$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft File: rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json) Hash identifier: 83eeYlA1hITuMfYb408cpIvdUD6K0WHcUoEPqu0FOUs= Subject key identifier: 00:65:8E:CA:6F:F7:E9:08:43:4B:16:EC:B8:5B:13:79:11:60:93:C3 Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 Certificate issuer: /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Certificate serial: 04A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft Manifest number: 0498 Signing time: Mon 03 Nov 2025 00:00:28 +0000 Manifest this update: Mon 03 Nov 2025 00:00:27 +0000 Manifest next update: Mon 10 Nov 2025 00:00:27 +0000 Files and hashes: 1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: UvIsFl94y3XTH1jSOegaNpGRjC5Z8RKIHsz3XKk9G9I=) 2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: etY8R8Zkoq3Jr+o5iT0vM2/Uvx5KoKGB+//fjS6auO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3 Validity Not Before: Nov 3 00:00:27 2025 GMT Not After : Nov 10 00:00:27 2025 GMT Subject: CN=6907f09c-04dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:3c:ba:44:a7:00:7c:41:59:31:18:08:e2: 0a:f5:7a:45:e8:48:5d:b3:10:ed:8f:13:f3:e0:70: 17:30:11:8e:42:ec:16:e9:ab:21:9f:2f:b6:eb:19: 11:ba:ea:c0:d2:75:b0:cf:00:9d:27:8a:9c:f0:e7: 88:da:39:15:56:31:30:e3:18:96:d0:73:f1:ad:5a: ff:c5:c3:c7:f1:ea:f8:02:c8:4e:5c:5f:4b:bf:9a: 9d:64:7a:78:41:f0:50:cf:c4:a1:5c:ff:1f:36:9a: c2:ce:4d:f7:75:76:2b:ca:c7:47:1c:73:69:6a:fe: fd:dd:e9:50:4f:89:60:67:91:95:55:fc:69:51:20: a0:53:ba:78:5e:54:4d:2a:d9:e7:b3:0d:d9:7a:10: 7a:34:9f:d6:d8:cf:c5:04:b4:3b:78:24:76:c7:23: e2:fe:b4:35:a0:f0:cb:ff:de:1b:74:ca:3f:39:e7: 8a:89:26:2a:7c:be:46:31:d7:5a:36:8c:6a:cf:ca: e2:d5:be:38:19:aa:33:d2:cb:3f:91:39:b3:ff:c1: ce:2d:74:e3:d7:e0:04:ae:b7:01:67:10:2d:08:2a: 4e:9c:d8:49:80:62:8d:ab:58:b8:20:b5:99:e5:bb: 1f:11:4d:6b:cf:08:cc:50:38:c2:af:26:fa:fc:41: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:65:8E:CA:6F:F7:E9:08:43:4B:16:EC:B8:5B:13:79:11:60:93:C3 X509v3 Authority Key Identifier: keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d0:ae:40:b1:d3:6e:ec:46:8e:ff:c4:cb:99:d4:d1:f8:3b: 2c:6d:cb:7a:87:62:4d:98:e1:ed:7f:31:4b:9f:bd:0d:e1:2e: 33:ec:ec:a4:2c:63:64:12:37:7a:a7:78:7d:ea:e2:98:91:9b: 5c:4d:9e:71:12:83:14:1b:2f:01:36:a5:9e:06:dc:fb:e0:0a: f2:9b:5b:04:0d:c4:1d:82:0b:0b:cd:b2:97:8b:31:0a:ea:66: be:4c:cd:49:6d:e2:59:91:c2:fd:fe:c7:33:39:33:7a:b5:0f: 6b:9f:26:47:02:7f:c3:77:15:05:e2:e9:b5:97:67:66:39:1e: a3:c1:27:44:0c:e2:cd:fa:87:ff:c3:1a:11:cc:e4:a3:c8:89: 11:5b:58:dd:9f:98:c4:de:09:e2:c4:a1:ca:21:ac:42:d4:c4: 7f:0d:6a:b0:77:db:d2:13:d8:ef:9a:a6:c8:21:5a:27:a3:f0: 32:4e:a1:79:97:6a:9d:81:e5:1e:65:f8:90:ce:ac:aa:87:db: 63:35:71:79:9e:f2:dc:8a:07:83:e6:dc:3b:de:b3:02:c7:6a: e9:21:8d:32:62:b6:80:75:16:13:e0:d4:d9:82:a1:6d:c3:46: d5:88:79:2c:7f:e1:96:b8:07:39:78:67:91:07:06:49:b9:08: 2e:66:b1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx RThDQTk0RTMwHhcNMjUxMTAzMDAwMDI3WhcNMjUxMTEwMDAwMDI3WjAYMRYwFAYD VQQDEw02OTA3ZjA5Yy0wNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPQ8ukSnAHxBWTEYCOIK9XpF6EhdsxDtjxPz4HAXMBGOQuwW6ashny+26xkR uurA0nWwzwCdJ4qc8OeI2jkVVjEw4xiW0HPxrVr/xcPH8er4AshOXF9Lv5qdZHp4 QfBQz8ShXP8fNprCzk33dXYrysdHHHNpav793elQT4lgZ5GVVfxpUSCgU7p4XlRN Ktnnsw3ZehB6NJ/W2M/FBLQ7eCR2xyPi/rQ1oPDL/94bdMo/OeeKiSYqfL5GMdda Noxqz8ri1b44Gaoz0ss/kTmz/8HOLXTj1+AErrcBZxAtCCpOnNhJgGKNq1i4ILWZ 5bsfEU1rzwjMUDjCryb6/EHrawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABljspv 9+kIQ0sW7LhbE3kRYJPDMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX R0ZHR1JULVdDeXdlaktsT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0K5AsdNu7EaO/8TLmdTR+Dssbct6h2JNmOHtfzFLn70N4S4z7Oyk LGNkEjd6p3h96uKYkZtcTZ5xEoMUGy8BNqWeBtz74Arym1sEDcQdggsLzbKXizEK 6ma+TM1JbeJZkcL9/sczOTN6tQ9rnyZHAn/DdxUF4um1l2dmOR6jwSdEDOLN+of/ wxoRzOSjyIkRW1jdn5jE3gnixKHKIaxC1MR/DWqwd9vSE9jvmqbIIVono/AyTqF5 l2qdgeUeZfiQzqyqh9tjNXF5nvLcigeD5tw73rMCx2rpIY0yYraAdRYT4NTZgqFt w0bViHksf+GWuAc5eGeRBwZJuQguZrHS -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:12 2025 by rpki-client