$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: DPlBvruA4ozV6UWqYDZb/TEXkJqL/9WTutvAuNemRT8= Subject key identifier: 51:0A:4F:6C:FD:2B:4A:A8:8A:3D:BE:EF:B3:C6:73:E8:D5:E5:6B:64 Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 7C Signing time: Mon 03 Nov 2025 06:47:25 +0000 Manifest this update: Mon 03 Nov 2025 06:47:25 +0000 Manifest next update: Mon 10 Nov 2025 06:47:25 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: 1YugfU1H2asqIpLLxt1dH4CNATS8Gu2XzOXaa4Ux3y8=) 2: 73DC435A39F511F09F296862C4F9AE02.roa (hash: v8UVd7Qbh3NtEsQhX1pG9Dfe5py3W8ZuLzV2zz17/Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Validity Not Before: Nov 3 06:47:25 2025 GMT Not After : Nov 10 06:47:25 2025 GMT Subject: CN=69084ffd-a803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:04:26:2b:d4:c8:ff:b0:90:7d:92:05:86:09: 9a:b6:25:b4:7c:fa:3c:c4:a9:09:eb:d4:ce:bc:18: 6f:b3:72:1e:85:47:70:e3:b0:4f:69:00:3b:81:6d: d3:04:8f:c7:52:57:b8:aa:40:27:f7:e3:d7:6f:e0: db:de:2c:2d:56:68:f6:5b:ff:0b:9b:12:a8:51:03: db:c7:b9:3e:6b:7b:68:c6:3b:f6:5b:4d:c8:58:63: 46:58:3b:6f:38:e2:6d:16:6e:16:df:cd:77:29:7a: 9e:9f:05:68:77:9a:9b:b2:4f:c8:8b:c4:08:12:54: 91:34:a9:b4:5d:51:58:7e:f3:f3:b0:74:72:95:27: f9:e0:71:04:a3:8c:05:f0:91:e2:ba:58:07:06:be: 48:63:0a:9c:09:19:c2:0d:08:32:9a:ab:60:9f:f2: fd:23:e3:09:b4:ee:84:69:cc:47:ed:1c:68:0f:d0: 78:7d:e5:6c:c0:10:9b:d3:f5:67:aa:3d:8e:9b:88: 12:b0:59:ad:66:3e:de:6e:28:bb:53:2e:ac:2e:bc: a6:10:f5:fe:32:a3:de:12:1a:17:33:50:d5:c1:39: 8a:ab:c6:14:4f:80:b7:e7:45:87:7b:77:0e:12:08: 83:17:88:0c:b8:fe:ea:70:f7:e0:f6:c4:0b:62:ab: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:4F:6C:FD:2B:4A:A8:8A:3D:BE:EF:B3:C6:73:E8:D5:E5:6B:64 X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:db:4e:96:9d:8b:78:5c:22:6c:2a:eb:e4:3b:54:42:fa:ff: 4f:bd:da:52:d2:5e:c2:50:4a:1d:6e:58:7a:b8:ed:23:5f:7e: 4a:d1:9d:6e:f2:8c:dd:fa:fb:cf:20:04:7f:cd:f1:5d:a6:18: 26:a9:81:ba:0d:04:97:61:16:da:39:d7:3d:f3:ad:b0:06:06: eb:0f:33:c1:16:ba:6b:1e:1c:37:7e:8b:a3:05:3d:36:f5:6b: 47:3d:f4:7f:97:91:29:59:65:68:fe:5d:3e:24:74:6c:34:27: 67:b4:a8:29:83:5c:d1:4f:82:d8:ad:c8:1e:b1:b3:e9:66:e3: 2c:71:be:bf:98:7d:bd:16:70:e2:83:c8:ac:80:35:58:a5:6e: 31:d1:f2:fd:0c:6a:a5:f4:1c:ac:5a:0f:71:a4:f5:9c:0a:fe: 13:da:92:9a:a5:fa:e0:22:4d:7f:90:ba:ce:80:aa:5b:71:e0: 31:ab:d5:f2:82:76:c4:10:7c:2d:1e:47:ab:b8:13:da:af:cb: 08:56:8a:9d:17:63:f7:e9:6b:9f:e5:da:8f:45:8b:1a:80:93: 6c:d9:90:a0:f5:71:84:b7:88:ad:27:87:a2:b7:c7:ef:ce:62: 5c:71:a6:f7:e1:33:63:e3:15:f9:0e:97:3a:d9:a7:04:c7:75: 10:3b:52:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoODU3OUJFMkQ4MzQ1NjgyRjI3QUVFNzA2MkJCRDRFRjc2 NjRFNTcxQjAeFw0yNTExMDMwNjQ3MjVaFw0yNTExMTAwNjQ3MjVaMBgxFjAUBgNV BAMTDTY5MDg0ZmZkLWE4MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyBCYr1Mj/sJB9kgWGCZq2JbR8+jzEqQnr1M68GG+zch6FR3DjsE9pADuBbdME j8dSV7iqQCf349dv4NveLC1WaPZb/wubEqhRA9vHuT5re2jGO/ZbTchYY0ZYO284 4m0WbhbfzXcpep6fBWh3mpuyT8iLxAgSVJE0qbRdUVh+8/OwdHKVJ/ngcQSjjAXw keK6WAcGvkhjCpwJGcINCDKaq2Cf8v0j4wm07oRpzEftHGgP0Hh95WzAEJvT9Weq PY6biBKwWa1mPt5uKLtTLqwuvKYQ9f4yo94SGhczUNXBOYqrxhRPgLfnRYd7dw4S CIMXiAy4/upw9+D2xAtiq5M5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUQpPbP0r SqiKPb7vs8Zz6NXla2QwHwYDVR0jBBgwFoAUhXm+LYNFaC8nrucGK71O92ZOVxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzdFQzAwNzZDRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhtLUxZTkZhQzhucnVjR0s3MU85MlpPVnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzdFQzAwNzZDRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4 bnJ1Y0dLNzFPOTJaT1Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKnbTpadi3hcImwq6+Q7VEL6/0+92lLSXsJQSh1uWHq47SNffkrRnW7y jN36+88gBH/N8V2mGCapgboNBJdhFto51z3zrbAGBusPM8EWumseHDd+i6MFPTb1 a0c99H+XkSlZZWj+XT4kdGw0J2e0qCmDXNFPgtityB6xs+lm4yxxvr+Yfb0WcOKD yKyANVilbjHR8v0MaqX0HKxaD3Gk9ZwK/hPakpql+uAiTX+Qus6Aqltx4DGr1fKC dsQQfC0eR6u4E9qvywhWip0XY/fpa5/l2o9FixqAk2zZkKD1cYS3iK0nh6K3x+/O YlxxpvfhM2PjFfkOlzrZpwTHdRA7UmY= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:45 2025 by rpki-client