$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft File: Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json) Hash identifier: BhlLxNfDWk4PIVIeYC6oUdiP9T/aQcdHsRUWbN82mxw= Subject key identifier: FE:2E:80:2D:79:3B:79:58:D1:EC:2E:B6:F9:81:B5:76:AF:D4:C2:D2 Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 Certificate issuer: /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft Manifest number: 04F4 Signing time: Sun 19 Oct 2025 01:29:08 +0000 Manifest this update: Sun 19 Oct 2025 01:29:08 +0000 Manifest next update: Sun 26 Oct 2025 01:29:08 +0000 Files and hashes: 1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: beTcP/lM2mToKpbtRKmnAUWs7b0Liy5VzgBQ1vzPsDA=) 2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: mphoj0oAxZzkXNiDjzgy+jQGtIB0RRer8k5eq/mlzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138 Validity Not Before: Oct 19 01:29:08 2025 GMT Not After : Oct 26 01:29:08 2025 GMT Subject: CN=68f43ee4-b775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:43:ee:9e:84:48:4a:10:41:6f:f2:27:a2: 6d:e3:e1:18:74:c5:48:09:15:b6:52:4e:bb:0c:12: 68:2c:57:09:86:2f:0b:00:40:07:42:18:06:38:72: 6c:41:12:22:a5:4f:92:71:5e:65:4d:87:e3:64:00: 07:0c:88:11:c5:78:b3:ac:88:7c:90:fb:c3:c4:50: 3a:8c:39:77:64:ac:c7:27:f6:9a:12:ef:52:b1:7a: ad:64:a0:2f:bf:51:89:27:fe:8a:44:36:9f:44:4f: 13:67:1d:a4:4f:85:e3:7b:88:6c:2c:44:6c:e5:fc: ae:47:03:b3:76:79:f5:a5:13:ee:d7:09:d6:55:71: f7:1c:d5:89:65:a8:4f:8f:44:39:8a:7d:4b:4b:3b: 70:2c:a4:23:38:74:b7:7d:fe:4c:32:8b:9e:35:82: 31:bf:3e:15:25:86:0b:57:11:84:b7:bb:fd:a1:a8: da:65:11:db:5d:94:61:5b:d0:bf:c9:8b:33:74:85: 92:df:a8:db:58:cb:ea:cf:e8:64:39:f0:ac:05:11: ab:26:94:e1:7e:a2:d6:d7:47:7d:77:90:d7:7d:04: f1:3f:bd:ac:d6:95:72:42:ad:8a:7d:56:b8:d3:45: d4:f5:b6:fc:ff:44:9a:e1:8f:70:aa:e4:15:3b:33: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:80:2D:79:3B:79:58:D1:EC:2E:B6:F9:81:B5:76:AF:D4:C2:D2 X509v3 Authority Key Identifier: keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:68:c9:cc:48:25:69:35:c6:70:b1:8d:28:aa:a5:7b:61:84: 92:d8:17:40:e4:0b:a0:e1:0d:cb:c0:fb:24:a1:5f:07:75:41: e5:91:05:03:6a:80:da:6d:3f:1f:8a:eb:00:98:dc:3b:a3:f0: d3:f1:a2:a8:7b:e9:54:97:b0:ab:82:a2:2d:e4:81:87:d8:7b: 49:de:68:ad:47:92:eb:3e:1a:df:99:de:4f:cf:c5:82:15:34: 99:5f:f2:e3:5d:73:c9:d3:d0:1a:40:62:ec:05:65:e3:f2:9a: 0b:96:e2:9f:76:a7:58:c2:72:49:f0:32:6d:7f:42:76:d6:62: 4e:dc:fb:a2:eb:b7:9f:e8:dc:59:78:87:f8:f3:ed:0c:1f:35: c1:c0:df:bf:09:b6:3a:41:45:36:d7:fa:c2:45:84:00:68:54: ea:d7:54:fc:50:58:41:48:a2:c5:ff:60:f0:da:2c:bb:f4:2a: c2:a7:75:30:e7:e6:89:1f:ef:61:c0:3a:e8:bb:cf:c3:d8:c0: 31:fd:79:b6:8f:a4:e9:9f:57:94:a4:49:e6:ee:b9:b9:87:46: e6:c5:d9:f0:33:fb:a2:d2:e2:72:42:70:4f:44:d6:d4:28:0b: 4e:8e:4f:65:67:72:ed:be:7d:48:46:a0:c0:b7:69:d4:8d:6a: 60:a9:5b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3QjMxMTAvBgNVBAUTKDFFRkU3NkQxQThEQzZDRDAyNENCM0NGNDA3OTBBNUYx NEEyQzIxMzgwHhcNMjUxMDE5MDEyOTA4WhcNMjUxMDI2MDEyOTA4WjAYMRYwFAYD VQQDEw02OGY0M2VlNC1iNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoItD7p6ESEoQQW/yJ6Jt4+EYdMVICRW2Uk67DBJoLFcJhi8LAEAHQhgGOHJs QRIipU+ScV5lTYfjZAAHDIgRxXizrIh8kPvDxFA6jDl3ZKzHJ/aaEu9SsXqtZKAv v1GJJ/6KRDafRE8TZx2kT4Xje4hsLERs5fyuRwOzdnn1pRPu1wnWVXH3HNWJZahP j0Q5in1LSztwLKQjOHS3ff5MMoueNYIxvz4VJYYLVxGEt7v9oajaZRHbXZRhW9C/ yYszdIWS36jbWMvqz+hkOfCsBRGrJpThfqLW10d9d5DXfQTxP72s1pVyQq2KfVa4 00XU9bb8/0Sa4Y9wquQVOzPHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4ugC15 O3lY0ewutvmBtXav1MLSMB8GA1UdIwQYMBaAFB7+dtGo3GzQJMs89AeQpfFKLCE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdCMy8yRkQ4MTVFQzMw QjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JOQWt5enowQjVDbDhVb3NJ VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2NTIwYWpjYk5Ba3l6ejBCNUNsOFVvc0lUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdCMy8yRkQ4MTVFQzMwQjQxMUVDODA2MDkyNzVDNEY5QUUwMi9IdjUyMGFqY2JO QWt5enowQjVDbDhVb3NJVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpaMnMSCVpNcZwsY0oqqV7YYSS2BdA5Aug4Q3LwPskoV8HdUHlkQUD aoDabT8fiusAmNw7o/DT8aKoe+lUl7CrgqIt5IGH2HtJ3mitR5LrPhrfmd5Pz8WC FTSZX/LjXXPJ09AaQGLsBWXj8poLluKfdqdYwnJJ8DJtf0J21mJO3Pui67ef6NxZ eIf48+0MHzXBwN+/CbY6QUU21/rCRYQAaFTq11T8UFhBSKLF/2Dw2iy79CrCp3Uw 5+aJH+9hwDrou8/D2MAx/Xm2j6Tpn1eUpEnm7rm5h0bmxdnwM/ui0uJyQnBPRNbU KAtOjk9lZ3Ltvn1IRqDAt2nUjWpgqVsC -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:10 2025 by rpki-client