$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: IYME7VmdgaTFBlpUywljfMBoE07j2c+8EkGINfPhbI0= Subject key identifier: 2D:C1:7B:66:12:EA:AE:67:55:71:A5:EB:ED:B9:14:0D:0F:DA:12:E6 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 07A6 Signing time: Sun 02 Nov 2025 21:24:02 +0000 Manifest this update: Sun 02 Nov 2025 21:24:01 +0000 Manifest next update: Sun 09 Nov 2025 21:24:01 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: WiR2HrPUNoKg3dkJc1ie0wbydAX53y9gxS161Fco10Q=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Nov 2 21:24:01 2025 GMT Not After : Nov 9 21:24:01 2025 GMT Subject: CN=6907cbf2-c1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:b2:66:aa:4f:25:07:a0:9d:d3:1a:96:14: a8:60:ac:89:1a:d9:17:77:42:1f:27:93:e4:cf:70: 68:48:aa:f9:38:c1:ef:10:d9:5b:6b:85:5a:9a:f2: bf:14:70:14:65:91:bc:b8:b5:e6:f9:99:a9:f2:b6: a4:0c:bc:09:c0:e0:e6:30:62:b9:2c:f0:f6:ee:96: ae:4c:bb:ef:ae:40:f1:93:8d:4f:d3:25:12:bd:3c: d1:d7:b6:22:1d:90:b8:46:9c:82:3a:04:75:80:e5: 1c:ab:03:d4:b2:d2:f4:08:a9:50:26:6c:eb:ad:f6: e4:f0:cc:06:f9:aa:7e:1b:91:b3:83:a7:11:69:0f: 5a:b2:e8:55:95:99:07:bf:8b:2b:37:1d:d0:47:13: 95:de:18:07:93:3f:38:9d:ae:79:64:90:11:08:c8: d9:5a:08:c0:92:96:f1:06:2f:44:cb:16:a5:b1:e1: 2f:8f:56:cd:34:f7:c6:e7:45:b5:db:a7:a6:1f:f0: e8:c5:d9:f6:68:91:2d:db:bd:c9:fa:70:40:34:88: 2b:e7:6c:f0:5e:7c:27:90:2f:62:f7:cc:05:75:b0: 73:c5:f2:9d:0b:17:87:e0:52:23:8a:aa:91:89:db: 9b:77:06:53:e9:84:69:08:01:a6:c2:9f:e4:51:22: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C1:7B:66:12:EA:AE:67:55:71:A5:EB:ED:B9:14:0D:0F:DA:12:E6 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ec:13:f2:c7:9e:97:25:d2:ba:f6:b6:65:47:4b:3f:75:8a: e1:93:39:96:f7:95:b2:07:1d:e2:f9:22:23:ca:cf:96:ac:4c: 34:9a:aa:a2:ad:37:d4:f4:2c:b7:c7:4c:39:ec:95:ee:e0:7d: 21:5c:0f:ca:37:49:59:78:b7:1e:26:9b:41:78:0a:f6:fb:7e: 64:94:56:d3:56:8d:cc:78:a1:bf:fa:d3:c9:ce:98:26:bc:bb: 09:04:35:f0:88:b3:cb:c3:88:9e:e3:87:09:16:6b:95:2c:4c: e0:08:f8:d1:42:ea:ef:6c:50:75:d0:89:a4:35:12:83:88:d5: a5:6a:7a:34:24:de:98:b7:e6:b1:7d:57:97:9f:7d:ab:22:0f: 61:7c:0f:16:48:1f:fc:84:f9:b5:a9:1b:a0:7c:1e:22:1a:e9: 7e:ce:9f:79:31:d8:3a:b0:e0:0f:77:9d:b9:07:24:2d:c6:ce: ce:df:bd:03:bb:44:5b:13:f5:97:1c:7d:b2:49:68:79:27:f4: 63:c3:4d:0a:5c:90:d1:03:aa:78:4a:06:0c:31:6d:87:2d:31: 3f:42:2d:3b:03:cc:d2:2f:1d:30:4e:a9:00:e0:c5:42:92:dc: 5a:a5:c1:3a:84:6f:86:fb:8c:f3:d4:fb:76:4f:28:ee:cf:f3: 2b:8a:0f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUxMTAyMjEyNDAxWhcNMjUxMTA5MjEyNDAxWjAYMRYwFAYD VQQDEw02OTA3Y2JmMi1jMWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cmyZqpPJQegndMalhSoYKyJGtkXd0IfJ5Pkz3BoSKr5OMHvENlba4VamvK/ FHAUZZG8uLXm+Zmp8rakDLwJwODmMGK5LPD27pauTLvvrkDxk41P0yUSvTzR17Yi HZC4RpyCOgR1gOUcqwPUstL0CKlQJmzrrfbk8MwG+ap+G5Gzg6cRaQ9asuhVlZkH v4srNx3QRxOV3hgHkz84na55ZJARCMjZWgjAkpbxBi9EyxalseEvj1bNNPfG50W1 26emH/Doxdn2aJEt273J+nBANIgr52zwXnwnkC9i98wFdbBzxfKdCxeH4FIjiqqR idubdwZT6YRpCAGmwp/kUSLrjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3Be2YS 6q5nVXGl6+25FA0P2hLmMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB37BPyx56XJdK69rZlR0s/dYrhkzmW95WyBx3i+SIjys+WrEw0mqqi rTfU9Cy3x0w57JXu4H0hXA/KN0lZeLceJptBeAr2+35klFbTVo3MeKG/+tPJzpgm vLsJBDXwiLPLw4ie44cJFmuVLEzgCPjRQurvbFB10ImkNRKDiNWlano0JN6Yt+ax fVeXn32rIg9hfA8WSB/8hPm1qRugfB4iGul+zp95Mdg6sOAPd525ByQtxs7O370D u0RbE/WXHH2ySWh5J/Rjw00KXJDRA6p4SgYMMW2HLTE/Qi07A8zSLx0wTqkA4MVC ktxapcE6hG+G+4zz1Pt2Tyjuz/Mrig92 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:58 2025 by rpki-client