$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft File: hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft (raw, json) Hash identifier: pXh4SdFzpYlU7BA+bKmbOKNIEZMXvN4oR7hblXFXwsM= Subject key identifier: 56:7F:B4:8E:64:7C:C8:60:2B:66:C0:12:48:24:B3:5B:31:9D:6D:51 Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft Manifest number: 0116 Signing time: Tue 07 Oct 2025 05:09:32 +0000 Manifest this update: Tue 07 Oct 2025 05:09:31 +0000 Manifest next update: Tue 14 Oct 2025 05:09:31 +0000 Files and hashes: 1: hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl (hash: 7Xy83n51U08wXNVdpmpZ7O8AzYQf0AJbUKG0lbnapJo=) 2: 61A59876012A11EFB75C350FC4F9AE02.roa (hash: WAA42IzaA5d5k/IY8QrF44XXEAbChLYtWjBVuWwrVBk=) 3: 612992C6012A11EFB75C350FC4F9AE02.roa (hash: FmAu1+agMeZ0VUhV+3w3+uo72UBKyPI2du/6wqmQecc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 05:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Oct 7 05:09:31 2025 GMT Not After : Oct 14 05:09:31 2025 GMT Subject: CN=68e4a08b-66b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:4d:cb:05:40:1c:40:88:98:00:54:0d:b3: d8:77:08:c5:9c:ef:41:85:a2:6b:92:7e:6b:cf:76: ca:be:25:34:41:70:95:99:3f:70:10:81:7f:bf:72: 47:8c:23:70:0f:37:a7:31:d5:bc:f5:4e:5e:7f:ae: 7a:7f:cf:de:e2:cf:1b:b1:31:81:ba:eb:74:38:6a: b2:de:dc:61:8a:53:cc:67:e5:78:f1:6c:d2:59:21: c4:52:c6:53:a1:08:d7:e1:30:04:15:05:a7:57:ad: 45:bb:83:66:06:e5:8a:07:d0:b5:83:b6:64:a1:57: 23:6d:51:bc:f0:f6:bd:39:bf:d3:ac:64:81:c7:5b: fd:c5:02:9c:55:cf:df:e9:31:b6:82:ba:e3:e7:c8: 0f:94:ac:da:10:8c:eb:4b:e1:b5:d3:05:ac:55:02: 97:03:b8:7d:b2:8d:b3:b2:c8:b7:f4:42:54:c0:39: 93:70:73:16:4c:15:fa:af:0d:fd:b9:49:00:60:3e: 71:ed:b9:73:7a:00:27:4c:f9:ff:44:ab:29:93:1d: 80:c4:11:68:a0:e7:57:6e:83:25:16:0c:aa:a7:f4: 3c:d1:12:b1:c2:1d:30:31:4d:60:0e:62:7b:9c:73: 8b:e4:c8:0b:63:e4:77:e6:05:23:2f:56:e3:3e:ce: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7F:B4:8E:64:7C:C8:60:2B:66:C0:12:48:24:B3:5B:31:9D:6D:51 X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:8d:e2:b7:42:8e:de:5e:4f:e2:08:2a:92:e3:24:e5:ef:96: 8a:dc:33:f0:6a:fb:73:ba:08:c1:71:ad:af:11:3d:91:2a:77: 7e:fc:9a:50:6a:7c:d2:bd:c9:96:c5:67:3f:de:9f:03:49:02: 02:08:98:32:67:f7:fe:b4:87:ed:13:ee:91:1d:9b:c2:49:ea: 78:3d:9f:b0:81:17:b0:93:13:33:e9:4a:6f:9d:5c:9d:3b:2c: a4:65:0a:8f:f4:7e:bb:60:b2:02:c0:d6:31:08:b1:5d:df:cb: 53:ff:67:fe:af:ff:9a:82:b2:cb:a8:9e:be:80:ec:4f:52:4e: 7b:12:80:09:4a:b5:d6:e2:3b:f5:75:73:8a:6c:57:67:fc:72: 7f:6e:e2:cc:f2:be:ed:69:1c:dd:29:5c:ea:cb:84:db:38:13: 98:68:8f:61:40:c6:cb:92:8a:2d:bc:2d:68:81:3d:e9:e0:f1: c5:4e:c8:71:d0:b5:c7:c5:ce:73:88:17:cb:ea:1c:61:bb:a4: 65:6d:3b:60:1b:52:20:1f:a5:a4:80:63:02:44:ab:ab:1a:a1: 9b:69:d5:0c:7c:8d:a9:ee:2e:e6:58:cb:13:8f:cf:21:8f:eb: 93:c2:f4:83:ec:63:a8:69:74:a0:bf:d1:0c:fe:6c:34:7b:b5: a1:3e:8c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjUxMDA3MDUwOTMxWhcNMjUxMDE0MDUwOTMxWjAYMRYwFAYD VQQDEw02OGU0YTA4Yi02NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC9NywVAHECImABUDbPYdwjFnO9BhaJrkn5rz3bKviU0QXCVmT9wEIF/v3JH jCNwDzenMdW89U5ef656f8/e4s8bsTGBuut0OGqy3txhilPMZ+V48WzSWSHEUsZT oQjX4TAEFQWnV61Fu4NmBuWKB9C1g7ZkoVcjbVG88Pa9Ob/TrGSBx1v9xQKcVc/f 6TG2grrj58gPlKzaEIzrS+G10wWsVQKXA7h9so2zssi39EJUwDmTcHMWTBX6rw39 uUkAYD5x7blzegAnTPn/RKspkx2AxBFooOdXboMlFgyqp/Q80RKxwh0wMU1gDmJ7 nHOL5MgLY+R35gUjL1bjPs6qxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ/tI5k fMhgK2bAEkgks1sxnW1RMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODk0Ri8wQUY0NUUzNjAxMkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFK Z05sLVFiczVIOHlZVVB5M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2jeK3Qo7eXk/iCCqS4yTl75aK3DPwavtzugjBca2vET2RKnd+/JpQ anzSvcmWxWc/3p8DSQICCJgyZ/f+tIftE+6RHZvCSep4PZ+wgRewkxMz6UpvnVyd OyykZQqP9H67YLICwNYxCLFd38tT/2f+r/+agrLLqJ6+gOxPUk57EoAJSrXW4jv1 dXOKbFdn/HJ/buLM8r7taRzdKVzqy4TbOBOYaI9hQMbLkootvC1ogT3p4PHFTshx 0LXHxc5ziBfL6hxhu6RlbTtgG1IgH6WkgGMCRKurGqGbadUMfI2p7i7mWMsTj88h j+uTwvSD7GOoaXSgv9EM/mw0e7WhPozV -----END CERTIFICATE-----Generated at Thu Oct 9 01:27:02 2025 by rpki-client