$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: D+i7RR4SlCcrHctPXpRoQpCOVVIriUQHGmLJUQHwq6o= Subject key identifier: 89:C6:07:80:B5:C0:D4:85:40:8F:96:3B:8C:C3:A1:56:0B:21:E3:FF Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: BE Signing time: Mon 03 Nov 2025 05:55:46 +0000 Manifest this update: Mon 03 Nov 2025 05:55:45 +0000 Manifest next update: Mon 10 Nov 2025 05:55:45 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: U9bPb7waKHRDeUmVfLj3r0YoAsXWlKl6anaQbgwucAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Nov 3 05:55:45 2025 GMT Not After : Nov 10 05:55:45 2025 GMT Subject: CN=690843e2-6725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:0c:ef:c2:9b:74:a3:68:63:74:0c:6b:69: f0:ae:fe:3b:b0:3b:00:8e:ac:13:57:f1:4f:e8:27: 52:51:60:70:4e:a1:72:24:c1:d7:fb:aa:21:51:47: 3f:62:21:5d:2c:b4:70:f7:a0:7f:4f:3b:ba:1f:d8: 58:a0:86:26:d3:6a:90:95:91:0d:f3:92:29:6f:6b: f2:b6:d7:c3:51:87:c3:f5:bc:60:13:2a:34:bf:12: ed:9c:1d:8a:b4:93:c3:c3:8a:05:f3:e5:a4:be:9e: 85:38:8c:b2:c4:b3:c9:28:65:90:e7:76:c9:5b:2a: 1e:f7:26:18:d6:69:62:88:4f:2a:72:37:15:55:bc: 0d:26:fe:80:ba:c5:8c:48:58:6a:5e:48:f3:72:b4: 54:eb:45:b9:7e:d0:58:f3:3d:94:f1:a9:c2:89:3c: dd:2d:9a:5b:5a:ec:cf:45:56:18:eb:88:1a:c2:d1: 49:27:c1:20:46:bc:38:e6:37:c4:89:e1:f2:f5:da: 73:02:4c:99:ff:18:2f:4d:c9:8e:28:23:96:8b:3c: f2:77:25:c7:bf:67:a6:11:be:0a:05:e2:2d:61:86: 7c:ce:a9:69:96:26:bb:35:63:05:b5:23:b7:ab:a8: ee:34:c7:9f:44:26:45:7c:39:a6:30:33:19:b2:cc: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:07:80:B5:C0:D4:85:40:8F:96:3B:8C:C3:A1:56:0B:21:E3:FF X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:96:fb:e6:df:bc:a8:dc:0a:08:62:07:91:5a:82:46:45:98: 8d:df:08:9f:ba:05:0d:01:88:49:ee:2b:1c:37:a3:a6:64:c9: f9:67:12:24:9e:d7:ef:a2:da:42:66:57:4b:eb:80:f0:27:b7: 34:91:05:f1:7b:8e:24:cc:47:77:f8:e1:77:ba:d1:01:8e:a9: 48:be:04:ae:dc:2a:fd:07:88:9d:7f:04:29:c9:43:c8:42:96: 39:64:24:cc:a4:cc:a7:33:c4:18:fc:d7:f0:f7:36:51:80:cf: 43:7f:f3:b3:8f:71:5e:d1:2c:ea:5f:56:ff:2b:17:9e:e8:c4: 22:a7:18:90:b3:af:96:5b:a3:b4:2c:79:9c:b2:94:a6:a8:18: 2e:d3:54:0d:66:e4:81:61:bd:cb:16:dd:fa:81:82:c7:4d:56: b0:69:d1:ad:7f:b3:75:d1:96:77:5b:74:7e:9a:1a:0c:e0:0a: 16:ab:f0:78:52:d7:f0:16:5d:48:25:4b:ca:c4:ae:61:af:7f: c6:24:bc:dd:8c:0c:fb:ff:bf:65:f9:47:9a:1c:6c:7b:ca:d5: 50:7c:3d:23:1a:c9:95:7a:b2:eb:e1:c1:44:97:92:17:e4:c5: bf:14:91:ba:84:25:e3:4a:92:b4:6b:8c:59:02:7b:ea:f9:bd: cc:bc:b2:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC MkYxMjkyNTEwHhcNMjUxMTAzMDU1NTQ1WhcNMjUxMTEwMDU1NTQ1WjAYMRYwFAYD VQQDEw02OTA4NDNlMi02NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZsM78KbdKNoY3QMa2nwrv47sDsAjqwTV/FP6CdSUWBwTqFyJMHX+6ohUUc/ YiFdLLRw96B/Tzu6H9hYoIYm02qQlZEN85Ipb2vyttfDUYfD9bxgEyo0vxLtnB2K tJPDw4oF8+Wkvp6FOIyyxLPJKGWQ53bJWyoe9yYY1mliiE8qcjcVVbwNJv6AusWM SFhqXkjzcrRU60W5ftBY8z2U8anCiTzdLZpbWuzPRVYY64gawtFJJ8EgRrw45jfE ieHy9dpzAkyZ/xgvTcmOKCOWizzydyXHv2emEb4KBeItYYZ8zqlplia7NWMFtSO3 q6juNMefRCZFfDmmMDMZsszSBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInGB4C1 wNSFQI+WO4zDoVYLIeP/MB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1 NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI SWdJRVVYUUc0X2F5OFNrbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZlvvm37yo3AoIYgeRWoJGRZiN3wifugUNAYhJ7iscN6OmZMn5ZxIk ntfvotpCZldL64DwJ7c0kQXxe44kzEd3+OF3utEBjqlIvgSu3Cr9B4idfwQpyUPI QpY5ZCTMpMynM8QY/Nfw9zZRgM9Df/Ozj3Fe0SzqX1b/Kxee6MQipxiQs6+WW6O0 LHmcspSmqBgu01QNZuSBYb3LFt36gYLHTVawadGtf7N10ZZ3W3R+mhoM4AoWq/B4 UtfwFl1IJUvKxK5hr3/GJLzdjAz7/79l+UeaHGx7ytVQfD0jGsmVerLr4cFEl5IX 5MW/FJG6hCXjSpK0a4xZAnvq+b3MvLK4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:36 2025 by rpki-client