$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: sGeYvCN7gLJ6Fij9d2qAWfS3n+WOcuQb2WZJgpYhwMw= Subject key identifier: 54:08:BF:32:01:34:CA:70:42:F3:C2:A2:F9:10:B7:0E:83:4E:84:19 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0491 Signing time: Sun 19 Oct 2025 01:54:35 +0000 Manifest this update: Sun 19 Oct 2025 01:54:34 +0000 Manifest next update: Sun 26 Oct 2025 01:54:34 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: cyRKqfveuX/0/L1liMUQWILRNsPdXVKDLIvgzabdi4g=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Oct 19 01:54:34 2025 GMT Not After : Oct 26 01:54:34 2025 GMT Subject: CN=68f444da-90e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:d8:a7:b1:17:51:83:77:b1:5c:0a:a1:b8: e9:42:89:b5:1e:30:af:d7:c4:9f:f4:fd:16:e5:62: 58:9f:83:14:5c:c6:17:64:28:17:cb:db:41:4b:b0: be:2f:9e:15:d1:57:f1:65:53:c7:ba:96:6e:87:76: 90:a9:ec:8f:64:5a:94:b3:71:01:f2:01:e7:aa:36: 8c:01:58:17:0f:c6:92:3f:9a:b0:b2:a8:10:10:62: cb:9b:f9:50:2b:57:c2:c8:b7:a0:12:8d:01:86:40: 7f:90:9b:7b:70:65:7a:9d:ed:85:18:87:27:31:66: 1e:f5:33:5e:b4:98:ba:c5:2f:4e:cb:e2:fb:cb:56: c3:9e:1a:2c:2e:9d:47:64:74:1e:f8:2b:e5:2d:65: 8a:66:78:fc:56:03:ef:cf:9d:70:81:6e:9b:e2:89: 05:d5:f8:de:ba:00:57:d7:95:bd:32:8e:5d:1a:64: 63:30:34:6d:e5:b5:c8:dd:b9:2d:64:2f:da:a4:9e: a3:e4:9e:e4:9c:4d:49:4e:44:81:38:0d:88:1b:6f: fd:62:05:0f:59:9c:a1:f6:35:af:c5:f2:d4:d4:7b: ae:4d:3f:fb:0a:8e:99:09:75:56:e5:80:d3:d1:5b: 40:4d:ab:28:4a:34:e4:ac:e7:64:da:57:bc:95:eb: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:08:BF:32:01:34:CA:70:42:F3:C2:A2:F9:10:B7:0E:83:4E:84:19 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:7d:81:93:bc:6e:7a:2b:db:87:56:f2:f1:48:9a:a1:4d:31: 55:fc:58:66:5f:b5:11:12:d4:66:d0:24:2d:bf:8a:56:16:67: 1c:04:b8:9d:e2:89:71:39:f4:2a:a2:9d:a3:a6:4c:b5:f0:7a: ab:e0:c3:6c:64:02:e2:15:fd:a3:90:ea:60:ea:ec:ac:7e:89: a8:c6:fc:4b:94:e0:e3:09:86:b1:df:9f:e7:6b:fe:6d:bb:5f: 38:11:79:2f:01:c2:ad:e9:f4:21:17:da:a3:7e:d3:08:d4:7b: c5:2a:2d:41:97:a2:a5:c0:e9:ce:41:b5:19:8d:10:64:e1:8c: cc:39:55:7d:01:ab:d7:05:d3:09:c5:9b:00:c9:dd:25:7d:8d: 80:77:61:4a:e1:88:d4:c6:a4:4c:2b:cf:a1:d0:ba:1e:62:35: 78:42:ed:27:9d:89:31:4e:3c:96:68:8d:90:20:b2:b5:45:7d: a5:0d:a3:ae:26:46:a5:fa:96:9d:da:b4:07:39:1e:70:74:69: 37:a2:a8:af:45:e7:e9:a5:08:bf:9e:d9:d8:50:3d:77:c6:23: 78:cf:de:15:0b:4e:13:26:7b:8e:c7:b3:ed:ee:74:1e:ef:52: d4:2a:4d:8b:4d:8f:fc:68:ab:36:5b:36:1d:3b:13:25:bd:df: 07:d0:07:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUxMDE5MDE1NDM0WhcNMjUxMDI2MDE1NDM0WjAYMRYwFAYD VQQDEw02OGY0NDRkYS05MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvvYp7EXUYN3sVwKobjpQom1HjCv18Sf9P0W5WJYn4MUXMYXZCgXy9tBS7C+ L54V0VfxZVPHupZuh3aQqeyPZFqUs3EB8gHnqjaMAVgXD8aSP5qwsqgQEGLLm/lQ K1fCyLegEo0BhkB/kJt7cGV6ne2FGIcnMWYe9TNetJi6xS9Oy+L7y1bDnhosLp1H ZHQe+CvlLWWKZnj8VgPvz51wgW6b4okF1fjeugBX15W9Mo5dGmRjMDRt5bXI3bkt ZC/apJ6j5J7knE1JTkSBOA2IG2/9YgUPWZyh9jWvxfLU1HuuTT/7Co6ZCXVW5YDT 0VtATasoSjTkrOdk2le8leuPDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQIvzIB NMpwQvPCovkQtw6DToQZMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIfYGTvG56K9uHVvLxSJqhTTFV/FhmX7UREtRm0CQtv4pWFmccBLid 4olxOfQqop2jpky18Hqr4MNsZALiFf2jkOpg6uysfomoxvxLlODjCYax35/na/5t u184EXkvAcKt6fQhF9qjftMI1HvFKi1Bl6KlwOnOQbUZjRBk4YzMOVV9AavXBdMJ xZsAyd0lfY2Ad2FK4YjUxqRMK8+h0LoeYjV4Qu0nnYkxTjyWaI2QILK1RX2lDaOu Jkal+pad2rQHOR5wdGk3oqivRefppQi/ntnYUD13xiN4z94VC04TJnuOx7Pt7nQe 71LUKk2LTY/8aKs2WzYdOxMlvd8H0Af0 -----END CERTIFICATE-----Generated at Mon Oct 20 12:32:42 2025 by rpki-client