$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: F/1yf7ENbQX9YtPDEuweO6I1k9K4cp1rda/9Zl7hIto= Subject key identifier: 0C:A2:37:46:69:C1:CE:AD:52:88:17:DB:A8:22:5C:C0:BA:0A:F9:11 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0182 Signing time: Sun 19 Oct 2025 06:15:54 +0000 Manifest this update: Sun 19 Oct 2025 06:15:53 +0000 Manifest next update: Sun 26 Oct 2025 06:15:53 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: grbc9Mile5WXku0de4NqhJbuuqdHaqb63f1y1OLNr5Q=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Oct 19 06:15:53 2025 GMT Not After : Oct 26 06:15:53 2025 GMT Subject: CN=68f48219-2d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:0b:2f:df:5b:68:cb:85:b0:8c:72:c7:19: d5:30:d3:50:ad:70:3a:bc:ec:c0:99:8c:bd:a8:1f: 29:02:e3:67:16:59:a3:23:6b:9f:e7:0e:c0:8e:cb: fa:67:bf:dd:5f:a3:a3:a4:0b:29:ce:9d:7c:32:ca: 5d:d5:ef:68:a8:ed:49:38:ed:1f:6e:24:5c:ce:bb: fa:7b:71:45:d9:36:d2:17:58:1d:2b:8e:c8:05:54: d5:e5:be:50:62:fd:f1:af:75:81:95:46:d8:af:42: 5d:69:85:ca:78:ea:9c:8c:6f:42:97:c8:9a:15:ea: 3a:d2:8e:4f:43:80:ae:95:07:26:cd:e6:36:8a:a3: d2:72:c1:92:39:f9:11:ee:2d:3e:a9:1c:50:61:5b: a2:d2:6f:2f:7a:4b:cd:f9:15:d4:29:78:5b:fa:b8: 2b:cd:1c:0d:75:32:fc:b3:c6:1e:8a:70:99:10:e5: cd:00:6f:d7:69:d4:e4:73:f6:fd:91:15:4f:24:a3: 68:ca:8a:7f:93:c2:da:71:12:8b:cc:1c:ee:72:cc: 2b:55:64:4c:79:d1:70:ba:db:1e:21:70:e4:06:bf: 62:b9:e1:b8:2b:7d:72:5f:90:74:05:9a:95:8c:29: 68:49:3a:25:21:a9:c6:ed:c2:f4:43:61:76:6f:7f: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:37:46:69:C1:CE:AD:52:88:17:DB:A8:22:5C:C0:BA:0A:F9:11 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:22:74:d6:03:72:21:d3:2e:db:0c:f2:d5:fc:5f:d9:9e:fd: 95:f4:f5:7b:49:c1:4c:59:4c:75:d0:41:b3:51:75:6c:71:f2: 36:67:5f:b0:3c:80:a4:40:cf:1c:0a:c5:60:c0:a0:bc:7a:bb: 2f:da:23:65:e9:04:76:ab:0c:55:56:e6:ee:fb:18:5a:f3:a7: ce:89:d5:56:f2:ea:b1:0c:15:8f:b5:07:45:77:5d:86:95:b2: 96:50:91:50:1f:d4:46:c4:81:90:76:02:11:b4:90:15:b4:3e: e3:5e:c1:da:17:57:b1:33:44:75:72:53:95:a4:40:8d:c4:c7: 14:de:80:79:c3:d4:b1:cd:f2:b2:ba:4e:7c:db:9a:59:de:e2: 96:16:ee:f7:2e:f6:a4:23:04:9f:1e:e7:61:19:42:96:05:af: ae:d8:a7:17:99:d0:78:00:7a:f9:47:54:42:32:ee:8c:d6:8a: 60:b4:d8:19:35:7e:b6:e3:ab:32:d9:50:1f:e6:db:4e:ae:32: 67:f2:89:64:91:e1:dc:e4:48:e4:cd:c8:20:17:57:e8:bb:a6: 47:30:a2:c2:95:38:bd:6d:2f:f1:c8:68:30:22:b9:08:eb:64: a0:8c:78:9e:fe:b9:73:87:c3:28:c4:4b:d2:bf:4f:92:74:4f: d4:c0:ca:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUxMDE5MDYxNTUzWhcNMjUxMDI2MDYxNTUzWjAYMRYwFAYD VQQDEw02OGY0ODIxOS0yZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ncLL99baMuFsIxyxxnVMNNQrXA6vOzAmYy9qB8pAuNnFlmjI2uf5w7Ajsv6 Z7/dX6OjpAspzp18Mspd1e9oqO1JOO0fbiRczrv6e3FF2TbSF1gdK47IBVTV5b5Q Yv3xr3WBlUbYr0JdaYXKeOqcjG9Cl8iaFeo60o5PQ4CulQcmzeY2iqPScsGSOfkR 7i0+qRxQYVui0m8vekvN+RXUKXhb+rgrzRwNdTL8s8YeinCZEOXNAG/XadTkc/b9 kRVPJKNoyop/k8LacRKLzBzucswrVWRMedFwutseIXDkBr9iueG4K31yX5B0BZqV jCloSTolIanG7cL0Q2F2b3/YPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyiN0Zp wc6tUogX26giXMC6CvkRMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChInTWA3Ih0y7bDPLV/F/Znv2V9PV7ScFMWUx10EGzUXVscfI2Z1+w PICkQM8cCsVgwKC8ersv2iNl6QR2qwxVVubu+xha86fOidVW8uqxDBWPtQdFd12G lbKWUJFQH9RGxIGQdgIRtJAVtD7jXsHaF1exM0R1clOVpECNxMcU3oB5w9SxzfKy uk5825pZ3uKWFu73LvakIwSfHudhGUKWBa+u2KcXmdB4AHr5R1RCMu6M1opgtNgZ NX6246sy2VAf5ttOrjJn8olkkeHc5EjkzcggF1fou6ZHMKLClTi9bS/xyGgwIrkI 62SgjHie/rlzh8MoxEvSv0+SdE/UwMr/ -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:34 2025 by rpki-client