$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: DX11wsdwR/AscEVcJXPaU8oMsrnXiND3yhBWDWjbqbY= Subject key identifier: 7F:BB:9D:11:5C:A6:BB:D5:44:21:B3:D5:3D:02:AA:4A:06:55:72:10 Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 02CD Signing time: Wed 05 Nov 2025 01:28:42 +0000 Manifest this update: Wed 05 Nov 2025 01:28:41 +0000 Manifest next update: Wed 12 Nov 2025 01:28:41 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: 7FnDqEN9EzHEbH+zpGc/o2laj8Eh7tu28XaNEwIlIBc=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: goaKWUv5rRzy+se4DCphxh+KiAGhLohPjMAfli+5ur8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Nov 5 01:28:41 2025 GMT Not After : Nov 12 01:28:41 2025 GMT Subject: CN=690aa84a-1554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:9e:ff:5b:da:17:42:a7:f8:c7:0c:c6:04: 7f:47:c0:c0:96:b9:78:7b:55:6e:b7:e7:08:c6:5b: f1:87:4b:9f:27:6c:8d:b6:df:d4:96:9b:7f:12:4d: a3:f2:ec:09:99:e8:0e:d3:cc:16:fe:24:68:92:dc: 2d:98:13:75:d8:fc:f2:31:0a:b7:b4:37:d4:6a:eb: 87:16:00:05:65:3b:e9:e7:26:32:89:58:37:d1:c3: 5b:ef:71:d3:1f:72:46:0e:2e:a2:cc:9a:83:76:60: e6:59:c9:32:22:15:08:fe:75:3d:76:e1:96:47:d0: 31:83:63:99:15:98:c7:ce:bc:4d:73:ba:7a:6e:12: ba:3a:3c:98:09:92:12:52:16:be:74:60:29:ee:29: e6:b6:3a:48:2d:6c:f5:a2:cf:df:14:53:41:77:0d: 2a:0c:82:bd:60:20:9b:a4:a0:e9:95:13:a3:ec:85: e0:e9:c7:ee:c1:54:11:02:5d:ec:b0:4b:b9:47:0f: 9d:64:5c:77:c2:e0:0b:b7:11:58:e6:ea:f1:fc:7c: 55:c9:ac:65:72:37:1f:81:e3:ce:9d:63:36:d9:dc: 19:04:4b:31:2f:e4:19:94:cf:a2:ab:3d:f7:bd:68: 8a:52:c1:84:5a:d6:0c:30:60:31:3f:ea:ea:89:19: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BB:9D:11:5C:A6:BB:D5:44:21:B3:D5:3D:02:AA:4A:06:55:72:10 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cc:57:c1:08:52:41:62:79:bd:ce:5f:b3:f9:99:9b:1a:74: a2:44:50:c8:54:29:84:c0:3e:7d:2c:4a:59:d4:46:58:dc:1c: 25:3d:08:be:50:e8:6d:48:ce:12:25:b2:29:ea:c1:4c:c9:b9: d9:d5:12:32:8a:6a:9f:32:db:63:95:5e:9c:c0:96:73:20:9c: f5:04:2d:31:4d:e8:ca:fc:7c:53:a2:87:5e:0a:38:16:34:dd: 8d:4e:fb:05:07:bd:4d:0e:e5:48:63:15:a9:25:5d:a8:19:90: b9:29:39:a4:0e:15:c5:d7:18:5e:8a:f6:91:7f:75:54:38:92: 16:6a:c2:fb:ef:d0:6f:c7:f3:06:8e:58:bd:28:fb:6f:1f:72: 5d:28:46:31:96:3c:1a:1c:b2:64:4d:ae:87:a2:bd:fc:9a:ca: 2e:97:30:3a:4c:eb:f5:a9:13:b7:eb:4e:61:d5:eb:03:7c:8a: 34:7d:78:41:e6:f8:40:2c:bb:c9:5e:ad:de:86:43:9c:94:9a: 48:a0:92:df:a1:a1:5a:44:88:d8:f4:9c:ca:b1:cd:8a:09:ff: 80:46:57:f0:01:97:f0:3f:0d:f0:96:27:b5:ed:50:36:8c:cf: 68:cb:92:46:fc:7b:4c:d6:d3:8c:b5:e0:e4:3a:46:39:fe:dc: 0e:c9:19:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUxMTA1MDEyODQxWhcNMjUxMTEyMDEyODQxWjAYMRYwFAYD VQQDEw02OTBhYTg0YS0xNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoye/1vaF0Kn+McMxgR/R8DAlrl4e1Vut+cIxlvxh0ufJ2yNtt/Ulpt/Ek2j 8uwJmegO08wW/iRoktwtmBN12PzyMQq3tDfUauuHFgAFZTvp5yYyiVg30cNb73HT H3JGDi6izJqDdmDmWckyIhUI/nU9duGWR9Axg2OZFZjHzrxNc7p6bhK6OjyYCZIS Uha+dGAp7inmtjpILWz1os/fFFNBdw0qDIK9YCCbpKDplROj7IXg6cfuwVQRAl3s sEu5Rw+dZFx3wuALtxFY5urx/HxVyaxlcjcfgePOnWM22dwZBEsxL+QZlM+iqz33 vWiKUsGEWtYMMGAxP+rqiRnS6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+7nRFc prvVRCGz1T0CqkoGVXIQMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBezFfBCFJBYnm9zl+z+ZmbGnSiRFDIVCmEwD59LEpZ1EZY3BwlPQi+ UOhtSM4SJbIp6sFMybnZ1RIyimqfMttjlV6cwJZzIJz1BC0xTejK/HxToodeCjgW NN2NTvsFB71NDuVIYxWpJV2oGZC5KTmkDhXF1xheivaRf3VUOJIWasL779Bvx/MG jli9KPtvH3JdKEYxljwaHLJkTa6Hor38msoulzA6TOv1qRO3605h1esDfIo0fXhB 5vhALLvJXq3ehkOclJpIoJLfoaFaRIjY9JzKsc2KCf+ARlfwAZfwPw3wlie17VA2 jM9oy5JG/HtM1tOMteDkOkY5/twOyRkT -----END CERTIFICATE-----Generated at Wed Nov 5 20:56:39 2025 by rpki-client