$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft File: H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json) Hash identifier: woeFMxOGjTzKlPJI3aNAux0PO+k4c1VAZ2yBtLpB8ho= Subject key identifier: 39:69:7B:5C:F6:64:49:C0:61:0C:EC:1C:4C:6F:F9:90:F4:BF:E0:5A Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft Manifest number: 08F5 Signing time: Sun 02 Nov 2025 20:18:00 +0000 Manifest this update: Sun 02 Nov 2025 20:18:00 +0000 Manifest next update: Sun 09 Nov 2025 20:17:59 +0000 Files and hashes: 1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: 4CzEGHUS9/ttdLfQt4wZ7/uYKxzEpePJAUq0awkW/sE=) 2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Nov 2 20:18:00 2025 GMT Not After : Nov 9 20:17:59 2025 GMT Subject: CN=6907bc78-d2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:9f:3d:15:05:fa:9e:6c:52:bf:6a:fa:a2: 89:f0:47:09:ca:3d:f7:f9:ac:be:3c:81:92:52:c1: 79:45:50:84:f6:b2:d5:87:c0:da:f7:bd:66:12:a7: ee:75:64:e3:d7:c4:01:2b:e6:f9:98:ff:d6:1f:55: c0:11:c2:ba:a1:84:a1:30:b8:a1:f4:1d:38:4d:e0: fd:5d:1c:29:8f:b9:22:a6:a9:53:31:4e:65:cf:09: 43:1a:7e:9e:30:d9:e3:29:1d:3d:98:c1:80:34:ae: 24:19:65:77:eb:94:55:8f:88:62:70:f8:60:8c:60: 38:57:37:8b:cd:50:09:5a:2c:5c:49:3a:50:de:97: 9f:f9:4d:90:c8:d7:ae:07:87:85:32:cb:15:6e:a6: c8:a7:ac:9d:3d:78:e3:01:10:a5:14:fb:13:bc:19: 2a:fa:2f:ac:8a:44:58:44:93:09:8f:c2:63:33:19: 3d:8a:3a:19:34:af:da:59:24:72:17:00:a6:6f:b2: 67:43:9f:11:6f:41:0e:c0:4d:7f:60:8e:cc:94:25: 75:e3:97:74:2e:ec:c5:1a:73:58:f0:7a:2f:e5:7f: 27:df:d7:35:93:6f:c9:fd:74:a1:cd:b8:9c:c4:1a: 27:a9:a5:b9:57:a0:e2:38:05:b6:f6:9d:a4:a9:90: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:7B:5C:F6:64:49:C0:61:0C:EC:1C:4C:6F:F9:90:F4:BF:E0:5A X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:38:01:77:ca:82:82:9e:48:bd:66:3e:05:de:97:44:7f:ab: 5f:3b:ae:39:38:b0:f7:ee:fb:4b:22:36:4d:1b:86:27:b5:43: d6:a3:19:18:16:94:53:f0:b2:14:66:9a:4d:0a:ac:d5:89:46: 09:c2:2d:b5:3c:4a:c8:b1:6b:46:91:a5:cf:c9:a0:ed:f7:fe: b4:fd:99:69:5c:6e:40:67:05:cb:84:9e:bf:4b:e0:1d:ca:0b: 42:b8:a1:69:2a:90:26:b7:d8:9f:bc:fe:a8:0a:fc:25:1c:f4: 29:15:5d:1a:2d:20:3d:9c:02:75:ce:44:22:28:c8:12:7c:66: f0:f9:0d:d0:fc:46:9f:82:ae:d6:91:43:35:d4:5a:88:a1:fc: a3:89:d3:c7:25:b6:70:31:a9:3f:83:f1:14:46:24:c5:ed:c5: 49:0f:5d:fc:df:fc:da:3a:ba:66:d5:26:77:fc:02:9f:18:cb: ea:57:9b:32:aa:65:ee:9a:9a:90:69:c9:db:fe:a9:46:a5:67: 40:ac:54:8b:92:14:b4:78:d1:e2:51:f1:86:5b:fe:9a:9e:25: 5e:d6:9c:72:96:a7:87:d8:24:74:52:f9:93:77:0d:85:9a:ae: a8:3f:f9:7d:31:97:1c:2b:77:27:8e:ac:81:1b:f3:5b:02:75: 01:13:f9:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUxMTAyMjAxODAwWhcNMjUxMTA5MjAxNzU5WjAYMRYwFAYD VQQDEw02OTA3YmM3OC1kMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ASfPRUF+p5sUr9q+qKJ8EcJyj33+ay+PIGSUsF5RVCE9rLVh8Da971mEqfu dWTj18QBK+b5mP/WH1XAEcK6oYShMLih9B04TeD9XRwpj7kipqlTMU5lzwlDGn6e MNnjKR09mMGANK4kGWV365RVj4hicPhgjGA4VzeLzVAJWixcSTpQ3pef+U2QyNeu B4eFMssVbqbIp6ydPXjjARClFPsTvBkq+i+sikRYRJMJj8JjMxk9ijoZNK/aWSRy FwCmb7JnQ58Rb0EOwE1/YI7MlCV145d0LuzFGnNY8Hov5X8n39c1k2/J/XShzbic xBonqaW5V6DiOAW29p2kqZDgeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlpe1z2 ZEnAYQzsHExv+ZD0v+BaMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj NHlNZEx0dFUyVzJlcTE5X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvOAF3yoKCnki9Zj4F3pdEf6tfO645OLD37vtLIjZNG4YntUPWoxkY FpRT8LIUZppNCqzViUYJwi21PErIsWtGkaXPyaDt9/60/ZlpXG5AZwXLhJ6/S+Ad ygtCuKFpKpAmt9ifvP6oCvwlHPQpFV0aLSA9nAJ1zkQiKMgSfGbw+Q3Q/Eafgq7W kUM11FqIofyjidPHJbZwMak/g/EURiTF7cVJD1383/zaOrpm1SZ3/AKfGMvqV5sy qmXumpqQacnb/qlGpWdArFSLkhS0eNHiUfGGW/6aniVe1pxylqeH2CR0UvmTdw2F mq6oP/l9MZccK3cnjqyBG/NbAnUBE/kH -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:15 2025 by rpki-client