$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: t8OPZHoZir1s8AGTsM4f2Cg56aD2azpqAx90PGD0FwU= Subject key identifier: 82:40:30:2C:7E:F1:0C:9F:8E:40:0A:F2:A7:A6:5B:4D:0C:43:0B:83 Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:06:06 +0000 Manifest this update: Sun 19 Oct 2025 11:06:05 +0000 Manifest next update: Sun 26 Oct 2025 11:06:05 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: U8xwmBK5wcfnX+zB471tETBc2//iMPsL2cHJXBNFT1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Oct 19 11:06:05 2025 GMT Not After : Oct 26 11:06:05 2025 GMT Subject: CN=68f4c61e-e562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:ca:ea:8a:82:a4:ea:b9:2d:c3:b9:a4:88: 86:33:c3:88:6d:85:a0:12:95:fe:db:47:a1:e6:ff: cd:cf:1f:ea:52:b5:10:b2:2f:47:e1:28:01:de:6f: 18:68:f3:10:9b:3e:5f:02:7b:fa:c5:d7:b6:dc:ca: 89:27:9f:d1:53:04:db:a3:1b:55:7a:a5:c1:ff:8c: 6f:a8:4d:d2:8c:4c:9d:88:15:6e:c5:d8:ee:ee:5c: 97:d3:2d:89:96:1b:e1:aa:b4:c6:53:a5:98:6f:3c: 3a:f0:cb:75:56:df:b8:74:b5:68:4a:41:23:60:72: e0:8d:97:fe:bf:61:79:bf:01:47:27:02:0b:c2:25: e5:11:83:5f:13:13:f5:b1:3a:9e:d2:f4:63:2a:62: 13:b3:43:57:06:9f:33:1c:0f:10:28:58:5d:13:d3: e5:03:a8:8f:40:c2:92:9e:19:c6:27:ee:cc:f8:66: 61:2a:ca:59:0e:be:92:a4:31:e2:09:6a:bb:98:0b: 24:d7:4b:41:20:f3:1c:24:61:1c:e4:88:31:cf:af: 95:99:11:94:c4:2a:93:22:8c:43:91:09:8d:b0:50: 55:94:73:83:e9:9c:a1:58:45:0b:44:26:f8:06:91: 14:70:75:b0:a7:fc:fa:18:6a:20:40:32:60:05:65: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:30:2C:7E:F1:0C:9F:8E:40:0A:F2:A7:A6:5B:4D:0C:43:0B:83 X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:04:27:73:4e:60:2e:c2:d1:e0:ef:1e:7a:80:0c:b0:48:b3: cc:49:f3:08:48:0a:4a:80:1a:d3:2e:82:01:b0:38:83:00:b8: 51:5c:06:06:05:03:67:d5:48:bb:5d:b8:4b:69:37:40:a1:f4: f8:65:fc:94:c7:a9:ff:8b:89:b4:d9:5d:36:29:73:aa:3f:21: 48:01:aa:bb:d1:8a:89:1e:cf:99:f9:39:22:a9:23:d7:fe:03: 76:69:fa:60:9b:ea:91:ad:ff:55:00:24:8b:bf:e8:58:c4:98: 7d:57:f8:69:7b:00:bf:14:84:0e:c6:9d:df:c9:67:57:c0:93: 2d:0e:7f:3f:de:47:a1:c9:d3:95:1f:39:cd:db:40:7a:65:dc: 56:54:6f:da:f8:77:84:b7:86:11:c2:e3:de:e4:a3:e7:18:9f: 33:87:32:21:2d:ca:6a:49:c3:c7:ea:f2:42:85:72:34:5a:55: e9:57:79:e9:c0:3c:c9:f3:ae:60:f6:69:5e:60:f2:df:8c:1b: 21:f9:71:a2:66:47:97:f4:25:46:9b:66:55:ed:b3:1b:4a:e9: 75:c1:4e:5e:fb:02:7c:14:72:4b:d9:8f:12:36:c3:20:17:35: d4:75:16:9d:39:aa:62:f4:e1:80:4d:9a:0f:00:a6:35:cd:f7: 3c:a4:e9:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTEwMTkxMTA2MDVaFw0yNTEwMjYxMTA2MDVaMBgxFjAUBgNV BAMTDTY4ZjRjNjFlLWU1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcHsrqioKk6rktw7mkiIYzw4hthaASlf7bR6Hm/83PH+pStRCyL0fhKAHebxho 8xCbPl8Ce/rF17bcyoknn9FTBNujG1V6pcH/jG+oTdKMTJ2IFW7F2O7uXJfTLYmW G+GqtMZTpZhvPDrwy3VW37h0tWhKQSNgcuCNl/6/YXm/AUcnAgvCJeURg18TE/Wx Op7S9GMqYhOzQ1cGnzMcDxAoWF0T0+UDqI9AwpKeGcYn7sz4ZmEqylkOvpKkMeIJ aruYCyTXS0Eg8xwkYRzkiDHPr5WZEZTEKpMijEORCY2wUFWUc4PpnKFYRQtEJvgG kRRwdbCn/PoYaiBAMmAFZeURAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgkAwLH7x DJ+OQAryp6ZbTQxDC4MwHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwEJ3NOYC7C0eDvHnqADLBIs8xJ8whICkqAGtMuggGwOIMAuFFcBgYF A2fVSLtduEtpN0Ch9Phl/JTHqf+LibTZXTYpc6o/IUgBqrvRiokez5n5OSKpI9f+ A3Zp+mCb6pGt/1UAJIu/6FjEmH1X+Gl7AL8UhA7Gnd/JZ1fAky0Ofz/eR6HJ05Uf Oc3bQHpl3FZUb9r4d4S3hhHC497ko+cYnzOHMiEtympJw8fq8kKFcjRaVelXeenA PMnzrmD2aV5g8t+MGyH5caJmR5f0JUabZlXtsxtK6XXBTl77AnwUckvZjxI2wyAX NdR1Fp05qmL04YBNmg8ApjXN9zyk6TQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:38 2025 by rpki-client