$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft File: HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json) Hash identifier: IMe8i1gMs+zIPsVKkx/W7LLCJbb4pQLv2Srfb06qfbI= Subject key identifier: 6F:D9:6F:D6:58:CB:5F:A8:94:E1:06:D8:B1:FA:A7:37:80:AF:F5:7F Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E Certificate issuer: /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft Manifest number: 3B Signing time: Mon 03 Nov 2025 07:30:31 +0000 Manifest this update: Mon 03 Nov 2025 07:30:30 +0000 Manifest next update: Mon 10 Nov 2025 07:30:30 +0000 Files and hashes: 1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: Q88N6EOnTy4MHQvuK3ce4sua9bIBFvb5Bgs25ieymrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E Validity Not Before: Nov 3 07:30:30 2025 GMT Not After : Nov 10 07:30:30 2025 GMT Subject: CN=69085a17-9550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:5d:9d:1a:a1:2c:f7:80:72:c3:1d:62:bd: 1b:56:6b:4b:09:65:df:d8:e5:44:e3:61:df:9d:27: ba:13:cd:5f:cc:1d:6d:65:44:3b:1b:77:fa:65:ec: d1:63:97:0b:ea:5d:c6:bb:1d:ed:c0:b0:0f:4f:69: 78:92:65:8d:ba:0c:8f:d8:b3:07:ae:23:f9:d5:65: 6f:03:46:23:0c:68:7f:89:14:1c:68:a4:0b:e0:51: 5c:ff:29:94:b9:40:29:e8:0e:d2:a9:31:0a:1d:10: 74:c3:57:b1:a3:5a:3d:3d:ec:f0:f3:d4:f9:97:48: 27:98:83:e5:de:dc:27:71:12:a0:95:fc:f4:17:a4: 02:ba:f8:00:25:a2:ac:75:87:b1:db:72:74:ab:5f: 21:b4:41:6c:d4:13:09:ae:b5:c1:c0:82:87:1c:95: be:c0:46:81:57:f6:98:0b:22:26:23:ef:c6:5d:06: 91:44:dc:99:1f:81:64:25:f1:0c:29:4b:42:43:d1: a9:4e:7a:28:68:66:77:30:e3:eb:77:7d:21:7f:7d: 95:20:d7:f6:ab:4b:41:b0:40:fe:1d:6d:7a:33:55: a2:1c:21:5d:15:3c:92:19:fe:7b:6d:2f:f7:55:f0: 84:3e:46:0e:e4:21:59:dc:20:35:56:e1:ce:ed:21: 2a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D9:6F:D6:58:CB:5F:A8:94:E1:06:D8:B1:FA:A7:37:80:AF:F5:7F X509v3 Authority Key Identifier: keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:eb:10:b6:fb:3d:17:57:33:90:9d:aa:a0:f6:c5:71:cb:94: 06:79:a6:e0:e6:e7:47:51:d4:77:5e:5c:24:25:29:34:81:0c: 42:aa:f3:a8:e4:81:17:19:7d:0d:3f:16:6e:35:6a:13:0c:f8: ca:75:8f:5d:9f:46:00:02:dc:8e:9a:f4:bb:d7:4a:c2:d0:79: f8:a0:65:24:f9:6c:0b:9a:8e:7f:52:fd:04:a2:81:c7:33:eb: 28:80:6b:43:a2:d9:fd:77:5c:c1:85:d5:24:d4:bf:d6:45:7c: af:17:80:d0:22:61:a0:c5:ba:4d:68:ba:0a:db:aa:cf:30:3d: b0:8c:85:50:d2:a6:bb:b5:5b:22:7f:16:8a:bc:55:dd:4f:5c: 2c:f8:d2:04:c2:4b:cc:79:81:cf:10:4b:46:eb:30:21:8f:69: b7:53:5b:a3:19:c8:05:a0:c1:14:63:53:d1:fd:44:f1:89:6b: 21:7e:9e:ce:d0:e7:05:74:9f:ae:4a:97:b8:ce:ee:d3:48:c0: d4:e0:3f:fb:00:f9:f6:35:94:10:6b:f6:db:4c:e7:9c:40:75: d2:43:05:a6:13:a0:b7:e8:a0:a2:9c:8a:93:cf:60:36:77:0b: 9e:9b:22:a4:9f:de:14:09:53:a6:9e:df:80:97:2c:ef:ea:10: b7:e9:cc:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoMUQ1QkUzOTE1MkVBNkQ2REYwOUY5RDg0QUM2OUE5NjFC N0M4Mzg2RTAeFw0yNTExMDMwNzMwMzBaFw0yNTExMTAwNzMwMzBaMBgxFjAUBgNV BAMTDTY5MDg1YTE3LTk1NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaA12dGqEs94Bywx1ivRtWa0sJZd/Y5UTjYd+dJ7oTzV/MHW1lRDsbd/pl7NFj lwvqXca7He3AsA9PaXiSZY26DI/YsweuI/nVZW8DRiMMaH+JFBxopAvgUVz/KZS5 QCnoDtKpMQodEHTDV7GjWj097PDz1PmXSCeYg+Xe3CdxEqCV/PQXpAK6+AAloqx1 h7HbcnSrXyG0QWzUEwmutcHAgocclb7ARoFX9pgLIiYj78ZdBpFE3JkfgWQl8Qwp S0JD0alOeihoZncw4+t3fSF/fZUg1/arS0GwQP4dbXozVaIcIV0VPJIZ/nttL/dV 8IQ+Rg7kIVncIDVW4c7tISrJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb9lv1ljL X6iU4QbYsfqnN4Cv9X8wHwYDVR0jBBgwFoAUHVvjkVLqbW3wn52ErGmpYbfIOG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzRDMDRGMDZBNjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlczd241MkVyR21wWWJmSU9H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFZ2amtWTHFiVzN3bjUyRXJHbXBZYmZJT0c0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 M0YyLzRDMDRGMDZBNjBDMDExRjBBRkI0NTcyQkM0RjlBRTAyL0hWdmprVkxxYlcz d241MkVyR21wWWJmSU9HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACvrELb7PRdXM5CdqqD2xXHLlAZ5puDm50dR1HdeXCQlKTSBDEKq86jk gRcZfQ0/Fm41ahMM+Mp1j12fRgAC3I6a9LvXSsLQefigZST5bAuajn9S/QSigccz 6yiAa0Oi2f13XMGF1STUv9ZFfK8XgNAiYaDFuk1ougrbqs8wPbCMhVDSpru1WyJ/ Foq8Vd1PXCz40gTCS8x5gc8QS0brMCGPabdTW6MZyAWgwRRjU9H9RPGJayF+ns7Q 5wV0n65Kl7jO7tNIwNTgP/sA+fY1lBBr9ttM55xAddJDBaYToLfooKKcipPPYDZ3 C56bIqSf3hQJU6ae34CXLO/qELfpzE4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:36 2025 by rpki-client