$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft File: huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json) Hash identifier: iwmxf9q5/AjwNULOIanfwWDW9E4yKmbzsVsspONVKMQ= Subject key identifier: F8:6F:D9:E4:0A:65:78:C1:A0:14:BC:B1:E5:F3:16:C5:BE:54:1F:BA Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A Certificate issuer: /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft Manifest number: EC Signing time: Wed 05 Nov 2025 05:32:16 +0000 Manifest this update: Wed 05 Nov 2025 05:32:16 +0000 Manifest next update: Wed 12 Nov 2025 05:32:15 +0000 Files and hashes: 1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: 7MFqczVL+VfSojvYcUi5smuWABE5AERLOfnnWnYhCLo=) 2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A Validity Not Before: Nov 5 05:32:16 2025 GMT Not After : Nov 12 05:32:15 2025 GMT Subject: CN=690ae160-c4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:ea:ec:7a:fd:07:57:11:dd:bb:7e:d6:d8: 4d:c7:3f:d5:f5:50:0d:ca:eb:39:55:ce:d4:69:15: 20:82:64:9d:b0:bd:12:ef:6b:22:93:5d:14:cc:42: 12:ad:70:02:54:be:8e:f6:23:08:35:75:76:03:c3: 9c:07:11:e6:8e:31:64:12:8f:02:cd:26:8f:36:b3: d3:da:d3:ef:a0:aa:9e:91:45:d3:13:bf:30:9a:ad: 6b:d7:5a:30:f7:f4:ed:e7:a7:f1:79:88:96:c3:55: 2e:04:5e:d9:27:2b:5d:76:7d:c5:2d:d6:4f:21:d5: 2e:4b:ba:81:3d:cd:13:f8:24:ee:1a:c2:c4:1e:8d: ae:94:12:88:e0:aa:3e:d6:5f:7a:f2:c7:ff:3a:92: 0d:2c:c0:73:d2:5c:58:30:cc:ef:20:bd:a6:90:14: 68:ac:42:5d:ef:d6:44:1e:b2:3a:5c:90:1d:ae:0f: 09:83:6b:e2:5c:4e:4f:fe:3c:33:72:56:c4:7c:a9: 0a:1a:d0:6f:89:22:96:56:75:ad:61:80:69:6b:3a: cb:8b:95:ff:4a:79:5b:df:32:ab:b6:92:97:5a:c3: 6b:3c:6b:c9:24:0b:fd:fe:28:24:76:51:6f:cb:6a: 70:b0:eb:8a:07:ac:96:b8:0e:7a:88:03:3e:43:2e: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6F:D9:E4:0A:65:78:C1:A0:14:BC:B1:E5:F3:16:C5:BE:54:1F:BA X509v3 Authority Key Identifier: keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:74:67:76:d3:50:33:2a:3a:ce:7c:3a:01:e2:ab:0e:5d: 2f:23:21:7d:44:bf:2e:24:e9:0d:87:30:d4:cd:7c:32:13:4a: a6:29:b7:84:85:39:a9:c8:c6:b3:d4:b8:e4:f5:90:97:7d:39: c9:cd:0c:f9:6c:7b:5b:df:d7:d0:6c:3d:7e:a7:72:09:af:6a: 61:fc:59:14:c3:93:06:ad:7c:a4:d8:85:20:55:b8:05:ac:a6: b4:9d:03:c0:6e:95:e7:2d:bb:c5:bf:2e:da:1a:8b:87:27:40: ee:ed:7d:6a:d0:25:e1:a9:07:68:8b:1b:31:33:5b:a8:6f:42: 86:28:cd:62:f7:65:37:74:c6:dd:26:7a:59:73:3a:b4:a5:70: e5:90:14:ea:91:37:c7:71:2f:41:bd:33:09:60:3d:97:ab:c6: f0:8a:19:a7:91:43:3c:b3:bf:e8:b8:fd:dc:84:70:04:ba:77: 83:bb:f1:43:1d:fa:b3:49:d9:1c:a1:ac:9b:13:a5:05:02:36: 39:fc:9c:6c:11:50:e1:83:49:41:e6:ea:37:47:5e:70:6b:33: 82:06:9b:d0:78:ed:54:11:1f:6c:1b:98:f5:52:6a:27:b0:85: 4a:54:ca:25:fc:23:4a:ac:3d:f0:3b:fc:61:3e:b2:07:48:f8: 21:58:6c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QTgxMTAvBgNVBAUTKDg2RTIzNEUyRTFFMjNBNDk3MTQ1OEQyQTcyNjE0REYx Mzg5NUUyOUEwHhcNMjUxMTA1MDUzMjE2WhcNMjUxMTEyMDUzMjE1WjAYMRYwFAYD VQQDEw02OTBhZTE2MC1jNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnHq7Hr9B1cR3bt+1thNxz/V9VANyus5Vc7UaRUggmSdsL0S72sik10UzEIS rXACVL6O9iMINXV2A8OcBxHmjjFkEo8CzSaPNrPT2tPvoKqekUXTE78wmq1r11ow 9/Tt56fxeYiWw1UuBF7ZJytddn3FLdZPIdUuS7qBPc0T+CTuGsLEHo2ulBKI4Ko+ 1l968sf/OpINLMBz0lxYMMzvIL2mkBRorEJd79ZEHrI6XJAdrg8Jg2viXE5P/jwz clbEfKkKGtBviSKWVnWtYYBpazrLi5X/Snlb3zKrtpKXWsNrPGvJJAv9/igkdlFv y2pwsOuKB6yWuA56iAM+Qy7jhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhv2eQK ZXjBoBS8seXzFsW+VB+6MB8GA1UdIwQYMBaAFIbiNOLh4jpJcUWNKnJhTfE4leKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBOC9BNUY4RTg3ODVB REMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9rbHhSWTBxY21GTjhUaVY0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h1STA0dUhpT2tseFJZMHFjbUZOOFRpVjRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBOC9BNUY4RTg3ODVBREMxMUVGOEY0QzkzNzdDNEY5QUUwMi9odUkwNHVIaU9r bHhSWTBxY21GTjhUaVY0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTB3RndtNQMyo6znw6AeKrDl0vIyF9RL8uJOkNhzDUzXwyE0qmKbeE hTmpyMaz1Ljk9ZCXfTnJzQz5bHtb39fQbD1+p3IJr2ph/FkUw5MGrXyk2IUgVbgF rKa0nQPAbpXnLbvFvy7aGouHJ0Du7X1q0CXhqQdoixsxM1uob0KGKM1i92U3dMbd JnpZczq0pXDlkBTqkTfHcS9BvTMJYD2Xq8bwihmnkUM8s7/ouP3chHAEuneDu/FD HfqzSdkcoaybE6UFAjY5/JxsEVDhg0lB5uo3R15wazOCBpvQeO1UER9sG5j1Umon sIVKVMol/CNKrD3wO/xhPrIHSPghWGwT -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:37 2025 by rpki-client