$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: 3oHvnBspOiJhC6qsdR3WgSacuncMf7Ac933UFSS3dEk= Subject key identifier: 8C:5B:68:4F:3A:C2:E4:64:B8:95:82:52:D5:D4:7A:85:4F:2B:85:F3 Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 01EB Signing time: Thu 23 Oct 2025 04:08:31 +0000 Manifest this update: Thu 23 Oct 2025 04:08:30 +0000 Manifest next update: Thu 30 Oct 2025 04:08:30 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: y1vEaHL47soxxRRJZglOzKCOloDTwlBfxCpZ6N/bA+k=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: JeP8VoOcpiutGG7hGzbyaQvIgNDCVBOYu3S0WeuVu3E=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: UaaSyqLY1EU1feMuBNb93HrMgg8A6BJd78TyE8+TiZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Oct 23 04:08:30 2025 GMT Not After : Oct 30 04:08:30 2025 GMT Subject: CN=68f9aa3e-5690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:67:6b:08:c6:ca:ce:de:d3:00:83:af:aa: ac:b8:d0:58:43:26:ff:22:81:2b:74:b6:1a:60:01: c4:ae:81:3a:ec:9c:b7:5e:93:e3:62:34:9c:48:d1: b6:49:56:61:8e:06:48:d1:be:3e:6a:42:a3:3a:14: 74:40:53:f3:5f:d6:4b:36:44:76:4a:3d:c1:19:fd: 16:ae:0d:cf:31:69:2d:63:cf:cb:a4:53:38:3c:37: 5e:d4:86:22:ec:55:04:08:a5:e5:25:ff:ec:7c:0e: 28:20:43:c7:af:43:43:f2:ce:9c:05:bc:95:48:41: 88:0e:cb:c6:1d:f4:5e:48:67:4f:88:c8:77:08:b4: 3a:d8:f8:8c:19:a2:4f:d6:77:62:fc:df:47:52:18: 7b:39:d4:0f:8c:12:b6:29:a1:3b:f6:a5:e6:e5:2c: fb:e5:22:42:40:c1:c0:47:d9:92:56:5b:22:73:82: a1:2a:78:ab:0d:cf:de:12:97:e1:bb:7d:57:77:04: 6b:cc:46:35:5d:49:4c:54:9b:3a:b8:f7:43:ae:f2: 99:8b:76:ba:83:05:9f:cc:17:a7:fd:69:20:83:f9: 33:54:d0:78:55:47:e9:52:59:e5:f4:09:ff:9a:81: 89:35:50:28:83:26:b8:1d:43:24:ec:5c:41:54:ab: f6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5B:68:4F:3A:C2:E4:64:B8:95:82:52:D5:D4:7A:85:4F:2B:85:F3 X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f9:d3:be:35:5a:dc:14:9b:38:32:8c:0a:f5:fc:ff:bf:41: 95:fc:d6:aa:b7:34:d3:cd:12:19:ac:99:14:37:6e:3b:40:b5: 1a:27:a0:1f:a2:bb:24:44:84:8a:4a:7b:a0:5f:e9:20:2e:51: 83:c6:cb:9a:9b:42:4b:e2:1e:91:e5:9c:64:a6:9e:2e:2f:53: 8a:37:98:35:10:5e:5a:de:6c:47:f4:2a:3f:2f:da:a1:e4:b6: e0:d8:16:3c:17:0e:09:c7:09:f6:2d:6c:6c:f3:3f:46:88:ca: 8e:d1:17:ed:98:b3:cc:97:a6:93:6b:e4:37:e1:3e:b3:b8:75: 5a:be:e4:17:74:e7:be:76:c1:92:6d:f1:35:d1:be:eb:f5:c4: 9b:87:69:e7:6f:4a:25:c0:a7:2a:37:b3:e0:49:dd:ec:c5:96: 79:4c:60:8f:9b:51:32:eb:a3:48:1f:da:53:7f:ad:d3:70:46: 2c:1a:93:d8:8d:0e:d4:a0:62:b5:a6:a1:72:62:a8:62:2c:07: ed:64:d8:44:2a:89:db:97:10:ca:78:0e:ea:0c:b1:f3:e0:a7: 43:3e:15:46:d2:13:a6:6d:11:42:01:e0:82:29:47:12:9b:17: 50:f4:df:10:43:bd:7b:39:7f:58:67:12:df:8a:22:23:b4:3c: fe:29:93:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjUxMDIzMDQwODMwWhcNMjUxMDMwMDQwODMwWjAYMRYwFAYD VQQDEw02OGY5YWEzZS01NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ttnawjGys7e0wCDr6qsuNBYQyb/IoErdLYaYAHEroE67Jy3XpPjYjScSNG2 SVZhjgZI0b4+akKjOhR0QFPzX9ZLNkR2Sj3BGf0Wrg3PMWktY8/LpFM4PDde1IYi 7FUECKXlJf/sfA4oIEPHr0ND8s6cBbyVSEGIDsvGHfReSGdPiMh3CLQ62PiMGaJP 1ndi/N9HUhh7OdQPjBK2KaE79qXm5Sz75SJCQMHAR9mSVlsic4KhKnirDc/eEpfh u31XdwRrzEY1XUlMVJs6uPdDrvKZi3a6gwWfzBen/Wkgg/kzVNB4VUfpUlnl9An/ moGJNVAogya4HUMk7FxBVKv2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxbaE86 wuRkuJWCUtXUeoVPK4XzMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+dO+NVrcFJs4MowK9fz/v0GV/NaqtzTTzRIZrJkUN247QLUaJ6Af orskRISKSnugX+kgLlGDxsuam0JL4h6R5Zxkpp4uL1OKN5g1EF5a3mxH9Co/L9qh 5Lbg2BY8Fw4Jxwn2LWxs8z9GiMqO0RftmLPMl6aTa+Q34T6zuHVavuQXdOe+dsGS bfE10b7r9cSbh2nnb0olwKcqN7PgSd3sxZZ5TGCPm1Ey66NIH9pTf63TcEYsGpPY jQ7UoGK1pqFyYqhiLAftZNhEKonblxDKeA7qDLHz4KdDPhVG0hOmbRFCAeCCKUcS mxdQ9N8QQ717OX9YZxLfiiIjtDz+KZOj -----END CERTIFICATE-----Generated at Thu Oct 23 06:44:33 2025 by rpki-client