$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: KFQaBqFHOsDHdyFDz800JlOBcXe8dTA/EONCBvyLGXs= Subject key identifier: B8:66:C6:9E:6F:50:9E:C6:CE:71:1B:DF:D8:B6:F8:90:36:D7:BA:0D Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:28:41 +0000 Manifest this update: Sun 19 Oct 2025 08:28:41 +0000 Manifest next update: Sun 26 Oct 2025 08:28:41 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: RWsqiANBvQYKqfJlnBRDgrN5d83qZIePe9AESf/GtH0=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: zU0ivsUwwPcioIh+SJNEn0/D/vk8mXy+zIutWbBZmTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Oct 19 08:28:41 2025 GMT Not After : Oct 26 08:28:41 2025 GMT Subject: CN=68f4a139-b33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:58:cb:65:ab:c8:90:9e:7e:d8:ae:7e:7d: 64:61:15:6d:5b:20:da:cc:bf:d7:78:fe:d2:42:60: c0:d5:3c:c9:a7:db:7b:b5:1a:e9:83:bb:ba:61:74: c5:ee:ad:1f:77:e1:b2:91:14:e4:f5:94:06:14:3f: 63:80:f4:cb:a6:09:48:0a:20:15:84:59:c1:05:ff: a7:a1:fb:05:6d:13:d5:69:69:8b:92:a9:20:9b:46: ed:03:6c:b8:3f:68:52:49:65:c0:aa:99:5c:f3:d6: 75:92:50:7e:bc:ad:9f:1b:39:8d:69:aa:5a:5d:cd: 54:dd:72:bc:57:81:89:0d:b5:cb:15:e6:96:ea:b1: 55:7b:7e:f9:ba:77:7b:29:fb:7d:6e:e7:26:0e:ab: d1:71:a9:b4:de:05:00:c8:9d:b7:53:f7:04:b4:39: 70:ed:ea:11:6a:bf:90:bd:9f:f0:77:e0:aa:c9:45: 04:58:c9:3e:6d:31:9e:51:ee:34:36:00:c7:f7:9c: fb:c7:28:7e:9c:0f:7a:8c:32:d1:78:0e:a2:0b:e4: b7:0d:ee:e6:85:7a:0e:a9:e5:78:4c:b8:28:cf:ec: 70:f4:b9:1b:ee:25:99:e1:be:8e:8c:e7:65:c9:7a: b1:2c:11:d7:cf:fc:bb:cd:96:98:18:84:87:07:7d: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:66:C6:9E:6F:50:9E:C6:CE:71:1B:DF:D8:B6:F8:90:36:D7:BA:0D X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:fa:5b:e6:a8:35:7d:fc:58:7a:c9:3a:65:d3:44:a3:87: 90:22:95:e1:3f:92:88:d0:a4:7f:ed:4b:12:15:30:71:e3:0c: 5c:ac:72:24:b7:1e:50:9e:1c:01:dd:20:ac:17:a9:b4:e2:d9: 7f:b0:34:cd:1c:6e:2c:f9:27:88:10:0a:e6:10:1f:94:03:dc: 7f:9b:b1:e1:c8:ca:32:92:b3:78:7a:5a:b5:e8:1d:d1:31:36: 46:d5:1a:9d:e3:fc:db:b5:d0:96:d2:50:5d:23:ee:cb:0e:d7: aa:b2:37:8a:13:ce:80:a8:94:e1:57:25:46:c1:b2:15:83:b6: 13:5c:6b:c0:4b:4e:60:c3:b7:6d:aa:c3:88:10:e4:48:de:4d: a2:65:80:4f:cd:f2:a6:b4:93:62:ca:75:46:92:b9:b6:88:b1: 19:7c:19:b3:fe:ba:5c:e7:b7:f4:e2:21:f4:1d:a8:5b:fc:3d: 95:04:64:02:82:e0:9a:d7:87:f1:2c:f4:fd:9c:e4:74:b4:95: fe:5f:89:56:c4:0a:d0:16:cd:7e:25:d9:7d:32:2a:9b:d6:cb: 6d:d9:4c:1c:81:2b:a9:42:98:26:28:4d:3c:d9:5d:0a:e3:f1: 2a:54:76:1c:ff:86:42:8c:fb:cf:a2:cb:76:8d:38:25:67:e5: b3:f5:e8:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMDE5MDgyODQxWhcNMjUxMDI2MDgyODQxWjAYMRYwFAYD VQQDEw02OGY0YTEzOS1iMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxStYy2WryJCeftiufn1kYRVtWyDazL/XeP7SQmDA1TzJp9t7tRrpg7u6YXTF 7q0fd+GykRTk9ZQGFD9jgPTLpglICiAVhFnBBf+nofsFbRPVaWmLkqkgm0btA2y4 P2hSSWXAqplc89Z1klB+vK2fGzmNaapaXc1U3XK8V4GJDbXLFeaW6rFVe375und7 Kft9bucmDqvRcam03gUAyJ23U/cEtDlw7eoRar+QvZ/wd+CqyUUEWMk+bTGeUe40 NgDH95z7xyh+nA96jDLReA6iC+S3De7mhXoOqeV4TLgoz+xw9Lkb7iWZ4b6OjOdl yXqxLBHXz/y7zZaYGISHB31tOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhmxp5v UJ7GznEb39i2+JA217oNMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTXfpb5qg1ffxYesk6ZdNEo4eQIpXhP5KI0KR/7UsSFTBx4wxcrHIk tx5QnhwB3SCsF6m04tl/sDTNHG4s+SeIEArmEB+UA9x/m7HhyMoykrN4elq16B3R MTZG1Rqd4/zbtdCW0lBdI+7LDteqsjeKE86AqJThVyVGwbIVg7YTXGvAS05gw7dt qsOIEORI3k2iZYBPzfKmtJNiynVGkrm2iLEZfBmz/rpc57f04iH0Hahb/D2VBGQC guCa14fxLPT9nOR0tJX+X4lWxArQFs1+Jdl9Miqb1stt2UwcgSupQpgmKE082V0K 4/EqVHYc/4ZCjPvPost2jTglZ+Wz9ehL -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:51 2025 by rpki-client