:04:aa:a9:61:b7:6f:db:47:3d:ba:0c:d2:52:18: 43:86:e9:1a:82:8d:6a:05:32:c0:b3:01:a6:c7:a6:d6:f8:01: 16:42:11:a4:44:ba:22:d6:a1:bb:9d:f0:fd:e1:4b:5a:93:cc: cc:6f:e6:2b:60:61:ae:0c:f3:05:84:2b:28:f3:fd:d3:a7:25: da:92:17:df:23:d5:25:77:d7:6d:0d:70:9d:1a:06:77:f0:53: e4:e7:45:9d:14:c6:63:89:b2:c9:42:2c:d6:d0:e1:49:2f:cf: 83:61:17:ef:f0:5a:f7:53:49:28:5f:55:91:20:93:c7:95:2c: f8:9a:e2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUxMDE4MjM1MDE4WhcNMjUxMDI1MjM1MDE4WjAYMRYwFAYD VQQDEw02OGY0MjdiYi1mOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRrYcvLGgM0Hp7KKiL4NHb6Tm7TRNuYFfYr2mMVAwY47iruaoeFCjpEtx0SZ ZpGDiBhHcqE3W99MLrSeDFA6rAsZVZbg3TEry3LH62yN5qYg1WnX3ok62bHgIdgR DsMdUwMw+5mhD/tghQZPt5k2ilT/RCpxIL46NmvWODta4prMJDjcfnZdxJaV5Ilu ZVGSnUX2Qjf0ENeGk+s7RC8HL67R2+4MV9xq/BbOiT451d4RC8osnuhA9yT847Sy qHx7Lsl6lK0uNVX6lGrlz4KhsflMhqTpjiaQdXoCEB1eLrF9Ymijd+tWX6SeVrYn I6fQPNjMmgQQoZAkOIHhhHv0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhhCUsk v4Ye6pFu/jtnZcpwraITMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblMAdchWtdqEulqzonGn8EcE9//Ac8+mxGvqcfli3viDp2n2Sqe9o b0PzkNmTECsRIdy3LsnC5kHyeRSwuL+0jIl52+V8JDNM/Fq5mhycWL9e/FJrVCTF cu8zJnQ7bxbJL8JooJGt91T1T05iAlY7ayxYKiQ70XqoKnrq84XxfbiwBKqpYbdv 20c9ugzSUhhDhukago1qBTLAswGmx6bW+AEWQhGkRLoi1qG7nfD94Utak8zMb+Yr YGGuDPMFhCso8/3TpyXakhffI9Uld9dtDXCdGgZ38FPk50WdFMZjibLJQizW0OFJ L8+DYRfv8Fr3U0koX1WRIJPHlSz4muIn -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:12 2025 by rpki-client