$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: 1J1AzcDaBfd64iaEvDgRvNMTrPwg9Fs6nP9+fWILn7k= Subject key identifier: E6:C2:9E:F7:73:63:2E:57:FF:F8:1E:87:77:BB:E0:1E:DC:1D:D8:8E Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 08E3 Signing time: Wed 22 Oct 2025 21:07:18 +0000 Manifest this update: Wed 22 Oct 2025 21:07:17 +0000 Manifest next update: Wed 29 Oct 2025 21:07:17 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: MoOfcQw0AirvAYiKI88JIcZqqrFioofAWD0GjJ/skVk=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: +c2DPE0WaPr48QApZCLfEPaMsExO+TZ/BLuuQJmn+Mg=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: /qSqUUquW8P34EzhMbBxrdao9SE8qOtCjPceo9nPsLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Oct 22 21:07:17 2025 GMT Not After : Oct 29 21:07:17 2025 GMT Subject: CN=68f94785-bb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:db:46:84:8a:ee:67:3b:c4:80:bd:1f:63:a7: 25:ba:26:ac:aa:d4:cf:16:bb:ba:40:63:15:d6:a4: 47:36:2a:3e:ae:f3:f4:06:20:fb:80:40:e9:3b:67: 1d:a0:f1:60:6b:bd:de:0b:2f:8c:bc:3a:19:a1:d4: 26:56:e2:fc:c8:73:60:c7:1b:e7:7e:45:dc:2b:3a: 86:80:63:6c:ba:cf:76:92:94:26:e3:12:c2:69:6f: 6c:13:0e:5f:47:63:7b:c5:8d:b0:2d:18:fc:d4:55: 6f:2a:5b:fe:a6:cc:fc:5b:f9:73:b1:05:a5:b7:7c: 91:41:97:30:de:9d:6e:13:fc:53:93:74:7b:9e:b6: 37:af:70:53:78:17:f7:58:8f:1a:c4:44:18:5e:89: 4c:87:52:bf:08:68:ef:1c:4b:52:da:08:de:a0:9e: 2b:8a:cd:ce:f0:3b:86:01:a8:05:80:1e:06:c3:cd: 7c:02:f8:53:f7:04:94:39:c1:57:57:57:9e:14:bb: be:58:d7:1f:fa:1f:64:e7:94:44:9a:07:76:2a:bd: 44:11:dc:a0:19:ae:59:9f:61:6f:a2:d1:a1:2a:fc: 00:6d:30:94:63:84:9a:ad:2c:99:d7:ce:77:1c:26: ec:1a:98:42:24:64:c5:de:46:4f:7d:5f:32:bd:9b: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:9E:F7:73:63:2E:57:FF:F8:1E:87:77:BB:E0:1E:DC:1D:D8:8E X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:db:95:c7:04:10:cb:ab:52:fc:eb:4e:6c:a7:5b:7b:51: 06:06:c1:2d:be:a9:c8:b8:5d:22:3a:0a:de:06:2e:6a:67:e7: 57:c3:60:ec:5e:d5:33:3a:92:d1:e4:d9:b6:5f:27:c8:f1:87: 4b:9a:d6:c1:ea:41:03:19:62:b2:23:74:77:28:fc:a3:de:28: 79:53:87:ab:02:ef:73:16:ab:46:7b:48:ff:b9:a6:9b:fd:40: ef:0d:b6:bc:78:7c:91:48:f7:32:07:b0:33:41:92:ff:fd:6c: 5a:83:f1:b9:1a:aa:a6:c3:eb:40:d7:dc:0c:28:1a:6e:c7:49: d3:82:d5:6a:36:8e:59:dc:11:7c:40:09:4d:18:30:57:b5:ec: b0:93:6e:8a:74:4c:fd:5e:31:0d:c2:96:cd:a9:07:7e:b5:8b: 9d:d1:86:d1:f6:30:be:4c:d9:88:49:f3:4f:d5:87:49:ee:cb: 20:e2:b3:e3:a1:f5:7f:a3:06:12:92:72:6a:a6:88:56:fb:2c: 23:61:98:97:44:d8:0e:e5:c2:80:4c:c9:59:d0:3a:07:55:68: 5a:6f:1a:f5:3a:8d:ad:a7:1d:3c:6f:09:f7:a2:4f:38:9c:10: 5e:53:da:81:d2:35:d2:f8:53:b2:0f:2a:f2:5d:96:75:3e:b8: 22:15:a9:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUxMDIyMjEwNzE3WhcNMjUxMDI5MjEwNzE3WjAYMRYwFAYD VQQDEw02OGY5NDc4NS1iYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NtGhIruZzvEgL0fY6cluiasqtTPFru6QGMV1qRHNio+rvP0BiD7gEDpO2cd oPFga73eCy+MvDoZodQmVuL8yHNgxxvnfkXcKzqGgGNsus92kpQm4xLCaW9sEw5f R2N7xY2wLRj81FVvKlv+psz8W/lzsQWlt3yRQZcw3p1uE/xTk3R7nrY3r3BTeBf3 WI8axEQYXolMh1K/CGjvHEtS2gjeoJ4ris3O8DuGAagFgB4Gw818AvhT9wSUOcFX V1eeFLu+WNcf+h9k55REmgd2Kr1EEdygGa5Zn2FvotGhKvwAbTCUY4SarSyZ1853 HCbsGphCJGTF3kZPfV8yvZvhSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObCnvdz Yy5X//geh3e74B7cHdiOMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSctuVxwQQy6tS/OtObKdbe1EGBsEtvqnIuF0iOgreBi5qZ+dXw2Ds XtUzOpLR5Nm2XyfI8YdLmtbB6kEDGWKyI3R3KPyj3ih5U4erAu9zFqtGe0j/uaab /UDvDba8eHyRSPcyB7AzQZL//Wxag/G5Gqqmw+tA19wMKBpux0nTgtVqNo5Z3BF8 QAlNGDBXteywk26KdEz9XjENwpbNqQd+tYud0YbR9jC+TNmISfNP1YdJ7ssg4rPj ofV/owYSknJqpohW+ywjYZiXRNgO5cKATMlZ0DoHVWhabxr1Oo2tpx08bwn3ok84 nBBeU9qB0jXS+FOyDyryXZZ1PrgiFak+ -----END CERTIFICATE-----Generated at Thu Oct 23 04:26:48 2025 by rpki-client