$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: kcD4EkSZpJiXaXMqeZokYWouuq0uZ8zbAbuioXfWzd8= Subject key identifier: 21:5C:F5:2F:F6:10:62:4A:C6:7C:01:0A:D0:78:39:D0:F1:79:4F:48 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:43:11 +0000 Manifest this update: Sun 19 Oct 2025 10:43:11 +0000 Manifest next update: Sun 26 Oct 2025 10:43:11 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: AXhXp/7vSl11f525Mo513NrkjX6hOXNU3URPKV/DlcA=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Oct 19 10:43:11 2025 GMT Not After : Oct 26 10:43:11 2025 GMT Subject: CN=68f4c0bf-32a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:b4:f0:67:c7:c3:13:e7:db:50:22:33:62: f0:b0:6e:6e:7e:91:4b:36:74:0c:af:76:0d:f4:12: f9:16:3f:e0:5d:d2:7a:9f:fc:d8:fb:ac:e2:3e:43: 31:64:6a:d7:58:35:93:7d:d5:7c:96:07:cb:b0:fb: 96:aa:4e:81:a2:01:34:b8:2f:52:36:c9:59:a7:23: d3:b6:4d:85:88:28:7e:44:ff:97:06:c8:34:9b:82: e2:62:e3:df:4f:0a:ba:49:bc:cf:c1:d1:cb:90:a6: 2f:b2:e5:24:49:3d:3a:6f:94:c5:f9:39:43:e2:ac: ba:9b:7d:61:38:72:5c:36:81:13:01:b6:f3:3b:f8: 72:8c:90:32:ea:7f:78:15:5d:de:77:3c:fe:4f:87: 0d:fa:3d:a3:46:c3:f5:13:4b:dc:8d:0b:f5:e8:99: e3:ad:63:93:5d:34:8a:51:66:f0:bb:3d:00:01:f5: a4:d0:f8:7b:41:b8:53:9d:d7:dd:35:cc:53:37:07: bb:c7:0d:02:6f:9b:9c:a4:d2:a8:d4:b9:e9:4f:21: 65:f4:6e:e6:5a:11:a4:58:2d:e3:87:bc:cc:c2:02: 6f:45:12:74:5a:5b:33:e2:f1:77:da:36:fb:b9:eb: 2d:37:d3:83:00:2f:33:70:fe:b9:0b:59:94:9d:ec: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:F5:2F:F6:10:62:4A:C6:7C:01:0A:D0:78:39:D0:F1:79:4F:48 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:89:e8:87:04:f3:08:4c:d3:de:b9:2c:1e:73:63:31:e8: 98:7f:91:90:2c:0b:76:da:a1:fd:81:2a:95:74:c6:a6:6b:15: 15:f9:d3:72:ed:2c:ce:42:61:0e:d1:ca:98:2a:f0:b7:bd:43: 7e:ad:a8:63:fa:1f:f7:53:2b:24:d9:3f:4d:c8:e8:c7:0b:fc: cb:08:29:ad:d8:c2:52:5a:ce:50:87:d4:c6:ee:66:85:29:a6: 2e:7b:46:6e:d9:2c:3a:8c:df:9c:15:0a:a8:a6:86:b3:4d:0e: d1:3a:76:83:ac:f6:7e:6f:e2:20:12:42:bc:e1:86:dd:07:5a: 44:8f:9e:d7:1d:5c:5f:37:bc:eb:4b:e9:a1:ac:1b:69:ea:06: 7f:17:57:d7:be:a1:97:28:cd:b3:25:b2:57:84:e2:3c:3d:d0: 95:e6:af:87:14:35:c0:95:4e:40:5f:4f:0a:d4:b1:0c:dd:e6: d9:a6:54:48:84:04:33:e1:78:ba:0d:ba:e6:99:17:5f:e7:b1: 8d:28:1b:17:98:8c:b2:40:ff:27:23:9d:b9:c0:d4:68:73:5d: eb:96:35:6b:55:6a:a8:3b:b4:53:13:2e:8e:e6:ce:d4:c5:03: 74:7b:0e:22:55:dd:f6:b7:aa:27:32:ab:2b:9c:df:8c:0e:57: 50:a7:6b:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTEwMTkxMDQzMTFaFw0yNTEwMjYxMDQzMTFaMBgxFjAUBgNV BAMTDTY4ZjRjMGJmLTMyYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe/rTwZ8fDE+fbUCIzYvCwbm5+kUs2dAyvdg30EvkWP+Bd0nqf/Nj7rOI+QzFk atdYNZN91XyWB8uw+5aqToGiATS4L1I2yVmnI9O2TYWIKH5E/5cGyDSbguJi499P CrpJvM/B0cuQpi+y5SRJPTpvlMX5OUPirLqbfWE4clw2gRMBtvM7+HKMkDLqf3gV Xd53PP5Phw36PaNGw/UTS9yNC/XomeOtY5NdNIpRZvC7PQAB9aTQ+HtBuFOd1901 zFM3B7vHDQJvm5yk0qjUuelPIWX0buZaEaRYLeOHvMzCAm9FEnRaWzPi8XfaNvu5 6y0304MALzNw/rkLWZSd7JZbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIVz1L/YQ YkrGfAEK0Hg50PF5T0gwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGdJieiHBPMITNPeuSwec2Mx6Jh/kZAsC3baof2BKpV0xqZrFRX503Lt LM5CYQ7Rypgq8Le9Q36tqGP6H/dTKyTZP03I6McL/MsIKa3YwlJazlCH1MbuZoUp pi57Rm7ZLDqM35wVCqimhrNNDtE6doOs9n5v4iASQrzhht0HWkSPntcdXF83vOtL 6aGsG2nqBn8XV9e+oZcozbMlsleE4jw90JXmr4cUNcCVTkBfTwrUsQzd5tmmVEiE BDPheLoNuuaZF1/nsY0oGxeYjLJA/ycjnbnA1GhzXeuWNWtVaqg7tFMTLo7mztTF A3R7DiJV3fa3qicyqyuc34wOV1Cna+o= -----END CERTIFICATE-----Generated at Mon Oct 20 23:34:32 2025 by rpki-client