$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: fD4+bo72Er9RtWy6L/b/dVyBS0Q/655st36eBQ3FHeE= Subject key identifier: 9B:AE:B4:40:1F:5F:59:5A:F0:9C:3C:8D:A2:8E:5A:D3:48:86:6D:56 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 11C9 Signing time: Sun 02 Nov 2025 17:13:09 +0000 Manifest this update: Sun 02 Nov 2025 17:13:09 +0000 Manifest next update: Sun 09 Nov 2025 17:13:09 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 5z5dM97FqGb9dK4m5XbM8zmBV/kuPEvAgLhDQaYkEHM=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Nov 2 17:13:09 2025 GMT Not After : Nov 9 17:13:09 2025 GMT Subject: CN=69079125-bdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:66:e5:24:9d:ef:2e:0d:30:48:d4:ca:44: f8:22:8d:4c:19:a2:a7:27:6d:b7:7d:c6:7a:dd:e1: 06:10:8d:82:fe:0f:76:4a:21:d0:ea:d9:d5:65:71: 28:5c:26:4c:0c:8a:ca:49:5d:f2:80:a3:0e:d3:e7: 91:f7:8d:a6:18:c9:75:76:4f:be:b1:76:53:40:5f: b8:f0:2c:ba:bb:a7:11:68:d8:4b:4d:6a:e0:20:e9: 82:af:a8:d1:c6:a7:20:b8:fc:c2:73:57:8d:dd:9e: fd:77:57:75:6d:ff:d4:b9:bd:12:a6:5d:bf:ab:86: ad:4f:5f:26:ab:5b:ea:a3:85:e8:01:38:44:7b:88: d8:15:2f:c9:2f:2d:2f:09:fe:2c:54:44:2d:2c:21: ae:51:d0:50:45:05:5c:cf:c6:45:16:14:0b:2a:0c: b0:a0:68:e7:dd:30:1a:a1:b7:6f:17:00:ac:5f:e2: 9d:09:b9:ef:fd:2d:16:0d:68:a3:7e:43:b5:61:83: 0d:ef:ce:9d:cc:cc:2c:e1:11:cd:80:b3:df:73:15: 53:3e:96:f7:a3:70:1a:93:76:fb:8d:12:5a:74:fd: dd:86:2f:59:3f:1f:3a:3f:bd:85:97:54:07:08:85: ba:2f:a0:3a:c6:27:58:47:3b:d7:7e:02:ac:c2:04: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AE:B4:40:1F:5F:59:5A:F0:9C:3C:8D:A2:8E:5A:D3:48:86:6D:56 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:5c:44:1b:b3:5d:09:62:67:4e:ff:2c:2e:b2:89:f2:0f:95: 32:81:7a:3d:94:a5:4e:a7:91:23:f1:bb:50:9e:fd:2b:e3:59: b1:c1:e3:89:9b:da:b5:3d:7a:4c:b1:18:2c:86:8d:bd:5a:31: 3e:67:9d:2e:3c:d8:84:8c:8e:1c:80:a9:50:6d:80:5b:1a:e8: 3d:dd:c1:91:ce:2c:30:76:c8:f6:e9:fb:13:2a:e5:b5:76:a3: 28:51:7b:ce:e2:4d:90:41:e9:84:19:95:31:c7:90:0f:8c:e8: 93:bd:fc:bd:d2:91:eb:09:44:95:04:03:ab:5a:ce:c9:07:23: 5d:ca:26:b9:30:da:e9:7d:e7:72:1d:17:66:87:4e:d0:4c:6b: 22:a5:70:33:2e:5c:da:dd:0d:5f:42:b9:fe:b5:64:36:26:96: 16:d2:ce:10:a1:a3:a3:dc:83:58:93:f5:ff:5a:01:ef:93:ce: 33:e8:0b:6d:c4:b1:61:12:a3:f2:39:1c:37:52:3f:e2:79:ff: 65:40:74:7a:b8:7f:09:27:cd:4c:29:a0:ad:3f:1c:43:73:62: ff:2f:f6:ad:ec:5e:26:9a:cd:59:ca:0f:9e:a6:f6:5e:95:00: 46:3b:01:68:2b:59:4b:07:79:b3:66:85:3c:2f:52:37:fc:04: d8:50:46:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUxMTAyMTcxMzA5WhcNMjUxMTA5MTcxMzA5WjAYMRYwFAYD VQQDEw02OTA3OTEyNS1iZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+Jm5SSd7y4NMEjUykT4Io1MGaKnJ223fcZ63eEGEI2C/g92SiHQ6tnVZXEo XCZMDIrKSV3ygKMO0+eR942mGMl1dk++sXZTQF+48Cy6u6cRaNhLTWrgIOmCr6jR xqcguPzCc1eN3Z79d1d1bf/Uub0Spl2/q4atT18mq1vqo4XoAThEe4jYFS/JLy0v Cf4sVEQtLCGuUdBQRQVcz8ZFFhQLKgywoGjn3TAaobdvFwCsX+KdCbnv/S0WDWij fkO1YYMN786dzMws4RHNgLPfcxVTPpb3o3Aak3b7jRJadP3dhi9ZPx86P72Fl1QH CIW6L6A6xidYRzvXfgKswgSpkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuutEAf X1la8Jw8jaKOWtNIhm1WMB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmXEQbs10JYmdO/ywusonyD5UygXo9lKVOp5Ej8btQnv0r41mxweOJ m9q1PXpMsRgsho29WjE+Z50uPNiEjI4cgKlQbYBbGug93cGRziwwdsj26fsTKuW1 dqMoUXvO4k2QQemEGZUxx5APjOiTvfy90pHrCUSVBAOrWs7JByNdyia5MNrpfedy HRdmh07QTGsipXAzLlza3Q1fQrn+tWQ2JpYW0s4QoaOj3INYk/X/WgHvk84z6Att xLFhEqPyORw3Uj/ief9lQHR6uH8JJ81MKaCtPxxDc2L/L/at7F4mms1Zyg+epvZe lQBGOwFoK1lLB3mzZoU8L1I3/ATYUEY5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:59 2025 by rpki-client