$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft File: HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json) Hash identifier: A8VYFuNQ+nMLJ4ohf9Woyxg7m855Teh8EjWxQsxSYMQ= Subject key identifier: 81:02:3F:23:80:06:59:EE:A4:14:02:8A:98:82:32:27:CD:D9:C6:9A Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 Certificate issuer: /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Certificate serial: 34F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft Manifest number: 34E8 Signing time: Tue 04 Nov 2025 14:59:06 +0000 Manifest this update: Tue 04 Nov 2025 14:59:06 +0000 Manifest next update: Tue 11 Nov 2025 14:59:06 +0000 Files and hashes: 1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: sfwF1NA7v9Ffrm6natZIZZmPlPM6YEFWFsOgY3JuZZ4=) 2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: kYoJR47X3kVYZwmuVMeLLYOoJYr+wMR5mBYYm9JId0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13556 (0x34f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866 Validity Not Before: Nov 4 14:59:06 2025 GMT Not After : Nov 11 14:59:06 2025 GMT Subject: CN=690a14ba-2ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:62:1b:0c:8d:d0:f4:c4:a2:85:13:d6:f5: 78:3c:28:b0:b9:78:2a:64:db:c0:92:04:a1:1c:40: d6:43:c8:82:a6:12:49:10:1b:30:3b:17:95:9f:5e: 85:a0:12:72:c7:a1:33:70:39:e6:b6:ba:63:10:28: c7:6a:ec:f6:64:29:ad:e9:23:23:18:af:fc:ef:ea: 2c:36:54:a4:00:25:6c:2c:4b:86:60:05:78:c0:8f: 56:d9:e3:48:36:64:9c:ae:47:9b:8c:4d:35:27:3c: 49:f3:15:18:73:c4:ee:44:5a:a6:d9:e2:f2:76:1b: 41:8b:6c:c9:45:6f:4c:5c:8d:e5:70:04:db:29:b5: 5f:1e:df:6f:a4:79:ca:5f:ef:a4:02:7d:47:59:d3: da:6b:1f:b8:20:a6:67:64:cd:38:51:30:0d:fe:5a: 3e:7f:46:7a:19:7e:2b:0b:eb:72:7e:c3:2f:2a:d6: 27:92:64:c7:d8:4b:1c:0f:1d:50:70:11:7a:96:96: fe:c3:f0:79:33:21:42:8d:6e:c8:0c:c5:f6:3f:f6: ee:e6:1b:b4:dc:9b:30:07:d5:b4:d1:9b:8a:b2:9d: 28:a8:9d:03:52:fb:ba:75:f0:fe:df:d5:33:b9:d9: d8:dd:32:6e:30:89:2b:8e:83:e2:0e:88:07:4f:a3: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:02:3F:23:80:06:59:EE:A4:14:02:8A:98:82:32:27:CD:D9:C6:9A X509v3 Authority Key Identifier: keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a0:91:5e:ec:14:3b:5e:4b:3d:44:9a:68:a7:cb:01:34:73: db:99:41:15:d3:5e:2d:75:d4:d6:fc:6e:b3:4c:da:f9:89:ef: 94:b7:f0:32:c1:5c:33:dd:24:49:e6:03:d1:8b:fb:cd:95:ce: 75:b0:8e:32:fc:47:ce:4f:e8:80:80:6c:ca:2d:10:16:a2:78: 74:f3:4d:7d:2b:a3:42:3f:de:40:c8:26:71:72:35:2d:59:78: d9:95:71:30:f1:be:fa:3b:b3:5d:1d:6f:50:96:4c:9d:52:c5: c0:70:78:bd:62:93:db:7d:dc:e1:db:22:a0:5a:36:1c:7d:d1: a9:64:7a:a2:21:59:21:f8:83:49:44:30:0f:ce:21:e7:35:dc: 88:36:ed:3c:75:7c:b1:c3:9a:23:b6:2f:50:53:a4:16:fa:8c: a6:ea:f7:5c:a6:f7:07:fa:35:35:b6:b4:81:58:dd:b1:1d:58: 0c:ec:f8:20:b2:46:fa:02:1b:e6:0f:7d:3e:f7:96:2a:9b:bd: ef:3d:8f:c1:fd:dc:79:29:3c:b9:f2:7c:d8:c3:44:99:2e:c3: 6b:b2:f9:82:8e:21:b8:3a:57:03:ce:a1:9f:cf:e2:26:f1:b4: ff:ca:d8:62:bc:7f:aa:08:c4:1c:62:96:8c:d2:63:be:12:c2: 98:65:94:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG MjQ3RDY4NjYwHhcNMjUxMTA0MTQ1OTA2WhcNMjUxMTExMTQ1OTA2WjAYMRYwFAYD VQQDEw02OTBhMTRiYS0yZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrRiGwyN0PTEooUT1vV4PCiwuXgqZNvAkgShHEDWQ8iCphJJEBswOxeVn16F oBJyx6EzcDnmtrpjECjHauz2ZCmt6SMjGK/87+osNlSkACVsLEuGYAV4wI9W2eNI NmScrkebjE01JzxJ8xUYc8TuRFqm2eLydhtBi2zJRW9MXI3lcATbKbVfHt9vpHnK X++kAn1HWdPaax+4IKZnZM04UTAN/lo+f0Z6GX4rC+tyfsMvKtYnkmTH2EscDx1Q cBF6lpb+w/B5MyFCjW7IDMX2P/bu5hu03JswB9W00ZuKsp0oqJ0DUvu6dfD+39Uz udnY3TJuMIkrjoPiDogHT6OVxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIECPyOA BlnupBQCipiCMifN2caaMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7oJFe7BQ7Xks9RJpop8sBNHPbmUEV014tddTW/G6zTNr5ie+Ut/Ay wVwz3SRJ5gPRi/vNlc51sI4y/EfOT+iAgGzKLRAWonh08019K6NCP95AyCZxcjUt WXjZlXEw8b76O7NdHW9QlkydUsXAcHi9YpPbfdzh2yKgWjYcfdGpZHqiIVkh+INJ RDAPziHnNdyINu08dXyxw5ojti9QU6QW+oym6vdcpvcH+jU1trSBWN2xHVgM7Pgg skb6AhvmD30+95Yqm73vPY/B/dx5KTy58nzYw0SZLsNrsvmCjiG4OlcDzqGfz+Im 8bT/ythivH+qCMQcYpaM0mO+EsKYZZTF -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:05 2025 by rpki-client