$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft File: H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json) Hash identifier: U+2266WDfM/P1BBXOyS2Xx2OBKFTp2ZHUvV7wql2U2c= Subject key identifier: 0D:FD:EF:D8:5D:9D:98:4B:21:49:80:FD:5B:FE:3E:C2:70:33:CF:A4 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft Manifest number: 065E Signing time: Tue 04 Nov 2025 22:40:59 +0000 Manifest this update: Tue 04 Nov 2025 22:40:58 +0000 Manifest next update: Tue 11 Nov 2025 22:40:58 +0000 Files and hashes: 1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: eUU8YXpt1HjyxP4XTCUH1cbWFIkAKWdv2KUyL9yNHcw=) 2: F7F03FB2EF3211EDA614D473C4F9AE02.roa (hash: 4FifQNCcp/QNphiorNeb31DnXb9TCxFLDNFh3h59mKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Nov 4 22:40:58 2025 GMT Not After : Nov 11 22:40:58 2025 GMT Subject: CN=690a80fa-a49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:a5:f1:2f:8f:55:94:c6:2d:d7:3b:3d:37: 81:37:1b:e3:be:05:cb:0c:79:9e:c1:1a:6e:bd:fe: 05:8c:c5:76:3a:a8:84:92:39:df:4f:4b:bd:70:0b: 39:4c:58:ac:19:0e:66:ff:1f:03:3a:e6:8d:47:7d: d9:df:20:37:1c:64:c1:85:64:dc:7c:27:82:7d:6b: 28:b1:0a:1b:98:78:af:51:43:b0:49:f8:0a:ed:b5: 2d:fe:30:53:64:5f:e9:a5:3e:62:bd:e2:74:2f:6c: 25:97:1c:45:e1:15:bd:bc:58:cd:f1:29:71:fa:90: c5:bd:33:14:0f:bb:84:87:df:11:c7:12:bf:e6:6d: 66:54:01:1a:13:46:c4:15:db:de:f2:bb:57:4b:9d: e8:9f:41:7e:12:5b:35:cf:f7:e8:ad:52:ae:a5:74: 9b:2e:e7:42:ad:ff:fa:07:0e:9e:64:19:ee:51:ef: 94:4c:44:2e:9f:9b:d8:58:a3:34:38:c2:26:65:99: 9d:0e:fc:35:3f:2b:46:44:b0:b0:21:6c:49:57:79: 3b:67:ff:f4:ab:e7:94:47:a1:84:8e:53:7c:83:a8: 1b:9c:4d:a9:47:74:6e:e2:34:5d:75:ad:57:07:df: ba:c4:db:e2:eb:f5:2e:4d:b8:af:f9:60:e9:aa:25: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:EF:D8:5D:9D:98:4B:21:49:80:FD:5B:FE:3E:C2:70:33:CF:A4 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:49:60:46:14:05:56:a8:36:02:2e:1b:78:0b:20:8a:f0:94: c6:a8:dd:a1:3f:71:09:2d:fc:8b:54:3a:11:ce:bf:59:a0:a7: 65:f8:ea:94:4d:6f:b7:25:71:9c:9e:8a:ea:1f:27:82:12:27: 7c:a9:f4:86:a4:d2:c0:0d:94:21:f4:41:00:e3:62:e9:05:01: fe:72:8c:6f:43:88:62:b7:b1:9d:a1:fa:89:ee:33:df:58:69: 09:76:70:35:67:7c:bb:19:90:5d:07:e0:be:d5:05:18:53:7e: 9a:2e:58:79:46:5c:a0:5f:37:7c:02:d5:89:b5:09:d6:24:da: 30:26:1e:17:d0:80:84:69:42:7c:68:66:6b:84:2d:70:8c:e0: 6d:8e:35:57:8b:97:a9:b6:06:a4:56:88:4a:17:e3:96:7c:24: a1:e8:58:a7:40:7a:3c:0f:62:5d:3e:fc:b0:d3:42:8c:21:53: 6d:38:6b:93:6a:d2:02:34:bb:af:04:0a:0e:1c:16:ec:6d:af: be:0b:11:bd:72:ac:df:2c:18:b9:93:f1:0e:40:a9:83:f0:b7: e0:6f:b4:d1:5f:59:98:11:3c:e4:63:f1:5e:3d:73:60:d8:b8: 4e:f3:5d:a3:6c:9e:68:1e:0a:8d:af:77:14:d0:af:1f:65:21: 77:26:87:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjUxMTA0MjI0MDU4WhcNMjUxMTExMjI0MDU4WjAYMRYwFAYD VQQDEw02OTBhODBmYS1hNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lil8S+PVZTGLdc7PTeBNxvjvgXLDHmewRpuvf4FjMV2OqiEkjnfT0u9cAs5 TFisGQ5m/x8DOuaNR33Z3yA3HGTBhWTcfCeCfWsosQobmHivUUOwSfgK7bUt/jBT ZF/ppT5iveJ0L2wllxxF4RW9vFjN8Slx+pDFvTMUD7uEh98RxxK/5m1mVAEaE0bE Fdve8rtXS53on0F+Els1z/forVKupXSbLudCrf/6Bw6eZBnuUe+UTEQun5vYWKM0 OMImZZmdDvw1PytGRLCwIWxJV3k7Z//0q+eUR6GEjlN8g6gbnE2pR3Ru4jRdda1X B9+6xNvi6/UuTbiv+WDpqiWj2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3979hd nZhLIUmA/Vv+PsJwM8+kMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIyMi9DM0JDNzVGNEExOTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1N Z3VYa2N4WUR1aVpNN1lTR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADSWBGFAVWqDYCLht4CyCK8JTGqN2hP3EJLfyLVDoRzr9ZoKdl+OqU TW+3JXGcnorqHyeCEid8qfSGpNLADZQh9EEA42LpBQH+coxvQ4hit7GdofqJ7jPf WGkJdnA1Z3y7GZBdB+C+1QUYU36aLlh5RlygXzd8AtWJtQnWJNowJh4X0ICEaUJ8 aGZrhC1wjOBtjjVXi5eptgakVohKF+OWfCSh6FinQHo8D2JdPvyw00KMIVNtOGuT atICNLuvBAoOHBbsba++CxG9cqzfLBi5k/EOQKmD8Lfgb7TRX1mYETzkY/FePXNg 2LhO812jbJ5oHgqNr3cU0K8fZSF3JoeY -----END CERTIFICATE-----Generated at Wed Nov 5 05:59:27 2025 by rpki-client