$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft File: h38lpB-22zz021rZIUTvtx6SZ3o.mft (raw, json) Hash identifier: djvO8qbEuLCSPbvS+/IK1Si8wo+rkXzeJLfbNwpxjHg= Subject key identifier: 39:B3:43:6C:21:B5:A8:A6:A8:BD:74:6F:F0:B0:F0:18:9B:82:F1:9C Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft Manifest number: 0C99 Signing time: Tue 04 Nov 2025 18:28:02 +0000 Manifest this update: Tue 04 Nov 2025 18:28:01 +0000 Manifest next update: Tue 11 Nov 2025 18:28:01 +0000 Files and hashes: 1: h38lpB-22zz021rZIUTvtx6SZ3o.crl (hash: h95IvUboUzYti2Cp9b8pREDVmunuHs4qNzggHjjpVTc=) 2: D8CC971846AE11EBA761792FC4F9AE02.roa (hash: rUTKhJ4mbBn/gtcjaqFary2usRDlDOu+VtUbm3mrKXA=) 3: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (hash: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Nov 4 18:28:01 2025 GMT Not After : Nov 11 18:28:01 2025 GMT Subject: CN=690a45b2-8f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:ba:86:6e:84:05:fc:f4:4b:fe:df:2e:59: 45:fd:4d:73:a7:10:96:7b:09:16:18:f0:97:d8:79: 72:d8:dd:08:5d:2f:62:e3:2a:6d:91:7c:e9:72:fb: bb:26:44:a7:9a:41:b4:66:4a:b6:55:bb:08:a7:e3: 8f:9f:20:01:99:f5:32:07:1f:37:90:98:89:7e:72: 65:6a:03:23:65:4e:84:35:c4:cd:4f:dd:6d:63:a4: 0b:36:68:50:4d:7b:46:97:77:b8:aa:06:11:4f:24: 6a:05:03:35:74:9f:a7:16:fe:a7:8b:09:82:04:e6: a9:f9:e3:a3:68:44:6c:ca:f7:b6:39:10:ea:68:b0: c8:ef:7d:b4:55:6e:75:94:3b:4a:c0:f8:46:db:f8: 38:de:9f:f6:b2:5c:77:84:16:82:ee:29:4c:6f:b8: 57:f7:b5:a1:96:0b:28:96:3d:bc:48:3f:71:04:9a: 54:74:52:59:2b:6a:bc:de:26:4d:be:72:83:75:0e: 96:9d:42:f0:c9:a3:5e:e6:4a:de:f2:73:13:5f:7f: a3:80:dc:8d:7b:9d:35:e1:7c:fb:1f:73:f9:32:90: 7a:13:4e:59:72:38:f5:92:e9:19:11:6a:4f:e1:7f: eb:89:e8:b0:25:77:88:89:e0:12:fe:78:4e:90:34: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:43:6C:21:B5:A8:A6:A8:BD:74:6F:F0:B0:F0:18:9B:82:F1:9C X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b4:d1:62:e3:7b:7f:fb:d4:52:c6:75:41:7f:64:22:e9:96: 88:41:18:16:7b:b0:b8:bf:97:b2:e1:1a:2a:0c:8e:6b:a7:f8: 3e:55:3e:83:19:40:c6:9a:3d:2f:8a:07:06:5c:81:9e:9a:3d: 8a:d3:6b:ab:fe:a8:7b:67:23:80:a2:62:e8:44:a1:2f:d7:26: 10:28:6f:54:9a:de:04:11:ce:16:4e:da:62:c5:a7:44:df:af: ca:66:f1:4a:3f:3d:2c:f2:48:38:b6:0d:05:4c:0b:b0:1a:0d: 8e:3c:30:02:b0:53:69:9d:c9:f3:cb:be:2c:35:dc:2c:35:97: 2c:1e:1d:f7:b5:a2:37:76:e5:d3:ab:84:fa:2f:21:de:6a:e2: a3:3f:ea:de:ae:ce:91:9a:16:9a:c6:25:85:a6:cf:a6:83:db: 32:ea:4d:22:39:2b:22:fe:98:5a:87:7e:72:82:d8:38:41:5f: 95:37:3d:b0:4b:eb:a5:32:39:8c:c8:1a:20:34:53:e2:be:bd: 89:4d:1b:37:9d:43:6d:67:68:3f:1a:3e:24:2e:28:8b:f0:c1: 60:6b:94:83:8a:ec:59:3b:27:42:85:1d:5d:7d:75:15:3d:31: 04:5d:72:3d:20:38:8f:53:4b:68:f5:84:d7:00:59:24:41:81: 54:3a:67:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMTA0MTgyODAxWhcNMjUxMTExMTgyODAxWjAYMRYwFAYD VQQDEw02OTBhNDViMi04ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLy6hm6EBfz0S/7fLllF/U1zpxCWewkWGPCX2Hly2N0IXS9i4yptkXzpcvu7 JkSnmkG0Zkq2VbsIp+OPnyABmfUyBx83kJiJfnJlagMjZU6ENcTNT91tY6QLNmhQ TXtGl3e4qgYRTyRqBQM1dJ+nFv6niwmCBOap+eOjaERsyve2ORDqaLDI7320VW51 lDtKwPhG2/g43p/2slx3hBaC7ilMb7hX97Whlgsolj28SD9xBJpUdFJZK2q83iZN vnKDdQ6WnULwyaNe5kre8nMTX3+jgNyNe5014Xz7H3P5MpB6E05Zcjj1kukZEWpP 4X/rieiwJXeIieAS/nhOkDRLSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmzQ2wh taimqL10b/Cw8BibgvGcMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEUzQS84RTQzRjVENjA2QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6 ejAyMXJaSVVUdnR4NlNaM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHtNFi43t/+9RSxnVBf2Qi6ZaIQRgWe7C4v5ey4RoqDI5rp/g+VT6D GUDGmj0vigcGXIGemj2K02ur/qh7ZyOAomLoRKEv1yYQKG9Umt4EEc4WTtpixadE 36/KZvFKPz0s8kg4tg0FTAuwGg2OPDACsFNpncnzy74sNdwsNZcsHh33taI3duXT q4T6LyHeauKjP+rers6RmhaaxiWFps+mg9sy6k0iOSsi/phah35ygtg4QV+VNz2w S+ulMjmMyBogNFPivr2JTRs3nUNtZ2g/Gj4kLiiL8MFga5SDiuxZOydChR1dfXUV PTEEXXI9IDiPU0to9YTXAFkkQYFUOmfW -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:24 2025 by rpki-client