$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft File: hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json) Hash identifier: EjiE6/RTcbszAt7+Y98SF/TFbqSkTvfwhVPsY6cd2Yk= Subject key identifier: 24:1D:D0:29:B1:7E:DA:B7:B0:DD:1D:30:3A:42:CC:FF:B6:A4:EA:0C Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft Manifest number: 0D5F Signing time: Tue 04 Nov 2025 18:05:04 +0000 Manifest this update: Tue 04 Nov 2025 18:05:04 +0000 Manifest next update: Tue 11 Nov 2025 18:05:04 +0000 Files and hashes: 1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: oJq23jKq72Ye4vDnlrRRIt7KvVngsHa9n+RwFx4V0lk=) 2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: MzWbilqvJU/bA0pbUK90+TSc+f/XjXTcVvnJOFhs0gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94 Validity Not Before: Nov 4 18:05:04 2025 GMT Not After : Nov 11 18:05:04 2025 GMT Subject: CN=690a4050-34f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:df:be:36:3a:bd:5e:e9:9d:87:b4:8c:4e: e8:f1:75:82:7e:14:ee:2a:fd:f6:f9:39:24:35:fa: e8:ea:13:4f:68:3c:d1:9f:f4:b8:3e:1c:ac:ba:62: f1:a7:fc:3f:e4:5c:96:87:85:d7:98:7f:98:d0:8e: 2a:71:1b:02:66:80:27:23:0e:ca:92:2f:57:97:8e: c3:0f:2f:85:42:12:31:f3:15:17:b7:35:58:97:c0: 0f:9c:e0:47:ee:1f:fc:31:28:0e:eb:3b:d6:5f:7a: 2f:cd:b6:7d:e7:2f:74:38:d4:e5:60:27:8e:2a:f1: dd:be:30:90:07:b2:dc:61:23:0f:0c:03:b0:92:46: 13:9e:eb:c1:d4:63:9a:55:a8:05:64:6e:11:15:cf: 85:9e:dc:03:96:e2:b3:d6:a7:35:a6:79:fa:90:08: 5c:82:fc:1b:25:0a:81:f2:4c:89:14:82:26:3a:06: 36:ce:b7:0f:f0:9e:24:54:4f:3b:43:d6:7b:83:9a: f0:20:d5:6e:4b:f2:70:41:60:64:cb:a0:41:fc:4f: 76:3c:f0:a7:68:e3:28:d4:eb:27:69:eb:f1:f5:95: d8:8e:04:63:ca:57:f0:38:98:90:be:fd:2d:68:43: 84:c4:8e:1f:9c:3f:28:04:02:7b:a2:24:57:e0:29: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1D:D0:29:B1:7E:DA:B7:B0:DD:1D:30:3A:42:CC:FF:B6:A4:EA:0C X509v3 Authority Key Identifier: keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:02:dd:a0:1d:25:bf:67:25:0a:d6:51:7e:f4:9e:6b:50:f8: f9:b2:51:75:1c:c7:54:33:c9:c2:f8:e3:29:f6:75:44:77:f2: e7:21:0b:f9:f9:59:34:43:ea:b5:c4:38:ea:7f:45:a8:f5:bb: a5:e4:d2:47:35:69:c7:7b:1f:10:60:3a:8e:b8:80:9c:26:3d: c1:fb:41:31:32:c3:a8:d2:a1:9f:db:df:ff:15:96:01:15:a4: 7a:60:81:05:84:97:51:ee:dd:44:4e:01:3c:f9:9d:ac:80:6b: ef:c2:5c:81:77:a9:36:73:e9:df:e8:5d:39:ba:4a:31:dd:cd: 6d:8f:4b:b4:ac:ad:1f:1d:8e:93:0a:8a:28:11:f1:c1:82:28: 1b:d5:ce:1b:d8:b5:65:b5:75:18:6b:c7:9b:c6:74:73:88:c7: ce:eb:81:97:d4:e9:0d:2d:6c:db:52:cc:1a:15:58:28:eb:c1: f1:03:0b:df:25:71:fb:73:e8:79:7a:5d:9c:a7:79:1a:b0:52: be:11:fa:d3:49:16:7d:58:87:12:33:41:89:40:9f:d8:f7:d5: 12:d4:0d:fa:a1:04:c4:bf:7c:f9:c8:a8:21:fb:d2:12:56:7d: 3b:72:42:58:f6:47:40:25:d0:2d:97:f1:b2:17:1d:46:ce:4d: c3:06:6e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF RTcyNDZCOTQwHhcNMjUxMTA0MTgwNTA0WhcNMjUxMTExMTgwNTA0WjAYMRYwFAYD VQQDEw02OTBhNDA1MC0zNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV7fvjY6vV7pnYe0jE7o8XWCfhTuKv32+TkkNfro6hNPaDzRn/S4PhysumLx p/w/5FyWh4XXmH+Y0I4qcRsCZoAnIw7Kki9Xl47DDy+FQhIx8xUXtzVYl8APnOBH 7h/8MSgO6zvWX3ovzbZ95y90ONTlYCeOKvHdvjCQB7LcYSMPDAOwkkYTnuvB1GOa VagFZG4RFc+FntwDluKz1qc1pnn6kAhcgvwbJQqB8kyJFIImOgY2zrcP8J4kVE87 Q9Z7g5rwINVuS/JwQWBky6BB/E92PPCnaOMo1Osnaevx9ZXYjgRjylfwOJiQvv0t aEOExI4fnD8oBAJ7oiRX4ClWoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQd0Cmx ftq3sN0dMDpCzP+2pOoMMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE2Mi8yNkE4MkUwQUREQzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0Nn WGEzVUpIZTZxemJ1Y2thNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVAt2gHSW/ZyUK1lF+9J5rUPj5slF1HMdUM8nC+OMp9nVEd/LnIQv5 +Vk0Q+q1xDjqf0Wo9bul5NJHNWnHex8QYDqOuICcJj3B+0ExMsOo0qGf29//FZYB FaR6YIEFhJdR7t1ETgE8+Z2sgGvvwlyBd6k2c+nf6F05ukox3c1tj0u0rK0fHY6T CoooEfHBgigb1c4b2LVltXUYa8ebxnRziMfO64GX1OkNLWzbUswaFVgo68HxAwvf JXH7c+h5el2cp3kasFK+EfrTSRZ9WIcSM0GJQJ/Y99US1A36oQTEv3z5yKgh+9IS Vn07ckJY9kdAJdAtl/GyFx1Gzk3DBm56 -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:20 2025 by rpki-client