$ rpki-client -vvf rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft File: HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft (raw, json) Hash identifier: N971Jp7rJQHc/mI1epOiDzWkx2AeErMtKHdknILU2rg= Subject key identifier: 62:65:0C:C5:B5:80:13:6D:CC:95:0F:78:EF:E1:03:C2:FB:25:8D:75 Authority key identifier: 1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A Certificate issuer: /CN=A91707D0/serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft Manifest number: 78 Signing time: Mon 03 Nov 2025 06:48:50 +0000 Manifest this update: Mon 03 Nov 2025 06:48:50 +0000 Manifest next update: Mon 10 Nov 2025 06:48:50 +0000 Files and hashes: 1: HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl (hash: FLiw1Qio/x8ECg3zH0IXvl2DOaQwPWyLdoAVtdvGpUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91707D0, serialNumber=1D63416C473B0C0912BDAB37102701095FC6C35A Validity Not Before: Nov 3 06:48:50 2025 GMT Not After : Nov 10 06:48:50 2025 GMT Subject: CN=69085052-2615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:ae:19:79:37:1f:4d:6b:56:b2:19:ff:a6: b4:a9:56:c3:23:46:85:1b:8e:b9:2f:17:70:87:24: 57:e9:a3:ca:6f:8b:91:fa:60:c0:3f:dc:46:cb:6c: 32:52:e3:b1:16:85:0c:2a:05:f3:1a:55:4c:ff:2b: e7:91:70:cb:2a:23:74:b7:fe:4a:a8:fc:ef:e5:c1: 84:ef:d9:1c:2c:12:db:3d:ce:66:0d:39:e8:fb:33: 9a:b9:d5:12:94:8d:2b:a1:b8:2b:65:1a:f9:ab:fa: 4d:0c:bb:70:02:40:df:5f:e2:d1:75:3e:18:33:42: d1:61:39:a2:fe:de:5a:ac:45:21:d5:58:24:fb:98: 97:0c:e9:46:d2:27:da:4d:2f:4b:dc:cb:84:4e:19: 37:17:dd:73:e9:87:70:14:61:db:1b:58:df:ca:16: 00:f7:8d:dd:3a:7a:bc:7a:b0:36:7f:44:3b:78:48: ae:38:cb:73:bd:46:01:5d:b0:0d:e1:a7:11:9e:4b: fd:c7:9f:0b:7a:b2:cf:5c:2d:c4:ba:f8:61:c8:0d: 0c:35:4d:0a:4b:1d:54:2e:ce:08:64:68:40:7d:2f: c2:ed:4d:b4:cd:36:38:f1:3b:62:85:00:7c:5a:ee: d0:8c:7a:d2:b6:09:25:5c:cd:4c:75:0d:90:2f:c7: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:65:0C:C5:B5:80:13:6D:CC:95:0F:78:EF:E1:03:C2:FB:25:8D:75 X509v3 Authority Key Identifier: keyid:1D:63:41:6C:47:3B:0C:09:12:BD:AB:37:10:27:01:09:5F:C6:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWNBbEc7DAkSvas3ECcBCV_Gw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91707D0/65B68E96007211F0B363DF5EC4F9AE02/HWNBbEc7DAkSvas3ECcBCV_Gw1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:15:8b:d0:91:27:d0:3e:10:e3:66:f4:ba:18:0f:8a:e6:8c: 63:b6:bf:a2:74:3f:0a:21:df:ec:93:20:32:c1:84:d0:fe:a5: d2:dc:ab:c6:44:d5:ae:63:52:73:0c:73:e4:0e:8f:09:52:9a: 53:e1:25:a6:5a:48:4a:6b:3d:40:e4:bc:35:38:b8:2b:f6:9a: a3:9f:ad:02:da:38:c6:2f:ee:a7:24:9b:bc:70:25:5b:59:76: 71:e5:81:73:29:6c:40:a6:20:d6:09:8e:d3:03:aa:c1:00:2a: 9e:a1:4a:f8:d7:04:0e:4f:bc:73:1c:71:ab:cd:ae:20:66:9e: 48:4c:ee:0d:94:d6:4f:84:d6:b5:de:e7:b0:07:1b:31:1f:3c: 5e:fb:88:c2:26:e6:e8:50:f5:05:27:f6:c4:81:c3:92:45:b0: 25:42:3c:54:85:1d:bd:cd:c1:ae:5e:eb:d8:fd:46:61:92:4f: 0e:ff:2a:d6:65:12:31:24:89:49:d3:ee:27:8b:59:8b:aa:42: 1e:f8:e6:ca:86:c2:fb:62:fc:9d:7f:34:b0:7a:6e:d4:38:ee: e7:2c:85:8f:23:10:e7:c4:98:30:b0:55:f1:4f:36:c6:dc:0b: 03:91:86:d8:91:0d:f2:41:8d:6c:3c:dc:b2:3a:6a:ef:ae:20: 44:54:57:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDdEMDExMC8GA1UEBRMoMUQ2MzQxNkM0NzNCMEMwOTEyQkRBQjM3MTAyNzAxMDk1 RkM2QzM1QTAeFw0yNTExMDMwNjQ4NTBaFw0yNTExMTAwNjQ4NTBaMBgxFjAUBgNV BAMTDTY5MDg1MDUyLTI2MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUTq4ZeTcfTWtWshn/prSpVsMjRoUbjrkvF3CHJFfpo8pvi5H6YMA/3EbLbDJS 47EWhQwqBfMaVUz/K+eRcMsqI3S3/kqo/O/lwYTv2RwsEts9zmYNOej7M5q51RKU jSuhuCtlGvmr+k0Mu3ACQN9f4tF1PhgzQtFhOaL+3lqsRSHVWCT7mJcM6UbSJ9pN L0vcy4ROGTcX3XPph3AUYdsbWN/KFgD3jd06erx6sDZ/RDt4SK44y3O9RgFdsA3h pxGeS/3Hnwt6ss9cLcS6+GHIDQw1TQpLHVQuzghkaEB9L8LtTbTNNjjxO2KFAHxa 7tCMetK2CSVczUx1DZAvx3d/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYmUMxbWA E23MlQ947+EDwvsljXUwHwYDVR0jBBgwFoAUHWNBbEc7DAkSvas3ECcBCV/Gw1ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwN0QwLzY1QjY4RTk2MDA3 MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFrU3ZhczNFQ2NCQ1ZfR3cx by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFdOQmJFYzdEQWtTdmFzM0VDY0JDVl9HdzFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw N0QwLzY1QjY4RTk2MDA3MjExRjBCMzYzREY1RUM0RjlBRTAyL0hXTkJiRWM3REFr U3ZhczNFQ2NCQ1ZfR3cxby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQVi9CRJ9A+EONm9LoYD4rmjGO2v6J0Pwoh3+yTIDLBhND+pdLcq8ZE 1a5jUnMMc+QOjwlSmlPhJaZaSEprPUDkvDU4uCv2mqOfrQLaOMYv7qckm7xwJVtZ dnHlgXMpbECmINYJjtMDqsEAKp6hSvjXBA5PvHMccavNriBmnkhM7g2U1k+E1rXe 57AHGzEfPF77iMIm5uhQ9QUn9sSBw5JFsCVCPFSFHb3Nwa5e69j9RmGSTw7/KtZl EjEkiUnT7ieLWYuqQh745sqGwvti/J1/NLB6btQ47ucshY8jEOfEmDCwVfFPNsbc CwORhtiRDfJBjWw83LI6au+uIERUVzM= -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:54 2025 by rpki-client