$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft File: hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json) Hash identifier: ki7YYGdrAPHFBU6akOkNTAH+vlkBanKPJzZoNh3/gac= Subject key identifier: F0:E1:D2:DB:9D:DE:3E:C7:BC:6B:C7:26:D1:B4:43:6E:FF:BB:83:4C Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft Manifest number: 1A6D Signing time: Tue 04 Nov 2025 16:26:00 +0000 Manifest this update: Tue 04 Nov 2025 16:26:00 +0000 Manifest next update: Tue 11 Nov 2025 16:26:00 +0000 Files and hashes: 1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: ajQZk9QYvaJWa+SyHEmdLFvsABHHNQRFWgt9eCjxbH4=) 2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6774 (0x1a76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Nov 4 16:26:00 2025 GMT Not After : Nov 11 16:26:00 2025 GMT Subject: CN=690a2918-27e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:e8:52:a7:81:04:82:0a:cb:9a:02:f7:71: 23:4e:fe:aa:1a:dd:43:63:e2:43:e2:b2:21:94:0f: 4a:70:7c:19:9c:67:20:97:0b:96:2d:81:60:5e:ce: cc:c9:90:db:ce:22:91:d2:8c:c0:bd:4b:a9:d6:02: 81:76:af:75:5d:b6:fb:75:c6:9f:7a:af:68:51:2e: 6f:e2:e8:b3:9f:63:f5:4c:91:d2:c4:e8:c5:7c:ac: 23:3f:32:5d:31:e7:2b:69:b1:d3:fb:bc:3c:d2:7a: 83:3c:7b:8e:be:b8:af:93:b3:e9:12:e6:46:ef:02: f5:1c:fa:91:fe:6f:7d:80:e9:74:2d:27:16:43:47: 76:ed:83:64:9e:e3:e9:87:3c:26:73:21:3f:d4:23: 19:4a:be:44:85:eb:ad:e8:4d:7e:35:86:1e:bb:54: d1:be:0a:a2:ae:ec:f6:ff:01:81:5c:60:02:f4:24: fa:72:79:49:78:4c:7a:de:9f:3b:ca:00:01:0e:b5: b3:67:d2:af:dd:42:27:9e:23:ad:34:7d:93:d5:e8: da:05:50:70:e6:7c:3c:7a:28:9c:f4:f2:70:57:8e: bf:a6:80:00:bc:bf:7c:fd:2e:99:d1:d5:13:d3:9f: f8:37:21:cf:0b:26:32:e2:c6:d0:78:10:e0:0d:59: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:D2:DB:9D:DE:3E:C7:BC:6B:C7:26:D1:B4:43:6E:FF:BB:83:4C X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:70:16:e9:3c:fe:56:34:34:eb:09:d6:18:d3:a2:d4:24:72: 88:14:82:d1:bb:c1:48:56:8c:20:49:7b:e1:05:e1:96:f6:22: c9:91:a7:1f:36:d6:0a:59:08:97:fe:8c:88:05:b0:48:81:bb: 0d:30:ad:41:27:c5:3e:b4:cb:60:b1:e4:9c:31:20:c3:94:fc: 42:08:7e:04:fd:ee:8f:3f:0e:42:c6:91:b8:f6:b9:70:31:6f: 9b:74:ab:86:a5:a9:2c:23:d3:60:cd:f1:51:d8:03:7b:a0:bb: a3:49:fe:c0:47:8f:30:f5:92:3c:01:da:e4:e4:cc:30:1d:58: 6c:72:c9:cd:f4:2c:d2:04:b0:0f:bc:c0:bc:c0:a9:e9:4a:67: 91:0e:19:e4:b3:43:22:bb:e8:14:8f:3c:02:64:50:25:2a:04: 22:f1:71:88:9b:0f:00:f6:d6:29:8b:a7:d6:d1:5e:01:b0:81: 60:76:7c:12:46:ff:41:3e:a9:93:c9:7a:1e:8c:d5:84:b4:6b: d0:5a:e8:15:0e:2f:3c:cb:ea:2f:75:9d:26:15:31:ad:95:97: 12:ff:f2:9f:70:62:4f:b6:33:68:a4:3e:75:ec:e9:a2:49:24: ac:ec:9f:0a:3a:8b:b4:57:b5:86:3b:46:9d:23:43:92:c0:9f: 01:08:b2:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUxMTA0MTYyNjAwWhcNMjUxMTExMTYyNjAwWjAYMRYwFAYD VQQDEw02OTBhMjkxOC0yN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLfoUqeBBIIKy5oC93EjTv6qGt1DY+JD4rIhlA9KcHwZnGcglwuWLYFgXs7M yZDbziKR0ozAvUup1gKBdq91Xbb7dcafeq9oUS5v4uizn2P1TJHSxOjFfKwjPzJd MecrabHT+7w80nqDPHuOvrivk7PpEuZG7wL1HPqR/m99gOl0LScWQ0d27YNknuPp hzwmcyE/1CMZSr5Eheut6E1+NYYeu1TRvgqiruz2/wGBXGAC9CT6cnlJeEx63p87 ygABDrWzZ9Kv3UInniOtNH2T1ejaBVBw5nw8eiic9PJwV46/poAAvL98/S6Z0dUT 05/4NyHPCyYy4sbQeBDgDVlttwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDh0tud 3j7HvGvHJtG0Q27/u4NMMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDVBQi8wNTI0M0FDNjRDMjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81 NV9hRnhCcmhaamNNYlhlc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgcBbpPP5WNDTrCdYY06LUJHKIFILRu8FIVowgSXvhBeGW9iLJkacf NtYKWQiX/oyIBbBIgbsNMK1BJ8U+tMtgseScMSDDlPxCCH4E/e6PPw5CxpG49rlw MW+bdKuGpaksI9NgzfFR2AN7oLujSf7AR48w9ZI8Adrk5MwwHVhscsnN9CzSBLAP vMC8wKnpSmeRDhnks0Miu+gUjzwCZFAlKgQi8XGImw8A9tYpi6fW0V4BsIFgdnwS Rv9BPqmTyXoejNWEtGvQWugVDi88y+ovdZ0mFTGtlZcS//KfcGJPtjNopD517Omi SSSs7J8KOou0V7WGO0adI0OSwJ8BCLJn -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:21 2025 by rpki-client