$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft File: HfNLnj96ONdYmO1LBfntTEAEzrw.mft (raw, json) Hash identifier: lsTF3aG9C12rxwdQetkN3ObK0so8rl/fcdXX4G+woQA= Subject key identifier: 2D:3E:F1:B4:78:72:3F:CC:65:30:43:52:A9:EC:AC:CC:88:B9:3B:A1 Authority key identifier: 1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC Certificate issuer: /CN=A91F6227/serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Certificate serial: 0A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft Manifest number: 0A37 Signing time: Sat 18 Oct 2025 20:44:01 +0000 Manifest this update: Sat 18 Oct 2025 20:44:00 +0000 Manifest next update: Sat 25 Oct 2025 20:44:00 +0000 Files and hashes: 1: HfNLnj96ONdYmO1LBfntTEAEzrw.crl (hash: aZklfdAloQvOeRT+3s00rnwJNsJ29L8e8E96S5diydI=) 2: A23D5DE87A6911EA930EB439C4F9AE02.roa (hash: 0c8vFwsGm0y9J7tirCRPVhjPNwdGg4DZRn3e0fuJjls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6227, serialNumber=1DF34B9E3F7A38D75898ED4B05F9ED4C4004CEBC Validity Not Before: Oct 18 20:44:00 2025 GMT Not After : Oct 25 20:44:00 2025 GMT Subject: CN=68f3fc11-d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:33:95:e7:82:c1:90:87:1f:24:c2:3b:9a: aa:29:1a:ee:80:5c:18:d2:f3:10:24:13:8c:30:e7: 3c:c8:4f:80:27:a4:75:58:51:4c:a1:d4:c7:3b:3f: 3e:bc:ce:34:24:65:7a:20:d6:52:73:fc:d5:7a:db: f7:f7:2d:87:d5:60:87:b7:61:f9:cc:ef:4b:dd:a4: cf:82:83:e9:21:b8:a9:28:5a:e1:fc:db:21:8c:5f: bd:75:26:c6:1e:de:da:9d:b5:b0:9d:8e:cd:65:9d: 7d:83:7d:2a:58:65:d5:e2:c9:89:b4:31:d6:90:d5: fa:fb:65:21:3d:64:a7:cd:64:f9:4d:1a:ad:98:ab: 20:f8:10:7f:c8:0b:a7:b2:d3:ee:fa:b2:8b:19:23: 2c:a7:32:b9:71:e5:37:f3:b3:c1:8f:c8:99:ee:8e: ee:8a:8e:6d:27:d0:85:7d:c6:97:af:15:d1:6b:0d: 6d:f3:65:0f:92:1b:00:f9:1e:05:94:b7:73:a4:4a: a7:56:a1:ae:b0:81:37:0a:e6:b7:df:9d:38:6f:e9: d7:bd:cf:79:a8:44:84:71:66:fa:60:2f:b7:47:6b: 29:17:bc:76:44:6b:c7:9b:06:4a:5d:d5:89:d7:62: 8d:8a:92:31:91:13:f2:9f:54:c1:b5:86:cf:8a:a8: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:F1:B4:78:72:3F:CC:65:30:43:52:A9:EC:AC:CC:88:B9:3B:A1 X509v3 Authority Key Identifier: keyid:1D:F3:4B:9E:3F:7A:38:D7:58:98:ED:4B:05:F9:ED:4C:40:04:CE:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfNLnj96ONdYmO1LBfntTEAEzrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6227/0D728A0A7A3F11EA8E3D8035C4F9AE02/HfNLnj96ONdYmO1LBfntTEAEzrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fc:90:ff:07:94:52:65:13:73:78:af:4a:dc:51:80:0b:55: 