$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft File: Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft (raw, json) Hash identifier: 1hBFzFaY3Q529wH5eTwjhNMyXIVlT6V249AJZahf4sA= Subject key identifier: C9:99:A1:2D:3E:5B:64:85:D4:C7:BD:02:F1:B7:43:C2:CF:88:B3:C4 Authority key identifier: 1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE Certificate issuer: /CN=A91E3C9A/serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft Manifest number: 0894 Signing time: Sat 18 Oct 2025 21:41:26 +0000 Manifest this update: Sat 18 Oct 2025 21:41:25 +0000 Manifest next update: Sat 25 Oct 2025 21:41:25 +0000 Files and hashes: 1: Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl (hash: RqmS5BEXLsAi+2TUHw1bzTpqz4OJnMVhOynMQut15TE=) 2: 3A5B01A0CA8F11EAA35BF958C4F9AE02.roa (hash: 1N0QMhN8bev3U7bduyRkYXLSMRn8SE8/x15vjryS7dU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C9A, serialNumber=1E7E0D8946BC48D0754B03E9872AD3880C54E4BE Validity Not Before: Oct 18 21:41:25 2025 GMT Not After : Oct 25 21:41:25 2025 GMT Subject: CN=68f40985-29fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:66:6c:7d:6b:4f:c0:bd:f3:cf:d9:71:87: 25:55:b5:5a:ca:65:b9:64:13:a4:9d:f3:ad:60:b3: 3f:39:75:04:41:71:36:41:72:35:72:3c:85:67:5f: 4d:be:52:1b:be:1e:58:6a:2e:c2:b2:dd:a0:6f:c2: ce:8f:8e:ec:5d:e9:62:5f:c3:56:3b:90:83:10:fd: 0c:9f:69:92:6f:a0:7f:0f:58:6b:e0:a7:f6:7d:2c: 8b:92:25:6f:42:4d:fe:41:59:62:5f:58:fa:cc:c6: de:d2:77:66:3e:e4:58:31:f1:bb:16:c4:45:37:f3: ad:1d:0f:60:f6:3e:95:b4:8a:9f:3c:42:68:51:c8: 5b:46:44:92:af:ba:eb:13:3a:c7:c7:09:34:36:d1: af:da:d8:cd:1f:41:2b:75:e2:ea:e6:2b:f2:74:06: bf:47:24:7e:8b:f7:dd:9f:bd:39:a9:c6:8e:78:99: 81:50:ac:f6:2d:67:e1:83:29:0e:7e:87:65:d4:69: 49:bd:b9:0e:b8:f9:b2:3e:40:19:3f:81:ff:7e:c9: 84:86:1e:ca:6f:b5:8e:39:4f:bc:12:e2:f5:1c:bc: 31:7d:02:80:ab:80:d1:91:81:59:8f:2c:4b:d7:78: b3:fa:d4:33:d6:7c:1b:e1:a8:b0:0a:72:1f:b3:fe: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:99:A1:2D:3E:5B:64:85:D4:C7:BD:02:F1:B7:43:C2:CF:88:B3:C4 X509v3 Authority Key Identifier: keyid:1E:7E:0D:89:46:BC:48:D0:75:4B:03:E9:87:2A:D3:88:0C:54:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hn4NiUa8SNB1SwPphyrTiAxU5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C9A/A1D61D3ACA8D11EABE5BB656C4F9AE02/Hn4NiUa8SNB1SwPphyrTiAxU5L4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:74:29:48:c6:8b:3f:c2:88:72:5b:ea:e7:0c:70:25:34:55: 