$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft File: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json) Hash identifier: SWg2d2ao898X8jsi9hR1lNtgpMUMo+usXE/Sv+xh5IU= Subject key identifier: 7B:8A:D8:24:D4:5D:79:67:65:1D:D2:C7:E1:73:10:C5:3A:BC:75:CC Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 Certificate issuer: /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft Manifest number: 92 Signing time: Sun 19 Oct 2025 09:42:35 +0000 Manifest this update: Sun 19 Oct 2025 09:42:35 +0000 Manifest next update: Sun 26 Oct 2025 09:42:35 +0000 Files and hashes: 1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: A7VjxS4JRRjIAhPJ8n9daJYYoo1u0onRhADScHPjrPA=) 2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: Ih+3aaDaOz/d8dCkRSwBGnuzOxqfvTbU/QJJ8s8nf54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7 Validity Not Before: Oct 19 09:42:35 2025 GMT Not After : Oct 26 09:42:35 2025 GMT Subject: CN=68f4b28b-d290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:c9:23:95:87:a3:32:6f:d1:c4:95:bf:37: 2b:b8:a0:7d:77:06:af:56:19:05:37:7d:62:60:b2: b1:d1:04:7e:67:3b:cd:e4:25:9d:2a:8f:15:60:2a: ed:70:99:a5:da:c0:d9:0b:4e:be:be:9c:c4:1b:03: 71:36:eb:29:53:9e:db:f3:65:c4:08:54:fb:e0:d8: 7c:3d:9d:bc:a5:6b:51:2a:b7:c8:a4:6a:a4:f7:f3: e9:6f:2c:7d:2f:d1:e4:08:29:d6:50:f7:82:c2:9a: 1e:9e:34:5f:c0:16:28:14:9b:3e:44:22:80:08:cb: 96:89:03:0c:ec:5c:83:22:c1:bd:2b:b1:ef:72:e1: b1:86:bd:92:6d:bb:b8:02:1d:2f:f3:59:0c:2d:aa: 49:14:5c:14:7b:8d:08:37:02:dc:53:80:e4:79:41: b3:6d:a0:7f:bd:dd:7d:a7:27:8c:51:a5:ca:52:25: da:51:e4:ee:e0:b1:ea:8c:ea:35:b4:77:13:1d:d3: 9d:ec:73:4f:50:67:a7:c4:1d:29:ca:e7:cf:75:d3: 24:93:3f:64:ab:5c:b0:1f:c1:42:67:8b:dd:e2:c8: bc:64:1a:bb:22:15:d0:18:4e:6c:6d:9c:76:e0:08: 27:05:50:bd:6d:01:b7:ee:32:b8:4a:97:21:13:11: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8A:D8:24:D4:5D:79:67:65:1D:D2:C7:E1:73:10:C5:3A:BC:75:CC X509v3 Authority Key Identifier: keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:85:d6:da:d4:eb:c6:7f:5c:fe:55:e5:c7:e1:30:10:80: 41:9d:54:f3:6c:39:ff:f2:6e:3e:5c:77:32:84:9b:c2:3a:fa: 3b:c9:dd:ff:76:fb:26:d3:ae:52:a3:aa:a5:eb:97:5b:4e:2c: a2:9d:65:7e:ec:2c:8c:b7:9d:6a:ee:67:d5:21:b0:ab:73:44: 09:c0:81:2b:5e:1d:21:65:91:5f:cb:f8:cb:95:ef:49:27:72: 5a:3d:c8:73:c8:3b:e5:38:59:68:63:71:6c:d3:eb:df:64:c1: 50:b2:25:f4:b9:49:91:9d:2d:e0:f5:41:30:f6:48:3e:d1:c2: 26:55:a8:39:11:64:cd:cd:5e:e5:44:07:bc:74:bf:79:fd:e6: c5:6e:46:1b:69:0e:1b:35:bf:17:2c:34:56:ac:f6:ff:4e:3b: d6:bd:c8:68:5c:4e:7b:69:73:82:d4:1e:5c:50:f2:8e:28:90: 16:96:8a:1b:4e:42:03:ae:a1:d4:c6:58:e0:83:9f:0e:4b:9c: 0e:40:20:82:74:7f:b9:59:84:5f:d3:ee:70:77:1a:71:d8:0c: 67:37:03:7c:d4:6e:ec:d0:ea:8f:75:9b:a3:23:f3:ba:e3:72: a4:30:8f:c5:67:a4:22:3b:1f:70:aa:72:76:c1:2c:47:05:66: be:ed:da:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVCQ0MxMTAvBgNVBAUTKDFFNDhFRkU1M0U2MkVEMjA0QkE3QTY5NDM4NENCQUM5 MjQ2Nzk0QTcwHhcNMjUxMDE5MDk0MjM1WhcNMjUxMDI2MDk0MjM1WjAYMRYwFAYD VQQDEw02OGY0YjI4Yi1kMjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsALJI5WHozJv0cSVvzcruKB9dwavVhkFN31iYLKx0QR+ZzvN5CWdKo8VYCrt cJml2sDZC06+vpzEGwNxNuspU57b82XECFT74Nh8PZ28pWtRKrfIpGqk9/Ppbyx9 L9HkCCnWUPeCwpoenjRfwBYoFJs+RCKACMuWiQMM7FyDIsG9K7HvcuGxhr2Sbbu4 Ah0v81kMLapJFFwUe40INwLcU4DkeUGzbaB/vd19pyeMUaXKUiXaUeTu4LHqjOo1 tHcTHdOd7HNPUGenxB0pyufPddMkkz9kq1ywH8FCZ4vd4si8ZBq7IhXQGE5sbZx2 4AgnBVC9bQG37jK4SpchExHJPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuK2CTU XXlnZR3Sx+FzEMU6vHXMMB8GA1UdIwQYMBaAFB5I7+U+Yu0gS6emlDhMuskkZ5Sn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUJDQy9COTU4OEJBQ0NF NzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdTQkxwNmFVT0V5NnlTUm5s S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hranY1VDVpN1NCTHA2YVVPRXk2eVNSbmxLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUJDQy9COTU4OEJBQ0NFNzgxMUVGODBFRjRENDRDNEY5QUUwMi9Ia2p2NVQ1aTdT QkxwNmFVT0V5NnlTUm5sS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQIXW2tTrxn9c/lXlx+EwEIBBnVTzbDn/8m4+XHcyhJvCOvo7yd3/ dvsm065So6ql65dbTiyinWV+7CyMt51q7mfVIbCrc0QJwIErXh0hZZFfy/jLle9J J3JaPchzyDvlOFloY3Fs0+vfZMFQsiX0uUmRnS3g9UEw9kg+0cImVag5EWTNzV7l RAe8dL95/ebFbkYbaQ4bNb8XLDRWrPb/TjvWvchoXE57aXOC1B5cUPKOKJAWloob TkIDrqHUxljgg58OS5wOQCCCdH+5WYRf0+5wdxpx2AxnNwN81G7s0OqPdZujI/O6 43KkMI/FZ6QiOx9wqnJ2wSxHBWa+7dp9 -----END CERTIFICATE-----Generated at Tue Oct 21 03:04:35 2025 by rpki-client