$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft File: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json) Hash identifier: PoMzHk9FNkYLO3Lu7SlLHanV9DDv1AspwpstggKNAXI= Subject key identifier: F0:15:10:11:DA:40:72:EF:D4:5B:4F:97:CE:1A:52:6D:64:78:3C:B2 Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C Certificate issuer: /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Certificate serial: 1031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft Manifest number: 1028 Signing time: Tue 04 Nov 2025 17:31:13 +0000 Manifest this update: Tue 04 Nov 2025 17:31:13 +0000 Manifest next update: Tue 11 Nov 2025 17:31:12 +0000 Files and hashes: 1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: un0O5D+5Geg+onUXkwCO5+c0PmP4lXmx9qtaLlRydfs=) 2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Mh1zi5YD9Zt1qZTGwDKJ/p09AgZsGk5KhqRaFO5mGTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4145 (0x1031) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C Validity Not Before: Nov 4 17:31:13 2025 GMT Not After : Nov 11 17:31:12 2025 GMT Subject: CN=690a3861-1c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:2c:6f:a7:d3:3a:a6:44:24:d8:6e:53:c3: 54:9e:44:cc:61:30:9c:9b:16:7e:76:4c:1d:b1:df: f1:ee:14:2c:f8:8a:e9:1a:3f:a7:7c:f4:1f:b8:51: 0d:8c:70:0d:7a:11:d3:d8:20:fd:de:f2:28:32:89: f7:6a:67:00:4c:15:41:ef:15:d8:4d:1d:b3:11:44: 84:ea:3a:e8:c5:42:9b:cb:31:6a:a8:de:68:b3:99: c9:e1:4e:fd:49:5e:1f:36:de:bc:22:6d:23:c3:55: ba:fa:56:97:c5:ac:11:a2:63:e2:0a:0c:fe:dd:fc: 09:5a:ff:67:1e:53:fb:e1:de:13:16:28:6a:f1:29: 16:4f:3c:fc:ba:6c:18:11:ce:9c:9d:20:4b:a6:31: f6:3a:65:ae:5b:81:7c:ec:69:0f:e9:b5:17:57:16: c7:af:e8:73:d5:4b:a3:d2:38:0f:06:30:e5:5e:56: 83:dd:29:01:6a:e2:6d:b7:2a:2b:69:1f:c2:e2:0f: f4:ee:e5:d8:26:94:61:de:b7:be:bf:f9:2f:63:30: 9a:8c:ea:cb:a2:46:18:6c:00:42:f8:5f:15:8a:a3: fc:5d:fe:5a:36:1f:35:c9:fa:b5:4a:d2:eb:ed:54: 9e:a0:25:74:1e:49:56:f3:f8:d4:24:a8:29:85:70: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:15:10:11:DA:40:72:EF:D4:5B:4F:97:CE:1A:52:6D:64:78:3C:B2 X509v3 Authority Key Identifier: keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:db:79:7b:bb:78:3a:9f:46:cd:6f:c0:87:e4:ba:42:98:99: f9:fe:7e:fd:2f:3e:67:c1:63:85:95:98:9d:0c:2e:d9:8e:07: 0e:b7:8b:13:20:15:bf:2c:dd:68:ee:98:f2:93:b6:46:b4:01: cc:bb:bc:46:f9:68:06:e8:db:10:aa:9d:ef:3f:6b:bb:3b:cd: 90:f3:dc:90:b3:ae:62:b8:1e:53:e5:db:57:7d:b5:db:cd:37: 31:12:72:47:62:9f:9b:25:92:fb:9f:72:29:02:64:24:05:1b: 2b:1d:69:59:2a:c6:d3:bb:5c:09:0d:76:f2:98:43:d4:18:1f: 1b:0b:5b:31:0c:0f:f1:5b:a6:8f:0f:e6:99:46:79:fe:63:6d: 17:25:0b:bd:24:e4:a8:d0:78:a7:1f:a2:f0:0b:1a:d2:7a:e4: e4:c7:97:fe:71:31:db:5a:03:32:4f:83:93:e0:ea:aa:51:f1: 96:0f:1d:a8:7c:0f:2d:d9:dd:0f:53:3c:62:53:8d:d2:f8:60: 02:b1:92:8c:09:ef:c3:8f:6b:62:26:02:69:88:aa:58:c0:9c: 8c:da:db:58:47:b6:68:e3:84:23:7b:fc:7b:e5:78:cb:91:10: 96:c5:9a:f5:7f:8a:a1:e3:7f:d9:bc:7d:1f:2f:92:b9:77:df: 85:13:8e:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5 NjlCODg5OEMwHhcNMjUxMTA0MTczMTEzWhcNMjUxMTExMTczMTEyWjAYMRYwFAYD VQQDEw02OTBhMzg2MS0xYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Dcsb6fTOqZEJNhuU8NUnkTMYTCcmxZ+dkwdsd/x7hQs+IrpGj+nfPQfuFEN jHANehHT2CD93vIoMon3amcATBVB7xXYTR2zEUSE6jroxUKbyzFqqN5os5nJ4U79 SV4fNt68Im0jw1W6+laXxawRomPiCgz+3fwJWv9nHlP74d4TFihq8SkWTzz8umwY Ec6cnSBLpjH2OmWuW4F87GkP6bUXVxbHr+hz1Uuj0jgPBjDlXlaD3SkBauJttyor aR/C4g/07uXYJpRh3re+v/kvYzCajOrLokYYbABC+F8ViqP8Xf5aNh81yfq1StLr 7VSeoCV0HklW8/jUJKgphXCl3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAVEBHa QHLv1FtPl84aUm1keDyyMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw RHBsOWlvNkFaOFdXbTRpWXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM23l7u3g6n0bNb8CH5LpCmJn5/n79Lz5nwWOFlZidDC7ZjgcOt4sT IBW/LN1o7pjyk7ZGtAHMu7xG+WgG6NsQqp3vP2u7O82Q89yQs65iuB5T5dtXfbXb zTcxEnJHYp+bJZL7n3IpAmQkBRsrHWlZKsbTu1wJDXbymEPUGB8bC1sxDA/xW6aP D+aZRnn+Y20XJQu9JOSo0HinH6LwCxrSeuTkx5f+cTHbWgMyT4OT4OqqUfGWDx2o fA8t2d0PUzxiU43S+GACsZKMCe/Dj2tiJgJpiKpYwJyM2ttYR7Zo44Qje/x75XjL kRCWxZr1f4qh43/ZvH0fL5K5d9+FE46X -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:17 2025 by rpki-client