13:4c:0a:4f:34:64:f2:50:45:57:d8:23:17:bd:09:e5:5d:07: 77:bc:41:83:25:3b:58:9a:10:64:a2:5a:a0:35:76:63:24:ea: 08:ca:55:20:95:dc:47:b4:5b:16:54:71:d2:d6:0d:c1:82:04: e6:90:fa:56:ec:e0:a7:65:53:8f:25:ac:01:dd:8f:a8:b1:ef: db:dd:c9:33:c4:e8:7a:68:09:71:45:9c:38:9b:21:0a:6d:bd: c3:eb:58:06:fb:82:77:78:90:15:2e:7f:a1:86:32:d9:6f:8f: e7:ef:c5:f3:4b:db:31:fe:73:90:32:ac:55:fe:17:69:e2:c4: 86:e9:b7:0f:1f:80:16:df:af:e2:d6:32:e0:4e:a6:98:64:d1: 25:8e:1b:13:42:b0:36:3c:5f:9b:08:ee:a0:e7:42:01:97:0d: 61:39:18:8d:a3:32:bb:f3:44:5a:f5:0f:21:67:bc:61:8c:57: d2:aa:3a:1d:e8:df:e6:08:0d:7a:c1:c6:6c:17:40:e3:d1:b3: 78:fb:6d:60:a3:99:ad:0d:c0:44:b2:85:81:8d:0f:22:d3:28: b0:9c:59:df:22:25:f6:70:a8:b5:61:70:d0:da:02:07:3f:11: b5:a6:b8:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDOUExMTAvBgNVBAUTKDFFN0UwRDg5NDZCQzQ4RDA3NTRCMDNFOTg3MkFEMzg4 MEM1NEU0QkUwHhcNMjUxMDE4MjE0MTI1WhcNMjUxMDI1MjE0MTI1WjAYMRYwFAYD VQQDEw02OGY0MDk4NS0yOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylNmbH1rT8C988/ZcYclVbVaymW5ZBOknfOtYLM/OXUEQXE2QXI1cjyFZ19N vlIbvh5Yai7Cst2gb8LOj47sXeliX8NWO5CDEP0Mn2mSb6B/D1hr4Kf2fSyLkiVv Qk3+QVliX1j6zMbe0ndmPuRYMfG7FsRFN/OtHQ9g9j6VtIqfPEJoUchbRkSSr7rr EzrHxwk0NtGv2tjNH0ErdeLq5ivydAa/RyR+i/fdn705qcaOeJmBUKz2LWfhgykO fodl1GlJvbkOuPmyPkAZP4H/fsmEhh7Kb7WOOU+8EuL1HLwxfQKAq4DRkYFZjyxL 13iz+tQz1nwb4aiwCnIfs/5I8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmZoS0+ W2SF1Me9AvG3Q8LPiLPEMB8GA1UdIwQYMBaAFB5+DYlGvEjQdUsD6Ycq04gMVOS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M5QS9BMUQ2MUQzQUNB OEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNOQjFTd1BwaHlyVGlBeFU1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huNE5pVWE4U05CMVN3UHBoeXJUaUF4VTVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M5QS9BMUQ2MUQzQUNBOEQxMUVBQkU1QkI2NTZDNEY5QUUwMi9IbjROaVVhOFNO QjFTd1BwaHlyVGlBeFU1TDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCidClIxos/wohyW+rnDHAlNFUTTApPNGTyUEVX2CMXvQnlXQd3vEGD JTtYmhBkolqgNXZjJOoIylUgldxHtFsWVHHS1g3BggTmkPpW7OCnZVOPJawB3Y+o se/b3ckzxOh6aAlxRZw4myEKbb3D61gG+4J3eJAVLn+hhjLZb4/n78XzS9sx/nOQ MqxV/hdp4sSG6bcPH4AW36/i1jLgTqaYZNEljhsTQrA2PF+bCO6g50IBlw1hORiN ozK780Ra9Q8hZ7xhjFfSqjod6N/mCA16wcZsF0Dj0bN4+21go5mtDcBEsoWBjQ8i 0yiwnFnfIiX2cKi1YXDQ2gIHPxG1prgb -----END CERTIFICATE-----Generated at Mon Oct 20 20:16:31 2025 by rpki-client