$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft File: SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json) Hash identifier: kZt7eNRQXmQfpqutBiQ5hub6bOQq/93CRjYy+TgwmlU= Subject key identifier: 38:1F:6F:11:80:F2:A7:9D:C6:B9:2D:88:BB:B9:D7:58:6C:0D:67:DA Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB Certificate issuer: /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft Manifest number: 0228 Signing time: Wed 29 Oct 2025 01:54:11 +0000 Manifest this update: Wed 29 Oct 2025 01:54:10 +0000 Manifest next update: Wed 05 Nov 2025 01:54:10 +0000 Files and hashes: 1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: qJfmyp+ltyHGPFaPFO1pNx1sYgD955Bjp/BU46gv0NI=) 2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: OxFOcvwColoaxplUUzeWODF1QwobCLhtGfjV874lFQM=) 3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: QHxe/wWqzwNVIDLAM9edUwMUGE9Cp2KpjH57VB1iuhs=) 4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: 0z6iR0/Nf6gfC8rbqmZz5PCa77f0ROs0qKsJTlSdGLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB Validity Not Before: Oct 29 01:54:10 2025 GMT Not After : Nov 5 01:54:10 2025 GMT Subject: CN=690173c2-3fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:d5:51:c3:e4:0e:00:49:48:2e:9e:70:38: 64:8d:2a:ca:cb:23:a1:47:dd:33:07:7b:7a:3f:63: 55:c2:c7:8f:c2:80:49:62:f8:0a:70:6b:db:16:19: 8b:0d:79:5c:c2:e1:64:92:cb:15:a7:60:dc:18:2c: 30:6c:cc:52:6d:63:83:c4:d2:58:58:42:6e:b0:c9: cd:7d:b0:5b:5e:d0:f5:a6:79:82:5a:d1:dc:f4:41: 14:13:36:42:27:78:13:43:7a:2a:31:cd:f4:0e:a3: e9:69:56:e4:ca:e6:5d:14:13:a0:04:10:28:86:b1: 5c:e0:6b:3c:98:c8:df:81:c9:c6:36:3f:1f:32:db: 5f:f8:bc:81:56:a2:4c:d0:4c:69:56:f1:82:79:d5: 5a:b3:e3:f7:cd:24:1a:78:97:15:46:04:fe:e6:4d: 1f:8a:b8:6c:29:3c:60:cf:d3:ce:81:5c:ba:15:68: 9e:d6:fa:9c:b7:38:31:7f:0d:8e:32:e1:a8:77:90: b0:54:56:c7:c5:40:4d:91:ef:27:90:68:dc:7f:df: 39:4a:82:51:c3:6a:57:d6:c2:75:ae:58:5d:e1:01: 09:b5:e0:67:3b:80:76:0b:69:b5:3d:96:52:e0:c3: d8:5d:b4:25:f1:93:bb:c0:91:78:87:32:e0:1c:c7: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:6F:11:80:F2:A7:9D:C6:B9:2D:88:BB:B9:D7:58:6C:0D:67:DA X509v3 Authority Key Identifier: keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e0:4e:74:dd:20:f4:26:9b:b7:ca:df:a0:b1:e4:19:cf:19: d6:4f:24:47:51:e7:5e:f9:aa:b3:9d:7d:56:ab:12:9d:39:04: a8:24:ab:79:83:b9:e1:77:25:71:0e:ec:cb:83:98:cb:ef:4b: bb:00:58:78:7f:40:44:9d:99:39:3f:da:29:6e:6f:02:05:2f: a1:35:a6:b3:bd:55:35:ee:74:a1:57:d7:b3:c4:96:94:fc:7c: 0f:9a:20:3e:f1:bd:77:dd:1e:2d:e6:78:f2:e6:6a:93:5f:b9: 01:42:7e:c5:f7:dd:3a:60:98:39:01:91:33:f1:1b:57:e4:13: b9:c3:14:61:55:b5:71:6d:17:f1:6a:26:60:13:5d:ed:84:21: 6a:00:60:6b:ec:a4:0c:d2:e5:d0:28:d2:b6:ac:2c:02:ea:f3: c2:cc:d3:ec:2f:d0:c8:49:83:1b:c2:ae:43:32:79:fd:4a:44: 12:00:d7:f8:3d:13:0a:75:79:e9:2c:74:28:10:ae:03:53:76: 73:4e:0b:57:f5:5d:f3:28:9a:04:16:cd:08:bf:27:ad:4e:c9: c3:b9:eb:39:6c:04:d2:35:05:0a:69:04:a4:fd:d0:61:ad:e4: 9e:cd:a7:59:cd:f3:ca:fc:ea:11:00:80:82:82:bd:28:84:f0: 4d:e9:1c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw QkIyQzUwREIwHhcNMjUxMDI5MDE1NDEwWhcNMjUxMTA1MDE1NDEwWjAYMRYwFAYD VQQDEw02OTAxNzNjMi0zZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0b/VUcPkDgBJSC6ecDhkjSrKyyOhR90zB3t6P2NVwsePwoBJYvgKcGvbFhmL DXlcwuFkkssVp2DcGCwwbMxSbWODxNJYWEJusMnNfbBbXtD1pnmCWtHc9EEUEzZC J3gTQ3oqMc30DqPpaVbkyuZdFBOgBBAohrFc4Gs8mMjfgcnGNj8fMttf+LyBVqJM 0ExpVvGCedVas+P3zSQaeJcVRgT+5k0firhsKTxgz9POgVy6FWie1vqctzgxfw2O MuGod5CwVFbHxUBNke8nkGjcf985SoJRw2pX1sJ1rlhd4QEJteBnO4B2C2m1PZZS 4MPYXbQl8ZO7wJF4hzLgHMesCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgfbxGA 8qedxrktiLu511hsDWfaMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx dWRhTjVLNURKOFFMc3NVTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC14E503SD0Jpu3yt+gseQZzxnWTyRHUede+aqznX1WqxKdOQSoJKt5 g7nhdyVxDuzLg5jL70u7AFh4f0BEnZk5P9opbm8CBS+hNaazvVU17nShV9ezxJaU /HwPmiA+8b133R4t5njy5mqTX7kBQn7F9906YJg5AZEz8RtX5BO5wxRhVbVxbRfx aiZgE13thCFqAGBr7KQM0uXQKNK2rCwC6vPCzNPsL9DISYMbwq5DMnn9SkQSANf4 PRMKdXnpLHQoEK4DU3ZzTgtX9V3zKJoEFs0IvyetTsnDues5bATSNQUKaQSk/dBh reSezadZzfPK/OoRAICCgr0ohPBN6RyU -----END CERTIFICATE-----Generated at Thu Oct 30 20:04:49 2025 by rpki-client