$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft File: hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json) Hash identifier: /Ls8UTsGv3GeJvGJmadFzOtGFHvhdzTFHEOpowLPWjw= Subject key identifier: 0D:7C:2C:DD:00:6F:27:3A:16:E8:83:2C:0E:73:BE:1A:04:43:CF:E6 Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 Certificate issuer: /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft Manifest number: 0693 Signing time: Sun 02 Nov 2025 22:22:17 +0000 Manifest this update: Sun 02 Nov 2025 22:22:16 +0000 Manifest next update: Sun 09 Nov 2025 22:22:16 +0000 Files and hashes: 1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: bJ2yNOV6HwLzr+P2zbr/TeeYS3B0ZzweasdU+Tn8Ygs=) 2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63 Validity Not Before: Nov 2 22:22:16 2025 GMT Not After : Nov 9 22:22:16 2025 GMT Subject: CN=6907d998-83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:4b:9f:7f:27:63:ea:b7:f3:f4:a4:d2:33: e2:0f:cc:38:fc:74:b6:37:3a:a5:af:3d:30:9b:59: e7:ac:b9:95:af:90:81:80:b7:0e:80:44:4b:8e:1b: df:ef:5e:d4:7a:ee:5b:85:ab:77:0b:d0:b9:f4:e5: 0c:d7:90:2a:29:83:6e:63:f6:9c:bd:2d:cd:03:42: df:fb:c3:e7:db:46:0a:9d:64:76:89:6a:15:0e:f5: fa:b6:57:3d:2b:2f:f4:b4:52:fd:a5:d1:6c:ed:3b: e9:f1:55:71:52:a5:0a:76:ab:89:2c:1b:71:ea:8d: 6a:f0:f8:52:09:b2:88:62:7d:a1:8b:71:73:02:d0: 6b:14:15:ea:4b:26:f2:40:9f:46:64:7d:30:ea:9f: 27:d2:50:68:b6:d0:88:fe:85:2b:9e:cd:41:06:a1: d8:d8:e3:f1:1a:35:59:d7:8d:c8:f1:6c:0c:54:27: af:72:d5:34:47:e7:0d:51:63:d4:c8:49:e4:25:71: 12:6d:f7:39:43:89:39:4c:b7:71:d5:9a:06:9d:21: 42:1f:e9:7c:68:96:e8:c8:c3:c7:16:d8:23:66:a0: 8d:0b:8b:8e:79:fb:fd:e4:85:55:cd:03:08:09:ca: b0:0d:a3:37:8f:91:ab:76:22:ca:1a:98:43:88:61: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:2C:DD:00:6F:27:3A:16:E8:83:2C:0E:73:BE:1A:04:43:CF:E6 X509v3 Authority Key Identifier: keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6a:df:9e:bc:ee:fb:f2:a1:cf:0f:3e:90:c5:06:cb:20:5e: 82:07:cb:f5:99:b6:62:04:cd:34:74:69:76:1b:a1:cb:e3:bd: c7:08:be:95:6b:6c:a0:5d:0c:7c:67:33:cd:ee:a8:c6:42:5f: 0c:7a:bc:ca:6d:03:7b:37:37:12:27:7d:27:6d:8b:8c:42:97: 13:8a:78:4a:24:c7:c6:05:00:c0:07:45:f2:7b:c6:a0:77:c8: 61:8e:1f:b8:fe:9e:be:c9:4a:a9:60:63:11:ca:b6:bc:d7:9a: 5a:d4:ae:03:b1:12:f0:ee:90:4a:b1:fc:71:7e:ed:b1:0a:dd: 31:02:e5:93:91:13:df:91:89:84:f0:d3:50:e7:4d:f1:e9:83: 03:f1:59:c1:74:38:a4:10:42:e3:fd:f4:bd:21:b3:c5:b8:3c: e6:0f:83:ec:46:13:9f:15:e6:ba:84:43:33:c9:52:4f:a8:21: 3d:32:c9:a8:14:6a:1b:ce:32:8f:aa:26:bd:4f:4a:64:ee:c7: 55:93:a2:09:88:c8:51:46:6b:ed:34:ba:17:f4:41:6c:02:32: 03:05:9f:79:a8:eb:3b:27:c9:82:e5:31:4c:22:a4:3a:62:e6: 50:7d:e8:93:56:bf:23:4c:5a:e8:9b:83:e3:4c:d8:00:2f:9e: b0:40:4f:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxNTMxMTAvBgNVBAUTKDg3MkE2NjcyNzZBRDQ0NzA4QTQ0N0ZEQkU4ODFGMTYy RTc5MERENjMwHhcNMjUxMTAyMjIyMjE2WhcNMjUxMTA5MjIyMjE2WjAYMRYwFAYD VQQDEw02OTA3ZDk5OC04M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyRLn38nY+q38/Sk0jPiD8w4/HS2Nzqlrz0wm1nnrLmVr5CBgLcOgERLjhvf 717Ueu5bhat3C9C59OUM15AqKYNuY/acvS3NA0Lf+8Pn20YKnWR2iWoVDvX6tlc9 Ky/0tFL9pdFs7Tvp8VVxUqUKdquJLBtx6o1q8PhSCbKIYn2hi3FzAtBrFBXqSyby QJ9GZH0w6p8n0lBottCI/oUrns1BBqHY2OPxGjVZ143I8WwMVCevctU0R+cNUWPU yEnkJXESbfc5Q4k5TLdx1ZoGnSFCH+l8aJboyMPHFtgjZqCNC4uOefv95IVVzQMI CcqwDaM3j5GrdiLKGphDiGGNfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA18LN0A byc6FuiDLA5zvhoEQ8/mMB8GA1UdIwQYMBaAFIcqZnJ2rURwikR/2+iB8WLnkN1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTE1My85NTQyODFDMjkw NDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJIQ0tSSF9iNklIeFl1ZVEz V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5cG1jbmF0UkhDS1JIX2I2SUh4WXVlUTNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTE1My85NTQyODFDMjkwNDgxMUVCQTQ4RTk2MzBDNEY5QUUwMi9oeXBtY25hdFJI Q0tSSF9iNklIeFl1ZVEzV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8at+evO778qHPDz6QxQbLIF6CB8v1mbZiBM00dGl2G6HL473HCL6V a2ygXQx8ZzPN7qjGQl8MerzKbQN7NzcSJ30nbYuMQpcTinhKJMfGBQDAB0Xye8ag d8hhjh+4/p6+yUqpYGMRyra815pa1K4DsRLw7pBKsfxxfu2xCt0xAuWTkRPfkYmE 8NNQ503x6YMD8VnBdDikEELj/fS9IbPFuDzmD4PsRhOfFea6hEMzyVJPqCE9Msmo FGobzjKPqia9T0pk7sdVk6IJiMhRRmvtNLoX9EFsAjIDBZ95qOs7J8mC5TFMIqQ6 YuZQfeiTVr8jTFrom4PjTNgAL56wQE+T -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:10 2025 by rpki-client