$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: U481Dbz8L6B1nn0ihyDdTqQgf0b6ulJYDYs8aAcyvWY= Subject key identifier: 45:DD:64:C6:09:36:54:3C:17:9C:C6:8D:3B:47:77:F0:0F:AE:8C:E8 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 9C Signing time: Wed 05 Nov 2025 06:31:28 +0000 Manifest this update: Wed 05 Nov 2025 06:31:27 +0000 Manifest next update: Wed 12 Nov 2025 06:31:27 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: PVLd1kQ/3vLeKiwDm3X9dP9Q42yAjL7LUE/m7pl6nz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Nov 5 06:31:27 2025 GMT Not After : Nov 12 06:31:27 2025 GMT Subject: CN=690aef40-f716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:2b:ab:7a:43:33:a3:73:74:cd:fe:eb:e7: 10:7d:eb:1e:e4:24:36:40:88:a8:fc:96:cb:a2:54: 3c:c4:87:ae:64:b3:0a:7a:6f:1f:06:6c:5b:c0:b7: 40:55:bb:13:13:50:0c:ce:9a:9c:88:95:de:f9:1c: 34:8e:d0:6e:0f:b9:e4:1d:c6:23:7e:47:c2:29:1b: 1f:fc:e3:68:62:30:85:2a:8a:d4:2c:fc:27:3d:c7: e8:78:32:7f:4d:7d:58:d4:44:a7:2e:61:47:3a:51: 4b:ba:70:6f:58:42:e7:39:93:55:55:8b:23:c1:e1: e9:9e:3b:0a:27:df:92:a7:b7:76:3e:56:e6:37:f0: 9b:b1:0a:e5:92:a8:13:90:dd:b7:dc:d7:86:5a:94: 78:cf:97:e8:a1:81:ea:ed:1d:80:cf:e0:d4:77:d1: ed:13:a4:87:a1:1c:df:2f:c5:25:20:81:0c:71:cf: f0:61:db:0e:4f:b0:03:65:82:d0:0b:b9:8c:73:ed: 3e:32:e7:60:9a:cd:58:dd:c7:40:19:32:7d:78:cf: 78:c3:c4:1f:fb:80:da:6c:c0:71:28:52:54:e5:fa: 88:57:95:73:09:69:63:0b:d7:4b:37:ae:b3:67:a0: e0:df:76:31:b7:ad:51:17:40:2d:26:ee:bd:17:df: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DD:64:C6:09:36:54:3C:17:9C:C6:8D:3B:47:77:F0:0F:AE:8C:E8 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:b4:65:2a:04:01:a5:2c:92:cd:6f:6a:76:34:c2:13:34:65: 04:0a:71:fe:0f:67:b7:af:e2:0a:9d:f3:06:da:7d:b2:ff:96: ee:55:11:9d:fd:94:e2:09:e4:fa:fe:33:b2:42:41:84:bd:c2: 83:61:83:f5:cc:5c:0c:f2:03:fd:1a:56:9f:2f:f5:55:d3:e0: 8e:e7:a6:30:63:60:a4:3f:6d:ca:52:59:b6:c7:7b:db:5a:c7: e1:35:be:a9:9e:7b:96:56:ac:15:f5:5b:9a:75:bc:f3:82:35: 0d:af:d5:73:a2:ea:d3:a0:f2:b7:a4:a1:46:86:11:b1:49:1e: a9:f9:7a:5d:84:76:c9:0c:c1:ad:09:5f:fe:d3:c3:32:e9:c6: 84:e0:1d:d4:96:2e:7a:57:33:3f:32:00:95:ab:fd:23:2f:ae: b0:0b:89:5b:df:b4:d2:0f:dc:a2:0f:64:36:fc:b1:55:77:ca: a7:ef:a5:f6:79:53:db:f6:03:12:c5:7d:09:31:91:da:f6:e2: 28:0c:3b:b0:2d:6a:d9:b5:50:74:51:db:1d:60:01:9e:aa:cf: 69:e0:2f:74:ec:6f:ae:e2:11:ba:01:62:e9:6a:92:19:07:67: 74:ce:b3:86:2e:90:ed:94:1a:40:56:4e:09:38:5a:50:4d:51: 37:29:35:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjUxMTA1MDYzMTI3WhcNMjUxMTEyMDYzMTI3WjAYMRYwFAYD VQQDEw02OTBhZWY0MC1mNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp54rq3pDM6NzdM3+6+cQfese5CQ2QIio/JbLolQ8xIeuZLMKem8fBmxbwLdA VbsTE1AMzpqciJXe+Rw0jtBuD7nkHcYjfkfCKRsf/ONoYjCFKorULPwnPcfoeDJ/ TX1Y1ESnLmFHOlFLunBvWELnOZNVVYsjweHpnjsKJ9+Sp7d2PlbmN/CbsQrlkqgT kN233NeGWpR4z5fooYHq7R2Az+DUd9HtE6SHoRzfL8UlIIEMcc/wYdsOT7ADZYLQ C7mMc+0+Mudgms1Y3cdAGTJ9eM94w8Qf+4DabMBxKFJU5fqIV5VzCWljC9dLN66z Z6Dg33Yxt61RF0AtJu69F99V8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXdZMYJ NlQ8F5zGjTtHd/AProzoMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAtGUqBAGlLJLNb2p2NMITNGUECnH+D2e3r+IKnfMG2n2y/5buVRGd /ZTiCeT6/jOyQkGEvcKDYYP1zFwM8gP9GlafL/VV0+CO56YwY2CkP23KUlm2x3vb WsfhNb6pnnuWVqwV9VuadbzzgjUNr9VzourToPK3pKFGhhGxSR6p+XpdhHbJDMGt CV/+08My6caE4B3Uli56VzM/MgCVq/0jL66wC4lb37TSD9yiD2Q2/LFVd8qn76X2 eVPb9gMSxX0JMZHa9uIoDDuwLWrZtVB0UdsdYAGeqs9p4C907G+u4hG6AWLpapIZ B2d0zrOGLpDtlBpAVk4JOFpQTVE3KTXD -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:19 2025 by rpki-client