99:3c:13:03:aa:5d:a7:8a:e3:c3:c4:d8:2b:b0:e6:a1:a4:4c: 29:c8:db:8a:b3:cf:b0:3e:58:4e:c2:46:8f:62:33:05:1a:04: c2:41:f7:38:26:dc:fd:f4:7f:2c:1a:44:1b:31:98:79:9e:c1: 47:a8:68:5a:8c:19:33:5c:97:55:26:54:9a:cc:d9:3a:fa:4b: 20:44:5f:12:46:8a:95:04:92:54:f9:0c:c6:17:4b:c2:f6:de: 1d:d7:52:f1:0a:a7:a5:9f:bd:70:f7:c7:8a:ea:eb:7d:29:dd: c5:52:28:98:69:83:c3:f7:ba:37:99:03:b6:56:7f:45:fb:7c: 58:2c:30:fb:c4:07:86:73:54:3f:e9:4a:48:f6:75:87:ed:14: 91:d3:57:6e:f7:ff:a9:d8:a9:4a:9b:32:6e:c5:59:11:e4:0f: f3:df:89:7f:8f:88:c0:c7:16:10:ba:26:87:b5:e0:b6:fb:2c: 5d:5b:c7:61:7c:a3:30:45:c9:f7:29:47:3e:7e:d1:da:dd:be: d4:7e:17:76:20:11:3e:e9:41:40:c9:99:8d:3c:ca:43:e0:9b: 15:a1:b8:e7:6c:a4:94:0a:75:3a:6e:fb:77:a0:a9:eb:b5:ba: 2c:bb:31:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYyMjcxMTAvBgNVBAUTKDFERjM0QjlFM0Y3QTM4RDc1ODk4RUQ0QjA1RjlFRDRD NDAwNENFQkMwHhcNMjUxMDE4MjA0NDAwWhcNMjUxMDI1MjA0NDAwWjAYMRYwFAYD VQQDEw02OGYzZmMxMS1kNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4gzleeCwZCHHyTCO5qqKRrugFwY0vMQJBOMMOc8yE+AJ6R1WFFModTHOz8+ vM40JGV6INZSc/zVetv39y2H1WCHt2H5zO9L3aTPgoPpIbipKFrh/NshjF+9dSbG Ht7anbWwnY7NZZ19g30qWGXV4smJtDHWkNX6+2UhPWSnzWT5TRqtmKsg+BB/yAun stPu+rKLGSMspzK5ceU387PBj8iZ7o7uio5tJ9CFfcaXrxXRaw1t82UPkhsA+R4F lLdzpEqnVqGusIE3Cua33504b+nXvc95qESEcWb6YC+3R2spF7x2RGvHmwZKXdWJ 12KNipIxkRPyn1TBtYbPiqi8zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0+8bR4 cj/MZTBDUqnsrMyIuTuhMB8GA1UdIwQYMBaAFB3zS54/ejjXWJjtSwX57UxABM68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjIyNy8wRDcyOEEwQTdB M0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9OZFltTzFMQmZudFRFQUV6 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmTkxuajk2T05kWW1PMUxCZm50VEVBRXpydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjIyNy8wRDcyOEEwQTdBM0YxMUVBOEUzRDgwMzVDNEY5QUUwMi9IZk5Mbmo5Nk9O ZFltTzFMQmZudFRFQUV6cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/JD/B5RSZRNzeK9K3FGAC1WZPBMDql2niuPDxNgrsOahpEwpyNuK s8+wPlhOwkaPYjMFGgTCQfc4Jtz99H8sGkQbMZh5nsFHqGhajBkzXJdVJlSazNk6 +ksgRF8SRoqVBJJU+QzGF0vC9t4d11LxCqeln71w98eK6ut9Kd3FUiiYaYPD97o3 mQO2Vn9F+3xYLDD7xAeGc1Q/6UpI9nWH7RSR01du9/+p2KlKmzJuxVkR5A/z34l/ j4jAxxYQuiaHteC2+yxdW8dhfKMwRcn3KUc+ftHa3b7Ufhd2IBE+6UFAyZmNPMpD 4JsVobjnbKSUCnU6bvt3oKnrtbosuzEO -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:07 2025 by rpki-client