$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: tVqXLlcjspkALHCqJXtv+P2csL62SnlFN8srtXCOSQg= Subject key identifier: BD:FA:2C:B4:12:77:4B:38:35:02:AB:9B:38:DD:13:1E:10:E0:62:71 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 9B Signing time: Wed 05 Nov 2025 06:35:20 +0000 Manifest this update: Wed 05 Nov 2025 06:35:19 +0000 Manifest next update: Wed 12 Nov 2025 06:35:19 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: QBF/ibCnrNko0c6pnOM+7y6/J6Skgsbay9USVwIFT/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: Nov 5 06:35:19 2025 GMT Not After : Nov 12 06:35:19 2025 GMT Subject: CN=690af027-c03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:c7:ac:a3:ce:88:87:c6:30:97:e4:3d:18: bd:3c:ce:23:df:67:23:b0:39:df:2f:7f:da:86:e5: 4d:45:f8:44:be:6b:d5:ea:b8:d7:8d:93:20:df:7f: d8:74:d1:90:4b:39:3c:a3:77:b2:55:bb:ca:5d:a5: 3c:05:52:95:be:e7:50:1a:2c:d3:8d:a2:a1:a9:7b: 70:5b:4d:9d:91:b2:14:04:04:95:b0:a5:14:18:50: 7f:10:39:9b:57:2a:9c:9a:32:43:9a:53:d4:8c:70: f0:0a:fa:3f:3f:5a:7a:b4:61:ca:2d:0e:e1:55:b5: ab:ec:e0:4e:15:0d:41:28:ae:a2:10:c7:e4:4b:4f: 92:be:61:75:c4:d3:ae:a9:96:3a:18:86:06:54:bf: 36:28:0a:d1:fb:f6:6f:3a:f3:11:42:81:9b:d1:2d: eb:7b:91:4e:bc:24:49:49:13:48:87:ee:d0:4f:62: 43:a6:62:f5:67:ca:7a:76:ce:f4:9a:51:1b:2d:b2: 9e:56:4c:e3:21:9e:ae:62:dc:58:e6:fa:80:66:ab: 86:cb:82:86:b8:02:57:c8:28:80:87:bd:0a:c1:fc: 75:7e:23:e2:25:db:c6:f5:a4:2e:2a:41:a8:ea:69: b6:70:1b:5d:50:6d:42:99:86:20:51:4b:a5:ac:b0: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:2C:B4:12:77:4B:38:35:02:AB:9B:38:DD:13:1E:10:E0:62:71 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ef:76:eb:92:b8:df:8f:a9:71:d7:10:5e:42:ba:ed:12:cf: fd:6a:f0:a0:32:69:e9:cc:7b:b9:e1:d2:fe:56:f1:9f:5b:8d: b1:1d:2d:41:95:5a:bc:a5:04:09:d4:0d:0c:1d:07:f4:05:e3: 0e:b2:1c:08:5b:25:94:f4:90:67:f6:c1:67:a8:33:ca:5a:a1: 21:26:e3:92:a3:23:9a:92:49:a4:eb:74:7b:fe:af:e4:6c:fd: bd:35:d7:e8:df:f6:a6:83:a5:1e:a9:ba:4c:a2:7a:0c:6a:0f: cc:ae:5f:a6:c3:59:18:29:ee:24:95:ec:50:94:0c:ef:81:39: 04:7d:bd:90:41:78:01:b7:e8:86:5e:8b:a6:1a:ae:5a:bc:22: 7c:37:1f:ea:4c:d0:cb:73:35:89:a0:c7:04:4b:16:15:22:cb: 78:cf:53:50:06:8f:24:3c:1f:5a:4b:f9:2a:d2:29:cc:05:d7: b5:c4:be:4a:83:f8:61:f9:cf:a8:ca:d1:59:e7:6f:f9:26:0a: 3d:5a:f7:53:26:b4:ef:e5:c3:e7:a7:9c:13:69:0e:94:12:a1: ef:a6:f6:e9:12:b7:87:26:6e:c9:5b:07:80:55:3e:07:43:8e: 27:72:98:72:e5:c8:a4:18:85:11:e0:54:b8:8a:b0:6a:db:60: ae:8c:a3:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFFOUIwRDE2M0NFMEFBMTFFOTFENTU2MEY1QTNDQzY2 OUUzMjkxRUYwHhcNMjUxMTA1MDYzNTE5WhcNMjUxMTEyMDYzNTE5WjAYMRYwFAYD VQQDEw02OTBhZjAyNy1jMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv7HrKPOiIfGMJfkPRi9PM4j32cjsDnfL3/ahuVNRfhEvmvV6rjXjZMg33/Y dNGQSzk8o3eyVbvKXaU8BVKVvudQGizTjaKhqXtwW02dkbIUBASVsKUUGFB/EDmb VyqcmjJDmlPUjHDwCvo/P1p6tGHKLQ7hVbWr7OBOFQ1BKK6iEMfkS0+SvmF1xNOu qZY6GIYGVL82KArR+/ZvOvMRQoGb0S3re5FOvCRJSRNIh+7QT2JDpmL1Z8p6ds70 mlEbLbKeVkzjIZ6uYtxY5vqAZquGy4KGuAJXyCiAh70Kwfx1fiPiJdvG9aQuKkGo 6mm2cBtdUG1CmYYgUUulrLCA4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL36LLQS d0s4NQKrmzjdEx4Q4GJxMB8GA1UdIwQYMBaAFB6bDRY84KoR6R1VYPWjzGaeMpHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wOTUzMEE4Q0NG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3FoSHBIVlZnOWFQTVpwNHlr ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wOTUzMEE4Q0NGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3Fo SHBIVlZnOWFQTVpwNHlrZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh73brkrjfj6lx1xBeQrrtEs/9avCgMmnpzHu54dL+VvGfW42xHS1B lVq8pQQJ1A0MHQf0BeMOshwIWyWU9JBn9sFnqDPKWqEhJuOSoyOakkmk63R7/q/k bP29Ndfo3/amg6UeqbpMonoMag/Mrl+mw1kYKe4klexQlAzvgTkEfb2QQXgBt+iG XoumGq5avCJ8Nx/qTNDLczWJoMcESxYVIst4z1NQBo8kPB9aS/kq0inMBde1xL5K g/hh+c+oytFZ52/5Jgo9WvdTJrTv5cPnp5wTaQ6UEqHvpvbpEreHJm7JWweAVT4H Q44ncphy5cikGIUR4FS4irBq22CujKML -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:18 2025 by rpki-client