$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft File: h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json) Hash identifier: GGLccs+q6gKX7Gvl7ud7VnaDhwfhiH/91OxlzS/s4UQ= Subject key identifier: 4F:B2:0B:05:B2:30:56:D0:B1:20:EB:C0:8E:73:15:A6:4D:99:52:ED Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft Manifest number: 01DC Signing time: Wed 05 Nov 2025 03:00:23 +0000 Manifest this update: Wed 05 Nov 2025 03:00:23 +0000 Manifest next update: Wed 12 Nov 2025 03:00:23 +0000 Files and hashes: 1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: mb4kEy6H9e++wlLMvDF2Q/ouNk/hUYYBIJ8kz0Bbz4E=) 2: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: Aaq+TCQ/KTzVoqOiGqBuyk59qeKatX9nZx11XR64nYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234 Validity Not Before: Nov 5 03:00:23 2025 GMT Not After : Nov 12 03:00:23 2025 GMT Subject: CN=690abdc7-7366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:dd:47:9c:41:fa:70:4b:3f:89:d3:ff:4d: 3a:a9:c6:03:b9:a6:93:59:cd:63:69:19:62:ec:75: 6f:51:91:fd:85:b2:36:aa:0b:02:f3:07:aa:14:b9: 1e:0f:17:dd:11:78:37:e1:a6:da:69:97:36:73:f3: 98:7b:ce:af:dd:bc:ff:f0:f7:c4:a2:02:02:16:df: a9:f6:49:5e:9f:db:9f:a7:e0:b6:15:ef:d0:89:f5: 21:e0:30:9c:ad:c5:6b:c9:77:2c:69:03:86:82:25: 54:96:3e:f5:ac:a1:29:9e:1b:6f:22:54:f4:9b:91: cf:a6:51:88:f5:ce:f0:be:5a:d0:44:4c:50:d9:1b: de:17:2e:3f:11:25:29:99:53:c9:b3:98:6d:84:fd: c3:b9:bd:a5:14:0b:bd:8d:aa:65:05:d7:72:e1:da: 3a:6f:8e:a1:2a:7d:7c:a4:52:d8:23:46:7d:c1:14: d5:36:5e:de:d0:aa:4c:13:e9:36:53:91:7e:d7:74: 35:de:a7:45:ea:08:c5:81:ae:54:34:56:08:c8:69: 09:bb:b0:f6:1f:57:06:3b:4e:06:86:e9:e7:db:bb: 5e:7f:8f:d8:e0:84:44:e7:e3:49:76:a3:bf:01:3f: 74:b7:fa:e7:56:41:a0:63:c9:5b:5d:11:c6:b6:3a: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B2:0B:05:B2:30:56:D0:B1:20:EB:C0:8E:73:15:A6:4D:99:52:ED X509v3 Authority Key Identifier: keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:a0:c9:07:09:b4:00:0d:7f:cb:3d:4b:d6:d2:5f:a8:85: 83:00:ff:bd:54:e0:53:de:cf:bb:65:b8:cd:dc:aa:d2:25:55: 23:ca:7f:c9:fd:a9:26:80:72:da:67:09:a4:29:2a:0c:2d:70: ce:2a:5e:32:f9:0c:b8:a9:4a:41:7a:b6:96:25:3c:66:dd:43: a4:d6:f8:c8:17:73:91:a3:c3:85:b6:24:bd:bc:0f:80:06:63: 7a:c4:f9:1a:47:28:b9:dd:f7:b0:30:ff:57:b6:f5:c9:6e:4e: 05:0c:b6:df:d5:d6:ec:fb:5c:0c:ed:a6:38:3d:b4:4f:bf:8b: c7:0f:31:2f:de:5f:91:42:f3:bc:cb:b5:cd:a3:fb:5c:a7:a5: 6e:93:91:cc:dd:ff:67:1c:22:9f:0d:ec:87:4c:6b:3d:ac:a8: f0:63:cd:8c:fe:cb:c9:70:cb:98:d1:3c:80:f5:6c:82:80:49: 38:6d:44:92:f8:50:fd:08:e8:f1:5f:69:bb:65:63:f0:16:06: 1d:2c:cb:63:54:4d:20:cc:35:0d:b6:d3:cf:ce:f5:42:a7:5c: 44:e2:ca:d7:cb:bf:47:7c:04:1c:53:60:83:37:dd:03:2a:91: 4c:c1:0b:af:53:9c:87:ca:3b:24:1d:6f:bb:9e:8d:4a:d1:bf: c3:a4:0b:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy REVGNEMyMzQwHhcNMjUxMTA1MDMwMDIzWhcNMjUxMTEyMDMwMDIzWjAYMRYwFAYD VQQDEw02OTBhYmRjNy03MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUvdR5xB+nBLP4nT/006qcYDuaaTWc1jaRli7HVvUZH9hbI2qgsC8weqFLke DxfdEXg34abaaZc2c/OYe86v3bz/8PfEogICFt+p9klen9ufp+C2Fe/QifUh4DCc rcVryXcsaQOGgiVUlj71rKEpnhtvIlT0m5HPplGI9c7wvlrQRExQ2RveFy4/ESUp mVPJs5hthP3Dub2lFAu9japlBddy4do6b46hKn18pFLYI0Z9wRTVNl7e0KpME+k2 U5F+13Q13qdF6gjFga5UNFYIyGkJu7D2H1cGO04Ghunn27tef4/Y4IRE5+NJdqO/ AT90t/rnVkGgY8lbXRHGtjrVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+yCwWy MFbQsSDrwI5zFaZNmVLtMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi dXowcGd0eHZ1Y0V0NzB3alEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM9KDJBwm0AA1/yz1L1tJfqIWDAP+9VOBT3s+7ZbjN3KrSJVUjyn/J /akmgHLaZwmkKSoMLXDOKl4y+Qy4qUpBeraWJTxm3UOk1vjIF3ORo8OFtiS9vA+A BmN6xPkaRyi53fewMP9XtvXJbk4FDLbf1dbs+1wM7aY4PbRPv4vHDzEv3l+RQvO8 y7XNo/tcp6Vuk5HM3f9nHCKfDeyHTGs9rKjwY82M/svJcMuY0TyA9WyCgEk4bUSS +FD9COjxX2m7ZWPwFgYdLMtjVE0gzDUNttPPzvVCp1xE4srXy79HfAQcU2CDN90D KpFMwQuvU5yHyjskHW+7no1K0b/DpAvm -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:51 2025 by rpki-client