$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: 4+HT8W6JLXcJvtx4oOjjqUvOLHbpHLDts2WCIBpn0qk= Subject key identifier: 2C:A0:E5:3F:3F:5F:11:3F:4A:32:4F:35:37:E2:91:87:3D:F9:4E:5F Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:35:05 +0000 Manifest this update: Mon 27 Oct 2025 07:35:05 +0000 Manifest next update: Mon 03 Nov 2025 07:35:05 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: chQhXc7YGhVSnDUobgDay5/42hPyeScypC/qt6ygVcc=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: zU0ivsUwwPcioIh+SJNEn0/D/vk8mXy+zIutWbBZmTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Oct 27 07:35:05 2025 GMT Not After : Nov 3 07:35:05 2025 GMT Subject: CN=68ff20a9-5019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:1e:fa:f7:91:aa:37:7a:38:4a:89:91:e9: a0:cc:24:35:19:c7:3a:7c:a7:4f:6a:2d:f6:5a:ba: 95:a4:13:f2:37:6d:ac:b6:86:e5:54:6a:a2:3a:60: c8:aa:15:69:3a:4f:92:7a:20:43:88:7f:6d:3d:56: 5d:84:11:89:24:3d:e9:fd:20:25:95:82:12:dd:95: ea:42:e4:c2:af:e9:51:de:70:b7:d8:00:1f:6d:c4: 0e:b2:38:63:9f:4f:5f:eb:30:8f:dc:d5:34:33:03: f8:21:c0:01:9e:2b:8e:10:3d:ba:3c:e6:1d:ec:6f: 5d:f0:4a:58:24:e5:01:c5:16:7b:4c:b2:fb:ac:ad: aa:ad:4a:f1:9d:a4:d4:67:6b:f9:5a:8c:20:a3:3a: 69:56:d4:f2:d9:97:45:d9:af:54:92:11:09:83:e1: b7:c2:47:05:f7:a9:fb:65:ff:fd:f3:cd:7b:9b:f4: eb:61:af:c8:73:90:24:12:07:23:79:0d:21:5b:81: 78:bc:b0:44:f6:be:a9:74:41:ed:73:fa:41:14:c6: a6:47:ac:80:92:c0:36:52:a5:17:fc:c4:ab:ec:27: 0e:d4:0c:73:14:e8:fd:51:9e:d4:3e:2c:81:16:6f: 91:44:32:11:56:b8:cd:75:f2:9f:22:65:fe:23:8d: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:E5:3F:3F:5F:11:3F:4A:32:4F:35:37:E2:91:87:3D:F9:4E:5F X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ae:25:63:50:5a:bc:d2:7f:5f:85:6c:89:fb:c0:2c:d9:8c: 68:03:94:fc:d0:53:d1:c5:93:c9:e8:c2:58:6e:5b:86:05:b5: d7:9b:3f:cf:42:5f:38:a3:10:e9:af:74:bf:7e:d1:b9:b2:75: 72:bf:6a:83:3e:dd:b7:d1:1c:11:c6:e0:c1:c6:d8:3a:76:20: b6:da:86:b2:a6:b8:23:fa:75:9e:4d:ab:f9:d7:39:3d:7a:f0: ac:32:79:e5:91:5c:0a:a1:39:2d:c8:a2:f9:d8:3f:e0:ea:32: 5e:81:72:ad:1e:8a:65:85:87:c0:a1:94:b7:af:3b:6d:02:fe: 47:2e:19:19:e2:19:3c:ab:d0:a1:b7:d7:3b:28:75:e9:4d:05: 21:64:7a:41:ab:e0:62:91:f1:42:64:81:1b:8b:71:6f:c6:63: 69:49:b3:21:9a:14:fe:51:63:6c:56:c0:6a:94:05:8e:77:e8: a3:00:c3:90:18:00:31:0c:bd:0c:89:68:77:e6:4a:64:61:65: 61:38:52:a9:52:2a:82:af:a5:e0:3d:5d:2d:87:2f:14:21:74: f1:ac:3c:02:7e:8c:98:8a:60:0f:d8:b1:3c:38:70:85:33:a0: 88:22:e8:fa:e2:38:3b:9b:8a:d0:df:97:fa:f7:23:a2:59:4d: 83:95:e3:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMDI3MDczNTA1WhcNMjUxMTAzMDczNTA1WjAYMRYwFAYD VQQDEw02OGZmMjBhOS01MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbce+veRqjd6OEqJkemgzCQ1Gcc6fKdPai32WrqVpBPyN22stoblVGqiOmDI qhVpOk+SeiBDiH9tPVZdhBGJJD3p/SAllYIS3ZXqQuTCr+lR3nC32AAfbcQOsjhj n09f6zCP3NU0MwP4IcABniuOED26POYd7G9d8EpYJOUBxRZ7TLL7rK2qrUrxnaTU Z2v5WowgozppVtTy2ZdF2a9UkhEJg+G3wkcF96n7Zf/98817m/TrYa/Ic5AkEgcj eQ0hW4F4vLBE9r6pdEHtc/pBFMamR6yAksA2UqUX/MSr7CcO1AxzFOj9UZ7UPiyB Fm+RRDIRVrjNdfKfImX+I42uJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyg5T8/ XxE/SjJPNTfikYc9+U5fMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKriVjUFq80n9fhWyJ+8As2YxoA5T80FPRxZPJ6MJYbluGBbXXmz/P Ql84oxDpr3S/ftG5snVyv2qDPt230RwRxuDBxtg6diC22oayprgj+nWeTav51zk9 evCsMnnlkVwKoTktyKL52D/g6jJegXKtHoplhYfAoZS3rzttAv5HLhkZ4hk8q9Ch t9c7KHXpTQUhZHpBq+BikfFCZIEbi3FvxmNpSbMhmhT+UWNsVsBqlAWOd+ijAMOQ GAAxDL0MiWh35kpkYWVhOFKpUiqCr6XgPV0thy8UIXTxrDwCfoyYimAP2LE8OHCF M6CIIuj64jg7m4rQ35f69yOiWU2DleNX -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:12 2025 by rpki-client