$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft File: hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json) Hash identifier: LCjyta72x6UskY9CMMnk1uxSYb/QVfnzso42YdXSsRg= Subject key identifier: 8E:B8:D2:B6:6C:5D:AB:80:16:0E:D8:A1:E0:95:C8:C6:2C:58:CA:6C Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE Certificate issuer: /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft Manifest number: 95 Signing time: Mon 03 Nov 2025 06:27:47 +0000 Manifest this update: Mon 03 Nov 2025 06:27:46 +0000 Manifest next update: Mon 10 Nov 2025 06:27:46 +0000 Files and hashes: 1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: Qj8gvrQW/RM2NNEW7RatJn8BlZDzbleZ9bli+p9QY3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE Validity Not Before: Nov 3 06:27:46 2025 GMT Not After : Nov 10 06:27:46 2025 GMT Subject: CN=69084b63-6938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:b7:a8:2b:06:07:44:ce:56:6a:31:74:b6: a2:45:59:4d:74:ad:58:c9:11:70:5f:3f:ff:99:0c: 9a:06:80:84:f8:64:eb:82:9a:24:9a:d7:27:dd:3d: ba:88:85:1b:48:5b:97:ff:a2:6c:c8:5b:b1:e3:03: c8:e0:91:88:16:81:85:1f:dc:a0:9b:ad:cb:44:ae: 99:a2:dd:fc:92:57:b5:8d:9b:c4:36:12:d6:eb:af: 2c:5e:fe:55:19:c7:c2:88:7a:b4:62:8e:2f:4a:5c: e0:90:c0:a0:d5:51:6f:b6:32:cd:ab:de:c6:56:86: ec:bb:84:b7:cd:61:97:00:5f:9a:a2:3f:2c:c5:d9: 7c:7e:2b:08:21:d5:2e:a7:76:0c:e7:5a:c8:85:57: c4:68:17:a5:fe:00:7b:e9:c3:b5:d9:af:d4:80:4b: 68:80:75:03:c9:18:a3:e6:34:31:51:d2:36:86:a8: 80:4d:a1:63:36:bd:0f:f8:cf:38:00:b7:27:41:36: 19:3c:fc:bb:2a:28:c2:27:2f:8c:ed:2e:d5:18:03: 89:c2:ea:61:4f:43:fa:b4:23:9f:bc:c5:7a:38:97: 9a:89:ec:ad:15:0f:21:b0:f8:1c:d1:5b:6b:b8:e4: 3c:b8:0e:72:cb:d1:e0:b8:72:e2:1b:d2:63:29:6e: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B8:D2:B6:6C:5D:AB:80:16:0E:D8:A1:E0:95:C8:C6:2C:58:CA:6C X509v3 Authority Key Identifier: keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:14:32:64:11:a0:f5:96:13:fd:d9:0b:cd:ce:69:9f:36: 82:43:9b:73:60:c0:38:8a:d9:49:44:31:12:5b:10:c6:ab:ea: 7b:31:3f:19:e9:af:6f:9c:e9:70:9c:37:c5:45:98:4e:e7:47: e6:26:c0:46:36:67:bb:42:44:ff:bf:ab:62:ad:ff:0f:d9:9b: b6:58:d2:0d:b5:b7:68:c0:01:2b:e6:3c:93:10:d5:e2:01:5f: 51:89:76:ea:a2:46:07:54:4a:6c:60:84:a8:25:1c:35:68:96: 95:74:f5:d9:1d:f7:29:6f:00:03:6f:49:cb:40:c6:4e:30:80: 20:06:29:39:a1:c4:76:17:cb:be:b0:c3:12:e7:48:03:33:5b: ea:c8:ee:cc:0a:fa:61:e0:eb:1a:29:8d:7e:ba:63:2e:b2:81: 93:e2:c2:62:51:de:ec:2a:02:10:b1:48:ca:68:8d:9e:9b:68: da:96:d8:8b:35:4e:fa:27:19:fd:ab:68:94:72:39:bc:d3:02: 03:51:64:8e:63:ba:6d:88:f5:26:55:52:af:85:61:14:bf:72: ed:d6:2f:19:a6:a7:de:cf:82:5e:2b:7a:cd:3c:31:13:f2:30: 5b:1d:52:d8:72:af:f0:84:5a:1c:65:8b:77:21:91:d3:c5:b0: c1:53:b9:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFRUExMTAvBgNVBAUTKDg1Nzc5MDRDNDNDMkE5QkUxMThGRERENUJBN0JCOEI2 MDQ0MzgwRkUwHhcNMjUxMTAzMDYyNzQ2WhcNMjUxMTEwMDYyNzQ2WjAYMRYwFAYD VQQDEw02OTA4NGI2My02OTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZ63qCsGB0TOVmoxdLaiRVlNdK1YyRFwXz//mQyaBoCE+GTrgpokmtcn3T26 iIUbSFuX/6JsyFux4wPI4JGIFoGFH9ygm63LRK6Zot38kle1jZvENhLW668sXv5V GcfCiHq0Yo4vSlzgkMCg1VFvtjLNq97GVobsu4S3zWGXAF+aoj8sxdl8fisIIdUu p3YM51rIhVfEaBel/gB76cO12a/UgEtogHUDyRij5jQxUdI2hqiATaFjNr0P+M84 ALcnQTYZPPy7KijCJy+M7S7VGAOJwuphT0P6tCOfvMV6OJeaieytFQ8hsPgc0Vtr uOQ8uA5yy9HguHLiG9JjKW4RGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI640rZs XauAFg7YoeCVyMYsWMpsMB8GA1UdIwQYMBaAFIV3kExDwqm+EY/d1bp7uLYEQ4D+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUVFQS9FQ0EyQzdENkQ0 Q0YxMUVGOThERjk4MkJDNEY5QUUwMi9oWGVRVEVQQ3FiNFJqOTNWdW51NHRnUkRn UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYZVFURVBDcWI0Umo5M1Z1bnU0dGdSRGdQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUVFQS9FQ0EyQzdENkQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi9oWGVRVEVQQ3Fi NFJqOTNWdW51NHRnUkRnUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONxQyZBGg9ZYT/dkLzc5pnzaCQ5tzYMA4itlJRDESWxDGq+p7MT8Z 6a9vnOlwnDfFRZhO50fmJsBGNme7QkT/v6tirf8P2Zu2WNINtbdowAEr5jyTENXi AV9RiXbqokYHVEpsYISoJRw1aJaVdPXZHfcpbwADb0nLQMZOMIAgBik5ocR2F8u+ sMMS50gDM1vqyO7MCvph4OsaKY1+umMusoGT4sJiUd7sKgIQsUjKaI2em2jaltiL NU76Jxn9q2iUcjm80wIDUWSOY7ptiPUmVVKvhWEUv3Lt1i8Zpqfez4JeK3rNPDET 8jBbHVLYcq/whFocZYt3IZHTxbDBU7n/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:03 2025 by rpki-client