$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: 4LUHvbBGPaIvQDOle84KXxDz8LEkB3OULRYdApJnAw4= Subject key identifier: 48:64:4A:E0:B7:23:66:BE:E0:B4:8A:8E:4B:1A:DD:D8:C7:F7:C7:99 Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: E7 Signing time: Mon 27 Oct 2025 07:34:57 +0000 Manifest this update: Mon 27 Oct 2025 07:34:57 +0000 Manifest next update: Mon 03 Nov 2025 07:34:57 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: s2TN4dd5lel/i7PxNC+BvCSMSjCUeITni63CbNd49mM=) 2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Oct 27 07:34:57 2025 GMT Not After : Nov 3 07:34:57 2025 GMT Subject: CN=68ff20a1-58ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:51:a0:42:73:f3:b0:f0:83:63:ed:58:60: 06:67:93:69:9b:29:f4:80:c2:10:c3:e0:8c:11:7a: 9b:1f:fa:d1:91:b3:4a:90:87:0a:d4:8b:27:43:5b: 4f:d8:c8:25:50:41:fd:14:54:d3:58:c9:d1:56:b8: 0f:a7:40:9e:da:85:0c:a9:79:9e:1e:42:52:4a:91: 12:5b:9b:e5:f9:92:10:f8:2c:be:34:c0:e9:4b:53: e3:14:5d:bd:ba:dd:56:7d:6e:d6:0d:ea:c0:81:c1: bc:8c:bd:f4:62:14:b1:0a:60:7e:39:34:85:05:59: b2:35:fe:d3:ad:3e:83:4b:37:98:ca:c8:53:2f:eb: 5c:0a:af:d4:67:14:2d:44:58:2b:18:e9:84:4a:e8: 56:5e:cd:72:c8:82:87:de:db:04:87:8a:5b:19:2e: ed:53:be:b0:ee:54:4b:db:9e:b0:c9:de:c0:14:c6: f8:f0:f7:95:c8:d1:39:ab:ba:eb:7e:34:02:4e:2d: 92:da:f0:c6:44:ec:f6:c6:4e:7e:60:e6:cd:f0:e8: 7d:c8:c7:2e:74:77:54:13:53:5a:e4:47:e1:24:69: 14:6b:ee:90:75:f1:db:b0:49:73:30:dd:ac:35:61: 31:91:76:10:39:fd:21:2e:ea:5a:98:c0:eb:0f:fb: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:64:4A:E0:B7:23:66:BE:E0:B4:8A:8E:4B:1A:DD:D8:C7:F7:C7:99 X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:1e:3a:89:86:ab:d5:e5:7e:39:fb:17:57:c4:c9:f5:ce:b2: d9:19:a8:6b:ab:0f:af:03:42:5b:90:01:2f:af:7e:74:4e:1f: ca:b9:fa:50:87:49:a8:8e:cd:af:93:fb:25:33:6b:1e:dd:b5: 8c:b6:11:5c:e7:03:9c:fa:48:6a:09:9a:f5:42:e6:7e:64:51: 00:de:51:51:ae:d6:86:cd:f6:1a:44:50:8e:54:ce:ac:fc:58: 14:0b:02:a0:61:09:2c:c7:f4:f2:be:1b:7f:5e:77:2b:37:96: 77:a4:6b:81:32:7b:3b:5a:bc:49:19:0f:a2:78:19:f5:e8:9c: fd:c2:f4:4d:ad:f0:f7:36:45:ed:39:29:67:8a:d5:ab:1d:fb: 08:d9:48:d4:7b:ec:5e:40:9a:6e:8f:85:10:ef:82:a8:01:2d: 54:31:e2:8d:45:39:10:cc:65:1e:e3:d3:93:3d:de:b5:89:4b: 55:8b:5a:86:7d:41:53:cb:7a:8e:62:ea:2b:dc:23:f1:76:51: 3e:2a:fc:d4:1e:41:b5:af:10:3a:2f:6d:28:66:f6:47:12:3a: f3:5f:37:3d:95:25:6b:cc:94:f9:41:0c:a0:63:83:20:a5:47: b6:e0:a3:dc:81:d8:58:5d:66:46:34:98:8b:d1:4e:dc:ac:98: a6:19:cd:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUxMDI3MDczNDU3WhcNMjUxMTAzMDczNDU3WjAYMRYwFAYD VQQDEw02OGZmMjBhMS01OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9dRoEJz87Dwg2PtWGAGZ5Npmyn0gMIQw+CMEXqbH/rRkbNKkIcK1IsnQ1tP 2MglUEH9FFTTWMnRVrgPp0Ce2oUMqXmeHkJSSpESW5vl+ZIQ+Cy+NMDpS1PjFF29 ut1WfW7WDerAgcG8jL30YhSxCmB+OTSFBVmyNf7TrT6DSzeYyshTL+tcCq/UZxQt RFgrGOmESuhWXs1yyIKH3tsEh4pbGS7tU76w7lRL256wyd7AFMb48PeVyNE5q7rr fjQCTi2S2vDGROz2xk5+YObN8Oh9yMcudHdUE1Na5EfhJGkUa+6QdfHbsElzMN2s NWExkXYQOf0hLupamMDrD/ua8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhkSuC3 I2a+4LSKjksa3djH98eZMB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGHjqJhqvV5X45+xdXxMn1zrLZGahrqw+vA0JbkAEvr350Th/KufpQ h0mojs2vk/slM2se3bWMthFc5wOc+khqCZr1QuZ+ZFEA3lFRrtaGzfYaRFCOVM6s /FgUCwKgYQksx/Tyvht/XncrN5Z3pGuBMns7WrxJGQ+ieBn16Jz9wvRNrfD3NkXt OSlnitWrHfsI2UjUe+xeQJpuj4UQ74KoAS1UMeKNRTkQzGUe49OTPd61iUtVi1qG fUFTy3qOYuor3CPxdlE+KvzUHkG1rxA6L20oZvZHEjrzXzc9lSVrzJT5QQygY4Mg pUe24KPcgdhYXWZGNJiL0U7crJimGc3/ -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:12 2025 by rpki-client