$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft File: hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json) Hash identifier: bRSnyTNTLTTJsxHZ1Ttgd14woYT4gM5pNujag4xCYGo= Subject key identifier: 91:FB:47:7D:A9:E2:FF:FC:D0:12:51:62:09:3D:78:15:F2:34:21:E4 Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 Certificate issuer: /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft Manifest number: 0238 Signing time: Sun 19 Oct 2025 04:07:39 +0000 Manifest this update: Sun 19 Oct 2025 04:07:38 +0000 Manifest next update: Sun 26 Oct 2025 04:07:38 +0000 Files and hashes: 1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: OKLlmI17QvJoLISqcTc91xBeThVEFqWhNrsJh4wbf58=) 2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: d2fZwjk/kReWJf7o+GQOO5RAjKTwIQ1B0ld4lPrAcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7 Validity Not Before: Oct 19 04:07:38 2025 GMT Not After : Oct 26 04:07:38 2025 GMT Subject: CN=68f4640a-e9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:c9:7e:42:19:b7:a2:c7:4f:df:0f:29:87: ca:fc:ff:4d:87:42:a0:b1:f7:2d:ac:f6:b4:6c:a8: 67:09:65:ab:cc:23:a2:40:9e:41:eb:e4:5c:31:fa: bc:c5:62:95:9c:b3:93:ae:58:4a:17:ca:c9:eb:5d: ad:c2:e7:e8:25:de:eb:ec:a9:5f:92:08:8d:b0:6f: 86:a2:65:90:e0:f8:e6:ba:df:5d:4e:8f:d9:5d:08: 9f:c9:a1:98:9c:33:65:6c:ab:6a:8e:00:42:f0:b3: f9:8d:3e:e4:ed:b0:2d:34:6c:b3:7d:8d:fd:19:56: 3a:3f:34:d8:bc:5d:56:74:ed:24:0e:0c:9a:b2:d8: d0:2b:3e:7c:76:1d:fb:8d:a2:e1:0c:83:dc:d9:ed: 2f:ef:19:d7:6e:f0:01:28:27:26:ab:71:6b:9f:19: a1:93:ef:1f:36:d1:7e:49:5c:eb:67:e8:81:17:7d: 5f:26:75:f9:9c:f2:b2:94:57:a4:06:32:c9:92:59: 46:2d:56:2f:bb:79:95:f9:4b:4e:d5:1f:c9:22:2f: b1:f2:2a:d9:61:a0:99:2a:bd:fd:db:a6:04:64:d6: f1:78:9e:b8:bf:cb:49:4f:bb:2d:69:83:eb:09:43: d2:53:b1:40:ee:14:fb:97:b0:f7:ad:9b:52:a3:36: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:47:7D:A9:E2:FF:FC:D0:12:51:62:09:3D:78:15:F2:34:21:E4 X509v3 Authority Key Identifier: keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4d:2a:e0:84:5a:ca:8f:cd:12:55:dd:98:e7:85:8f:4d:25: 15:6c:ae:16:ec:c3:66:74:4d:dd:e7:db:b0:38:5e:ae:25:f9: 41:10:b2:3e:4c:07:c1:3e:01:ea:a4:7a:c4:dd:26:25:81:20: e0:7f:aa:55:74:78:ea:26:eb:65:b7:f7:18:6e:21:92:43:67: c0:7c:66:9b:8e:57:e5:44:26:63:3f:dd:84:2e:77:50:3b:b9: f8:09:ec:ec:e3:1b:6a:f6:48:94:b7:7e:85:ae:50:e1:34:ac: 46:4d:31:f3:42:c8:ae:13:47:e6:65:d8:dc:61:41:1c:c7:61: 69:a1:6c:d2:81:61:bc:99:ab:ea:74:9e:01:9b:0e:68:72:e9: 91:14:be:b4:6e:ea:61:73:ad:22:a5:2b:2d:4f:cb:0a:73:83: 90:02:b8:49:07:7d:0c:95:7e:2a:44:1a:6d:55:53:d1:c6:2d: 05:31:26:f4:d0:ed:fe:04:ce:09:0e:83:79:0c:9a:a6:4a:da: 58:a4:49:5e:8c:73:84:39:5e:16:c5:83:47:34:8a:d1:74:ba: d9:7c:f7:df:39:61:12:28:eb:f0:ec:fe:c1:33:06:aa:d5:23: a7:a2:4d:b5:5c:36:ca:94:b0:40:db:80:49:c0:0b:96:50:aa: e8:91:4c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM5QzQxMTAvBgNVBAUTKDg0ODNGRDU0NTdEMTFFMDUxMzU1MjExMUY1QkEyRjM3 MTJFOTg1RjcwHhcNMjUxMDE5MDQwNzM4WhcNMjUxMDI2MDQwNzM4WjAYMRYwFAYD VQQDEw02OGY0NjQwYS1lOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0vJfkIZt6LHT98PKYfK/P9Nh0KgsfctrPa0bKhnCWWrzCOiQJ5B6+RcMfq8 xWKVnLOTrlhKF8rJ612twufoJd7r7KlfkgiNsG+GomWQ4Pjmut9dTo/ZXQifyaGY nDNlbKtqjgBC8LP5jT7k7bAtNGyzfY39GVY6PzTYvF1WdO0kDgyastjQKz58dh37 jaLhDIPc2e0v7xnXbvABKCcmq3Frnxmhk+8fNtF+SVzrZ+iBF31fJnX5nPKylFek BjLJkllGLVYvu3mV+UtO1R/JIi+x8irZYaCZKr3926YEZNbxeJ64v8tJT7staYPr CUPSU7FA7hT7l7D3rZtSozaBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH7R32p 4v/80BJRYgk9eBXyNCHkMB8GA1UdIwQYMBaAFISD/VRX0R4FE1UhEfW6LzcS6YX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzlDNC8xQTcwREM4NjRF OTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhnVVRWU0VSOWJvdk54THBo ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJUDlWRmZSSGdVVFZTRVI5Ym92TnhMcGhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzlDNC8xQTcwREM4NjRFOTMxMUVEQTczMEVEMzJDNEY5QUUwMi9oSVA5VkZmUkhn VVRWU0VSOWJvdk54THBoZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDTSrghFrKj80SVd2Y54WPTSUVbK4W7MNmdE3d59uwOF6uJflBELI+ TAfBPgHqpHrE3SYlgSDgf6pVdHjqJutlt/cYbiGSQ2fAfGabjlflRCZjP92ELndQ O7n4Cezs4xtq9kiUt36FrlDhNKxGTTHzQsiuE0fmZdjcYUEcx2FpoWzSgWG8mavq dJ4Bmw5ocumRFL60buphc60ipSstT8sKc4OQArhJB30MlX4qRBptVVPRxi0FMSb0 0O3+BM4JDoN5DJqmStpYpElejHOEOV4WxYNHNIrRdLrZfPffOWESKOvw7P7BMwaq 1SOnok21XDbKlLBA24BJwAuWUKrokUyu -----END CERTIFICATE-----Generated at Tue Oct 21 00:58:28 2025 by rpki-client