$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft File: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft (raw, json) Hash identifier: zzzj4+ohSbNWDveTRkXVHjrtoyL6LwZ2yIeRbYI5FW8= Subject key identifier: F6:BC:CE:58:EF:F4:3C:5C:E6:D5:26:28:D9:91:62:C2:71:C3:F8:4C Authority key identifier: 87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 Certificate issuer: /CN=A91FFA15/serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Certificate serial: 0C16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft Manifest number: 0C0A Signing time: Sat 18 Oct 2025 19:35:19 +0000 Manifest this update: Sat 18 Oct 2025 19:35:18 +0000 Manifest next update: Sat 25 Oct 2025 19:35:18 +0000 Files and hashes: 1: hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl (hash: +wwKtQcPBs8RCrkqvreLvGrUVpiviPrBlHNgFD1iGM0=) 2: E5C9B0541B3E11EBBC57067AC4F9AE02.roa (hash: yqFSXrSreAwWsxKHKKypXy96bJWuk7Ta+8Svfir1RMk=) 3: E6D6D72E1B3E11EBBC57067AC4F9AE02.roa (hash: 8S+9u5NejOEqjzyGww6nqkHBEMgMZJI4JwQwHM3xtzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFA15, serialNumber=87237FF689024D94FDB49EC25C5B120D0BB94297 Validity Not Before: Oct 18 19:35:18 2025 GMT Not After : Oct 25 19:35:18 2025 GMT Subject: CN=68f3ebf7-77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:f9:41:f3:31:43:7e:f6:d3:40:dc:fa:f3: e9:49:02:50:4f:18:36:08:e2:4f:3d:47:64:6a:80: b6:4c:e7:fe:5d:11:8e:b6:ec:03:71:e2:67:fe:d0: b2:2b:d8:e6:72:78:0d:2a:e5:4b:f9:d3:15:46:06: c0:c0:e8:d2:47:a6:5f:dd:b7:9e:4e:7e:10:01:05: dd:1a:63:0e:10:43:f6:21:c7:af:ea:d6:32:5f:28: d8:84:75:17:6d:d2:8e:57:dc:86:52:25:cd:d2:6c: c8:dd:1a:8c:37:30:d2:7c:7a:5d:31:a5:a1:cf:fe: f4:79:58:93:6f:4b:52:18:a6:67:0a:3e:ab:a9:bc: 71:ce:1a:93:02:aa:86:61:32:18:0c:9b:9b:00:66: 87:7d:d4:6d:4b:23:8c:33:f8:93:45:7e:4e:d8:2d: 02:0f:b9:90:01:b7:70:7f:bb:53:7b:6c:52:e9:5d: 74:31:d7:f7:fa:78:1a:8c:d6:71:ef:a3:08:d6:19: c7:19:09:18:79:f0:1b:13:ea:9b:4e:d8:31:d3:46: 67:47:60:31:53:8e:4e:c2:08:ef:02:dc:79:7a:4d: 33:5d:b6:72:d8:e9:80:80:c1:39:16:5e:46:0d:ba: a3:c6:6b:d2:7f:b0:61:09:e5:64:72:89:ea:f7:49: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:CE:58:EF:F4:3C:5C:E6:D5:26:28:D9:91:62:C2:71:C3:F8:4C X509v3 Authority Key Identifier: keyid:87:23:7F:F6:89:02:4D:94:FD:B4:9E:C2:5C:5B:12:0D:0B:B9:42:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA15/701F53D21D8711EAA8169B6CC4F9AE02/hyN_9okCTZT9tJ7CXFsSDQu5Qpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:42:aa:d3:45:62:d5:f2:24:6b:53:76:93:43:22:ea:b8:ee: