$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft File: HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json) Hash identifier: ZKkn39k8kirGl0wmGmJzH+eJ2MDCYperOS6WiQ69u2E= Subject key identifier: 93:D3:EC:F8:D3:94:1A:7E:A6:B6:43:2F:AD:4E:DC:DE:5E:0D:13:F1 Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E Certificate issuer: /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 14:25:42 +0000 Manifest this update: Sun 02 Nov 2025 14:25:41 +0000 Manifest next update: Sun 09 Nov 2025 14:25:41 +0000 Files and hashes: 1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: ln2TSAJuqySEEAmNfbHN87KrSZjGYde76U/ivxVCPZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E Validity Not Before: Nov 2 14:25:41 2025 GMT Not After : Nov 9 14:25:41 2025 GMT Subject: CN=690769e5-699e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f1:09:f5:6a:2d:a1:5c:8b:78:bd:f7:88:0b: 0f:b7:68:8e:67:10:fb:e5:c1:d9:e7:b0:a1:36:64: da:0b:7a:fa:7d:37:77:55:b0:a3:c5:a8:cd:bc:c3: 15:5f:2a:9a:c4:7d:ad:de:cc:83:28:c9:0a:ef:a3: dc:ed:1a:d7:fb:a4:f8:5c:1b:b2:77:d2:65:2f:8c: 36:f9:9d:2a:18:10:6f:58:3a:c4:3a:42:3f:13:28: f6:30:c0:51:68:4c:6f:a4:55:4a:6c:23:37:15:4f: bc:e1:d5:3c:b6:fc:92:a6:76:96:a3:5d:2c:24:c0: 57:23:29:82:6c:8f:bb:0f:91:35:4e:f5:c0:8c:c0: 72:1c:aa:aa:4e:c1:a4:41:b2:8d:07:d2:b9:88:d3: 57:f8:25:c8:95:59:ac:36:6e:f1:71:d3:3d:0d:ba: 2a:ab:e8:33:b5:90:56:d2:1c:84:f4:c0:73:ee:1d: fd:07:58:a7:58:9e:26:61:d9:b9:24:24:c7:4d:e0: 6c:9f:41:46:8a:73:e4:b2:00:03:c0:14:71:07:a2: 3b:fc:ee:6d:17:12:18:51:c3:2b:95:06:9c:22:8b: 77:16:0b:ca:f2:de:25:9c:32:7c:4d:8c:6d:fe:37: 26:1d:0c:4b:93:fb:a8:fa:1f:b5:b4:3c:60:0d:d3: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D3:EC:F8:D3:94:1A:7E:A6:B6:43:2F:AD:4E:DC:DE:5E:0D:13:F1 X509v3 Authority Key Identifier: keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:9c:24:62:36:2b:00:6f:bd:c2:e1:4a:7f:32:21:be:fb:64: 4a:6d:e4:de:f4:ad:91:21:a5:73:85:71:90:2f:c9:9b:b3:b8: ca:8f:df:fc:3a:ff:4a:d2:34:92:44:af:f6:8a:18:32:45:ea: 84:ca:5c:d9:83:50:53:b7:f1:4c:6c:b4:b5:2c:28:6a:ee:6d: 9a:70:0c:15:65:39:ce:04:de:ae:2c:ff:d1:63:52:06:ee:4c: 8b:a8:3f:58:f7:fe:bf:e7:c2:64:01:6e:c4:d2:7f:e7:e5:02: dd:96:0a:e5:cb:64:26:bd:65:65:dd:e9:1f:f7:ed:65:26:9e: 44:69:17:39:9e:fe:04:ea:52:e9:ca:ca:ee:9c:8e:65:79:98: 52:6a:07:27:b0:13:65:9c:36:4d:73:2c:4a:74:1a:a3:69:ba: 2e:cf:dc:b3:f8:6b:cb:1a:c9:da:0a:83:ff:ef:f8:b1:a1:83: 58:34:ae:48:0b:55:50:44:39:17:18:21:12:e7:9a:ee:d7:1d: 7f:4a:97:d1:a7:9f:a9:1f:ff:21:f9:59:8a:75:d9:6b:f0:68: c7:bc:7a:c9:ce:2f:ff:0f:6f:8f:a2:ad:ff:94:82:bc:ea:c9: 37:30:3e:54:8d:29:07:1e:e3:55:b1:23:97:bd:3d:1d:de:46: b7:59:f4:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2 MTMxMUJGNEUwHhcNMjUxMTAyMTQyNTQxWhcNMjUxMTA5MTQyNTQxWjAYMRYwFAYD VQQDEw02OTA3NjllNS02OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vEJ9WotoVyLeL33iAsPt2iOZxD75cHZ57ChNmTaC3r6fTd3VbCjxajNvMMV XyqaxH2t3syDKMkK76Pc7RrX+6T4XBuyd9JlL4w2+Z0qGBBvWDrEOkI/Eyj2MMBR aExvpFVKbCM3FU+84dU8tvySpnaWo10sJMBXIymCbI+7D5E1TvXAjMByHKqqTsGk QbKNB9K5iNNX+CXIlVmsNm7xcdM9Dboqq+gztZBW0hyE9MBz7h39B1inWJ4mYdm5 JCTHTeBsn0FGinPksgADwBRxB6I7/O5tFxIYUcMrlQacIot3FgvK8t4lnDJ8TYxt /jcmHQxLk/uo+h+1tDxgDdNLxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPT7PjT lBp+prZDL61O3N5eDRPxMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQnCRiNisAb73C4Up/MiG++2RKbeTe9K2RIaVzhXGQL8mbs7jKj9/8 Ov9K0jSSRK/2ihgyReqEylzZg1BTt/FMbLS1LChq7m2acAwVZTnOBN6uLP/RY1IG 7kyLqD9Y9/6/58JkAW7E0n/n5QLdlgrly2QmvWVl3ekf9+1lJp5EaRc5nv4E6lLp ysrunI5leZhSagcnsBNlnDZNcyxKdBqjabouz9yz+GvLGsnaCoP/7/ixoYNYNK5I C1VQRDkXGCES55ru1x1/SpfRp5+pH/8h+VmKddlr8GjHvHrJzi//D2+Poq3/lIK8 6sk3MD5UjSkHHuNVsSOXvT0d3ka3WfR4 -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:53 2025 by rpki-client