$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft File: HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json) Hash identifier: Q85KcsTO89+gHIHBu1MsBEavUx4nCHke5jhyV1ywjZs= Subject key identifier: 52:10:9B:0C:3A:AC:30:3B:FF:75:BF:A7:F0:24:96:7C:65:E2:27:06 Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 06:35:22 +0000 Manifest this update: Wed 05 Nov 2025 06:35:22 +0000 Manifest next update: Wed 12 Nov 2025 06:35:22 +0000 Files and hashes: 1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: t8Owmk6fOMeLRUqvi2UDb+mNsc10qC6zM+Ou37x5sDM=) 2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: ne8tUgudan5gCr0Fj4AbK9IugW5sTtsGHmdJgQPhqp8=) 3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: vLRSLWwCPlw1XgMXqIwjNZRh5iifhLT67LBNrNkXRO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED Validity Not Before: Nov 5 06:35:22 2025 GMT Not After : Nov 12 06:35:22 2025 GMT Subject: CN=690af02a-d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:d8:eb:97:22:eb:e1:fa:f4:5b:32:99:75: 06:5d:8e:df:a6:c0:5e:5f:71:4c:02:b2:f0:26:08: c7:b8:76:bd:c4:81:08:8f:41:d4:5f:cd:58:c8:20: 41:02:17:76:84:96:78:ab:0c:fc:43:1b:60:76:5f: 59:26:8a:63:66:e6:82:d1:00:c2:70:63:87:9d:72: 80:2b:73:74:43:bc:c9:8a:57:e7:2a:29:5f:cc:bd: f5:a8:74:ab:d9:61:95:31:a9:23:9f:33:85:14:a6: aa:bd:56:f7:17:89:c2:05:9b:d8:58:d0:fa:f3:00: d8:07:01:55:5f:a6:05:2f:34:21:71:09:68:97:5b: 1b:8f:8a:fb:6f:99:14:f0:61:c4:cd:39:28:86:44: 0c:0b:ab:3f:c2:ee:8d:0a:3b:18:a9:e1:4c:2b:1d: e0:72:51:cf:eb:a6:3f:00:6e:e0:8f:a3:f8:77:52: 37:d2:f1:b4:33:4a:c9:3b:f6:eb:2e:91:38:f0:a7: 75:f7:c8:c1:90:15:36:3d:c1:7b:65:93:a9:6c:3f: 65:e8:65:26:ef:e7:dc:92:8d:6c:e0:a2:c0:1a:18: 6b:e1:f8:8e:d5:da:11:0f:38:1e:66:d4:ac:c0:3b: 3a:5d:70:cd:d0:0b:16:9a:4b:3b:23:f0:d3:91:ff: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:9B:0C:3A:AC:30:3B:FF:75:BF:A7:F0:24:96:7C:65:E2:27:06 X509v3 Authority Key Identifier: keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:23:e7:1f:df:35:f5:08:f3:f1:cf:e3:72:d9:fb:84:08:18: b1:30:86:32:82:31:76:84:03:45:3a:ac:cb:42:d9:87:0e:e9: 86:59:21:dc:66:be:9d:8d:82:53:a6:3d:ba:d3:64:cc:6a:fa: 47:41:fb:4a:31:9d:86:ac:72:d3:2d:f3:15:13:65:5f:ea:ce: 78:87:6e:fa:00:fd:88:13:ed:87:65:43:b8:14:e5:b3:80:7e: 6f:74:20:35:ec:6d:f4:47:13:f9:05:b5:30:7a:11:84:6b:60: f3:a3:ba:cd:92:1c:c4:d0:86:29:93:65:5c:a0:3f:14:c8:4e: eb:2d:67:84:83:94:52:9a:f5:d6:a7:9a:6b:de:2a:67:70:47: a6:c5:cf:0b:d9:0f:42:33:8d:ed:19:e3:20:53:2b:0b:06:70: d4:3d:f8:32:6e:e1:58:30:d6:64:4c:c5:b8:d8:e1:98:0c:74: 7c:f5:ff:81:cf:9d:0e:4c:47:dc:0c:15:bc:6b:4a:61:16:cc: 21:07:1c:83:a2:9b:27:de:f1:17:d7:80:48:24:75:da:02:d7: 12:32:dd:c1:49:77:63:1d:80:e3:ba:22:38:a7:8b:64:93:be: 84:0e:a9:c5:b4:8f:09:75:46:15:31:2c:40:20:5d:a0:a5:22: b0:be:2d:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1 NkM1N0FERUQwHhcNMjUxMTA1MDYzNTIyWhcNMjUxMTEyMDYzNTIyWjAYMRYwFAYD VQQDEw02OTBhZjAyYS1kMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7rY65ci6+H69FsymXUGXY7fpsBeX3FMArLwJgjHuHa9xIEIj0HUX81YyCBB Ahd2hJZ4qwz8Qxtgdl9ZJopjZuaC0QDCcGOHnXKAK3N0Q7zJilfnKilfzL31qHSr 2WGVMakjnzOFFKaqvVb3F4nCBZvYWND68wDYBwFVX6YFLzQhcQlol1sbj4r7b5kU 8GHEzTkohkQMC6s/wu6NCjsYqeFMKx3gclHP66Y/AG7gj6P4d1I30vG0M0rJO/br LpE48Kd198jBkBU2PcF7ZZOpbD9l6GUm7+fcko1s4KLAGhhr4fiO1doRDzgeZtSs wDs6XXDN0AsWmks7I/DTkf9V5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIQmww6 rDA7/3W/p/Aklnxl4icGMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wMDNBNzlEQUNGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGcz UHQzOHNhMWNUQ05XeFhyZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDI+cf3zX1CPPxz+Ny2fuECBixMIYygjF2hANFOqzLQtmHDumGWSHc Zr6djYJTpj2602TMavpHQftKMZ2GrHLTLfMVE2Vf6s54h276AP2IE+2HZUO4FOWz gH5vdCA17G30RxP5BbUwehGEa2Dzo7rNkhzE0IYpk2VcoD8UyE7rLWeEg5RSmvXW p5pr3ipncEemxc8L2Q9CM43tGeMgUysLBnDUPfgybuFYMNZkTMW42OGYDHR89f+B z50OTEfcDBW8a0phFswhBxyDopsn3vEX14BIJHXaAtcSMt3BSXdjHYDjuiI4p4tk k76EDqnFtI8JdUYVMSxAIF2gpSKwvi3B -----END CERTIFICATE-----Generated at Thu Nov 6 04:28:56 2025 by rpki-client