f8:12:da:95:09:6b:5d:c2:80:56:19:55:76:64:0b:a2:6f:3e: ca:5d:a1:ec:41:2f:33:d2:ee:5f:9c:a8:75:2f:87:e3:a2:31: e2:41:4b:59:c3:ce:17:e7:2b:6d:0f:3d:d7:91:2c:15:4c:8d: d5:c4:ec:06:11:8a:58:4f:ce:f9:2e:a5:20:56:d5:04:59:b0: ac:3e:18:e8:15:95:1e:78:0d:af:a3:3d:ef:e4:5f:17:26:09: 09:86:50:59:1d:27:ba:3d:6e:3d:51:58:a2:c1:73:e8:53:f6: 8f:cd:ee:b8:6f:e0:31:47:eb:e3:dc:53:f2:78:14:b0:85:50: 4a:9f:cf:9e:79:ee:68:24:dc:0c:32:2d:60:ac:13:0b:75:b3: c2:79:11:90:7e:b3:28:48:a5:04:4d:ef:14:bb:1f:aa:9d:04: 4d:0e:2c:0f:9a:4f:28:f0:7b:cb:27:ad:a6:90:b0:d3:00:cd: 1e:0e:b8:2b:9e:6e:ca:6c:bb:98:f6:ed:d1:eb:b8:89:ed:65: 23:c9:15:bd:e8:e5:6b:f8:82:10:da:7b:57:e6:15:5d:8b:e2: 67:dd:42:56:cf:18:6b:75:98:9a:64:5a:36:4d:bd:1f:78:8b: 86:6a:a9:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZBMTUxMTAvBgNVBAUTKDg3MjM3RkY2ODkwMjREOTRGREI0OUVDMjVDNUIxMjBE MEJCOTQyOTcwHhcNMjUxMDE4MTkzNTE4WhcNMjUxMDI1MTkzNTE4WjAYMRYwFAYD VQQDEw02OGYzZWJmNy03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQr5QfMxQ37200Dc+vPpSQJQTxg2COJPPUdkaoC2TOf+XRGOtuwDceJn/tCy K9jmcngNKuVL+dMVRgbAwOjSR6Zf3beeTn4QAQXdGmMOEEP2Icev6tYyXyjYhHUX bdKOV9yGUiXN0mzI3RqMNzDSfHpdMaWhz/70eViTb0tSGKZnCj6rqbxxzhqTAqqG YTIYDJubAGaHfdRtSyOMM/iTRX5O2C0CD7mQAbdwf7tTe2xS6V10Mdf3+ngajNZx 76MI1hnHGQkYefAbE+qbTtgx00ZnR2AxU45OwgjvAtx5ek0zXbZy2OmAgME5Fl5G DbqjxmvSf7BhCeVkconq90mM+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPa8zljv 9Dxc5tUmKNmRYsJxw/hMMB8GA1UdIwQYMBaAFIcjf/aJAk2U/bSewlxbEg0LuUKX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkExNS83MDFGNTNEMjFE ODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1RaVDl0SjdDWEZzU0RRdTVR cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5Tl85b2tDVFpUOXRKN0NYRnNTRFF1NVFwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkExNS83MDFGNTNEMjFEODcxMUVBQTgxNjlCNkNDNEY5QUUwMi9oeU5fOW9rQ1Ra VDl0SjdDWEZzU0RRdTVRcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzQqrTRWLV8iRrU3aTQyLquO74EtqVCWtdwoBWGVV2ZAuibz7KXaHs QS8z0u5fnKh1L4fjojHiQUtZw84X5yttDz3XkSwVTI3VxOwGEYpYT875LqUgVtUE WbCsPhjoFZUeeA2voz3v5F8XJgkJhlBZHSe6PW49UViiwXPoU/aPze64b+AxR+vj 3FPyeBSwhVBKn8+eee5oJNwMMi1grBMLdbPCeRGQfrMoSKUETe8Uux+qnQRNDiwP mk8o8HvLJ62mkLDTAM0eDrgrnm7KbLuY9u3R67iJ7WUjyRW96OVr+IIQ2ntX5hVd i+Jn3UJWzxhrdZiaZFo2Tb0feIuGaql/ -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:37 2025 by rpki-client