$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: qYySlXOqAPYwqfUSVCOKaNMVZAnQ0vRoqHUvPqEW2jg= Subject key identifier: B4:67:7E:D8:69:5E:4E:86:9C:05:ED:9C:06:B8:56:58:17:72:79:6F Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 1028 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 101F Signing time: Sat 18 Oct 2025 18:00:59 +0000 Manifest this update: Sat 18 Oct 2025 18:00:59 +0000 Manifest next update: Sat 25 Oct 2025 18:00:59 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: fQrrC0q/Pk1bqw8fdYLJyKcwClHR7K/S79JGzWgXEW0=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4136 (0x1028) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Oct 18 18:00:59 2025 GMT Not After : Oct 25 18:00:59 2025 GMT Subject: CN=68f3d5db-f6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:71:21:77:a0:ec:2e:2e:70:fa:8d:ec:62:d9: 27:50:3c:c2:6e:a0:a1:9b:73:80:03:ce:c7:54:76: e6:37:37:bd:e4:df:00:20:21:51:44:09:31:46:6b: c9:8c:e1:cd:a4:3e:fd:4b:e0:33:89:f7:9c:b6:73: 3a:9e:48:03:a1:79:32:f3:ec:19:b6:d4:7f:66:92: d7:7a:9a:20:36:0b:f5:07:35:95:6f:a2:be:78:60: c6:b7:72:ee:3a:48:00:cb:f2:9c:dc:b0:91:84:d7: d5:c8:51:c5:cc:90:c6:d1:b1:36:6c:42:9f:03:c0: 8a:ee:7b:b1:77:f2:1c:02:db:aa:78:42:91:64:d3: 9b:8e:36:cf:43:05:22:01:17:69:2c:d9:c8:22:ae: 09:f1:92:ad:1e:d8:ef:47:60:79:97:47:c8:35:3b: 7d:e7:e8:58:af:09:36:ad:53:c4:42:2c:f5:e9:85: a5:d9:e1:7b:4d:a9:2b:70:37:f7:6d:7e:26:8f:89: 7f:68:96:28:f1:2d:4e:46:b3:97:7a:cd:f6:4e:57: 30:e5:d6:27:3a:24:b9:f9:45:da:dc:cf:dd:69:40: 3d:94:ed:56:f3:44:46:bc:ff:b4:e9:f3:a7:6c:6c: 9c:4f:2c:56:64:99:c5:5f:d5:2c:be:06:92:b9:6c: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:67:7E:D8:69:5E:4E:86:9C:05:ED:9C:06:B8:56:58:17:72:79:6F X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7a:c8:0d:83:a5:c4:e9:e6:8c:bf:00:06:6e:b3:de:29:25: 1e:d1:f4:cd:92:87:54:b0:c4:35:b2:5d:5a:ee:37:6b:47:6b: f5:fe:05:73:36:85:00:b8:cd:4c:da:d2:c3:f6:4b:e2:5e:0e: de:3c:c3:12:e6:1a:98:a0:45:f6:94:bd:1f:2e:a7:c8:60:36: 9d:51:56:c4:e0:b1:05:11:bc:ac:5a:a6:01:79:de:22:30:5b: f9:88:96:9a:96:96:4e:ca:e2:6c:4f:75:a4:31:ad:37:76:d1: 06:e5:fe:01:1a:c9:b0:e2:ae:69:b4:30:0c:6a:28:f4:3a:b1: c2:4b:3c:23:93:8f:60:11:b6:29:29:98:6c:50:df:6e:b7:2e: 6d:4d:2b:3b:c0:7e:b2:1c:95:f4:22:66:a2:43:8e:bd:d9:3f: 3e:1c:09:95:cd:66:8b:df:cf:ec:09:bd:3b:ab:cc:df:98:2a: cf:41:94:f6:f9:f9:81:49:8e:cd:67:ef:be:09:44:7a:01:f9: 7b:fb:7b:89:fc:c5:fc:53:90:2f:c6:a3:89:8a:c3:6f:7d:9e: 74:ab:ff:14:a3:e2:de:c0:36:e8:cc:f6:90:2e:73:fd:fa:89: 3d:81:a4:e0:32:d9:d7:29:ec:65:df:e7:84:0a:9c:39:ee:6a: 6e:79:1f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUxMDE4MTgwMDU5WhcNMjUxMDI1MTgwMDU5WjAYMRYwFAYD VQQDEw02OGYzZDVkYi1mNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nEhd6DsLi5w+o3sYtknUDzCbqChm3OAA87HVHbmNze95N8AICFRRAkxRmvJ jOHNpD79S+AzifectnM6nkgDoXky8+wZttR/ZpLXepogNgv1BzWVb6K+eGDGt3Lu OkgAy/Kc3LCRhNfVyFHFzJDG0bE2bEKfA8CK7nuxd/IcAtuqeEKRZNObjjbPQwUi ARdpLNnIIq4J8ZKtHtjvR2B5l0fINTt95+hYrwk2rVPEQiz16YWl2eF7TakrcDf3 bX4mj4l/aJYo8S1ORrOXes32Tlcw5dYnOiS5+UXa3M/daUA9lO1W80RGvP+06fOn bGycTyxWZJnFX9UsvgaSuWxH/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRnfthp Xk6GnAXtnAa4VlgXcnlvMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBresgNg6XE6eaMvwAGbrPeKSUe0fTNkodUsMQ1sl1a7jdrR2v1/gVz NoUAuM1M2tLD9kviXg7ePMMS5hqYoEX2lL0fLqfIYDadUVbE4LEFEbysWqYBed4i MFv5iJaalpZOyuJsT3WkMa03dtEG5f4BGsmw4q5ptDAMaij0OrHCSzwjk49gEbYp KZhsUN9uty5tTSs7wH6yHJX0ImaiQ4692T8+HAmVzWaL38/sCb07q8zfmCrPQZT2 +fmBSY7NZ+++CUR6Afl7+3uJ/MX8U5AvxqOJisNvfZ50q/8Uo+LewDbozPaQLnP9 +ok9gaTgMtnXKexl3+eECpw57mpueR/0 -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:01 2025 by rpki-client