$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft File: h_pIRIna7X3O5mDHjYe6LMGtqmI.mft (raw, json) Hash identifier: Od0IYMtC/MB1HUKHI2Zz4Rb8meGNNKTHjRea9NVScIk= Subject key identifier: 21:1B:24:4A:B4:27:69:B1:C4:F5:8D:FB:A8:89:2D:E8:A3:F7:2C:26 Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 Certificate issuer: /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft Manifest number: 56 Signing time: Wed 05 Nov 2025 07:24:08 +0000 Manifest this update: Wed 05 Nov 2025 07:24:07 +0000 Manifest next update: Wed 12 Nov 2025 07:24:07 +0000 Files and hashes: 1: h_pIRIna7X3O5mDHjYe6LMGtqmI.crl (hash: iJqwwcML3gEz6A7dx4d9ldt6/rYE2Kwjlz+ycpw5LPc=) 2: 6A3BD41C38DF11F09B694578C4F9AE02.roa (hash: B3FtQDRvIinRVvF4MBjV/k6jhNbFtX5P5Ext8/M8cjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62 Validity Not Before: Nov 5 07:24:07 2025 GMT Not After : Nov 12 07:24:07 2025 GMT Subject: CN=690afb97-1a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:eb:19:d5:aa:57:40:d5:8c:27:82:42:a0: 4c:f5:34:64:37:8c:00:99:ab:d5:73:8f:7d:fa:b9: f7:12:62:4b:3f:22:72:96:50:5b:d5:5f:2e:f5:45: 2f:e7:e2:b8:70:e2:1e:cd:67:5a:cb:d6:fa:1f:c8: d4:45:9b:57:83:d3:02:0f:05:61:07:7a:34:40:ba: a2:d3:dc:83:37:d3:00:4e:f4:59:62:e6:de:40:b0: 30:50:08:6b:ab:04:94:0b:bc:a0:d0:37:6f:8b:13: 4c:5d:2c:5f:8c:2d:c8:85:ef:b3:28:36:6d:44:85: 12:2c:53:b7:ae:16:a9:e5:66:18:47:10:8b:43:d0: fe:4d:05:27:00:92:cc:15:5f:72:a3:cc:e9:cb:a1: 23:c8:b9:95:bb:10:0d:4b:e0:b5:44:f3:2a:d4:b1: fb:08:30:cb:cb:b3:20:7d:89:1f:25:bc:11:c3:48: b4:c5:7b:ce:f8:7d:10:23:f3:da:d0:4c:c6:44:36: c6:9d:31:a7:ca:13:66:46:2d:bb:0e:75:ed:18:5c: 47:97:37:39:4b:3b:c8:0c:d9:5c:6c:38:1d:2a:4a: c2:70:f3:f0:07:bb:ca:c7:8f:f2:65:b2:bf:32:10: 04:5c:fc:b4:55:91:5c:ef:d7:06:ef:1e:37:c4:0a: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:24:4A:B4:27:69:B1:C4:F5:8D:FB:A8:89:2D:E8:A3:F7:2C:26 X509v3 Authority Key Identifier: keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:af:ab:02:ab:47:56:51:b9:d4:3f:17:fc:9d:67:19:9f:09: 96:d1:3b:b9:12:1b:fd:87:cb:4c:b2:d1:92:06:2b:da:34:68: b2:94:1d:d4:83:77:52:ac:aa:02:82:ec:42:41:d6:ea:c7:e3: 46:33:e5:a1:a6:19:fc:80:03:76:98:2f:6b:3b:d3:1b:e9:bc: 1d:d1:7b:9a:ea:10:47:d0:c9:40:3c:09:00:05:2b:80:2b:18: 2d:ec:f4:8b:35:30:6c:9c:c1:f8:c5:0c:5e:7a:fc:aa:4f:ba: fd:d6:15:be:1c:26:ed:cb:aa:b6:76:0e:36:3a:7b:cf:cb:80: 4d:43:ba:63:90:40:d7:59:f7:a8:d2:e3:4c:57:b3:88:9d:d6: fb:4a:96:13:5b:4d:1f:25:2b:50:47:f9:85:4f:38:f2:ba:ae: d1:27:73:1d:d8:63:7c:b8:b0:83:1f:aa:04:02:b3:f1:63:8a: 22:f0:dd:9d:c6:60:18:a3:c0:10:02:39:fb:27:12:1d:8f:18: db:7b:e0:f3:bb:76:49:b9:e7:8f:42:d2:6b:1f:3c:cd:03:1c: 20:cd:60:18:7b:4d:e5:33:2d:cc:23:5b:b5:e4:35:20:f7:d3: 88:44:59:6a:b4:4a:0e:b9:c9:bd:55:13:b4:f5:fa:cc:44:b3: d2:c8:8c:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTk2MjExMC8GA1UEBRMoODdGQTQ4NDQ4OURBRUQ3RENFRTY2MEM3OEQ4N0JBMkND MUFEQUE2MjAeFw0yNTExMDUwNzI0MDdaFw0yNTExMTIwNzI0MDdaMBgxFjAUBgNV BAMTDTY5MGFmYjk3LTFhNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzSOsZ1apXQNWMJ4JCoEz1NGQ3jACZq9Vzj336ufcSYks/InKWUFvVXy71RS/n 4rhw4h7NZ1rL1vofyNRFm1eD0wIPBWEHejRAuqLT3IM30wBO9Fli5t5AsDBQCGur BJQLvKDQN2+LE0xdLF+MLciF77MoNm1EhRIsU7euFqnlZhhHEItD0P5NBScAkswV X3KjzOnLoSPIuZW7EA1L4LVE8yrUsfsIMMvLsyB9iR8lvBHDSLTFe874fRAj89rQ TMZENsadMafKE2ZGLbsOde0YXEeXNzlLO8gM2VxsOB0qSsJw8/AHu8rHj/Jlsr8y EARc/LRVkVzv1wbvHjfEClh3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIRskSrQn abHE9Y37qIkt6KP3LCYwHwYDVR0jBBgwFoAUh/pIRIna7X3O5mDHjYe6LMGtqmIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxOTYyL0FFQkMwOEZBMzcx MzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gzTzVtREhqWWU2TE1HdHFt SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaF9wSVJJbmE3WDNPNW1ESGpZZTZMTUd0cW1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx OTYyL0FFQkMwOEZBMzcxMzExRjBBQjBEOUU0RUM0RjlBRTAyL2hfcElSSW5hN1gz TzVtREhqWWU2TE1HdHFtSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKvqwKrR1ZRudQ/F/ydZxmfCZbRO7kSG/2Hy0yy0ZIGK9o0aLKUHdSD d1KsqgKC7EJB1urH40Yz5aGmGfyAA3aYL2s70xvpvB3Re5rqEEfQyUA8CQAFK4Ar GC3s9Is1MGycwfjFDF56/KpPuv3WFb4cJu3LqrZ2DjY6e8/LgE1DumOQQNdZ96jS 40xXs4id1vtKlhNbTR8lK1BH+YVPOPK6rtEncx3YY3y4sIMfqgQCs/FjiiLw3Z3G YBijwBACOfsnEh2PGNt74PO7dkm5549C0msfPM0DHCDNYBh7TeUzLcwjW7XkNSD3 04hEWWq0Sg65yb1VE7T1+sxEs9LIjPI= -----END CERTIFICATE-----Generated at Thu Nov 6 01:19:48 2025 by rpki-client