$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft File: hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json) Hash identifier: 1whmGf5wHD46PDjwazwYe0wiHEqPdv9lqpEFYy1RMKo= Subject key identifier: 5A:64:ED:13:E8:92:AF:5E:05:EC:A6:39:E5:CA:D9:C9:62:0E:36:B7 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft Manifest number: 0143 Signing time: Wed 05 Nov 2025 04:34:30 +0000 Manifest this update: Wed 05 Nov 2025 04:34:29 +0000 Manifest next update: Wed 12 Nov 2025 04:34:29 +0000 Files and hashes: 1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 0liHU5kYT3XiTtUIXV0V+xB8Vxx42KJKihme765yW58=) 2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: w6qwhTkmhaSB3ncvO8yCXadiw5lkWAA4VBrSx+fRpEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Nov 5 04:34:29 2025 GMT Not After : Nov 12 04:34:29 2025 GMT Subject: CN=690ad3d6-8257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0d:09:5b:d4:88:30:30:d0:60:d9:75:a6:3f: 10:c4:4b:16:b2:0f:9f:69:91:35:48:4e:45:6b:97: 90:73:85:b6:05:f5:60:a5:a6:f8:6c:91:e4:fa:67: cc:cd:5b:8d:cc:a3:07:6e:b9:37:3b:88:8f:60:a0: 9f:11:2a:31:3c:ba:b2:ac:7b:e1:07:00:48:c7:02: 87:65:8e:a4:4f:a1:1e:78:9d:29:f9:74:67:66:38: 32:51:8e:97:12:86:02:be:a1:0a:3b:05:25:4a:82: 56:26:6f:86:5c:4d:4d:1d:01:61:f4:6b:0f:8c:d6: d8:7c:bb:40:c5:bf:b6:4e:d3:42:41:7b:dd:8a:6f: f6:54:80:40:44:73:86:a7:78:9d:af:f0:6e:72:55: 05:98:a9:c2:53:ae:60:ea:8e:fd:19:2a:a3:ff:41: f9:76:93:b2:ef:18:5c:f7:83:b4:0a:8e:26:96:3d: 53:58:01:c9:c6:6a:23:f1:c0:49:aa:a7:1b:e0:ea: d6:aa:9f:9d:05:73:bf:1f:0e:59:83:2a:48:23:36: c8:ce:1b:a0:68:a2:eb:2f:de:cc:f7:ac:bb:d4:f1: 9e:1b:4f:00:11:60:4d:ab:44:13:d8:49:ef:84:07: f1:b1:cb:bb:89:e3:8f:18:f5:87:6b:3a:5d:ec:88: 79:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:ED:13:E8:92:AF:5E:05:EC:A6:39:E5:CA:D9:C9:62:0E:36:B7 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dd:6b:27:00:dd:85:c4:7a:e5:77:b5:73:51:3d:a2:78:f2: db:09:a5:4e:19:2d:d3:15:e0:5a:8f:bf:89:fc:0d:79:20:f7: 44:93:23:53:b7:62:51:0f:1e:3d:75:9e:81:b9:90:04:69:a8: 7e:86:1c:04:02:24:44:15:d1:ae:e6:a8:59:78:74:8e:d8:10: 9d:6d:35:aa:43:d5:c4:40:24:47:7f:c6:10:05:aa:3e:05:6a: ac:75:2b:31:84:67:fe:c3:55:6b:42:1a:33:6a:b3:f1:68:3e: ba:10:9a:ee:45:80:df:c0:43:00:be:29:68:57:5c:7b:5b:75: 45:75:89:77:7d:f7:2a:dd:5d:a8:c7:02:8d:b4:ea:2d:db:fa: c4:96:a5:6b:0c:1b:91:64:56:c8:9d:00:95:36:65:08:18:56: 54:bd:e2:ec:93:1c:c6:11:eb:4c:a1:c9:ab:74:91:25:e9:73: d1:89:cd:9d:dc:aa:b0:bb:43:ab:b6:94:f0:c1:50:8c:6f:af: 38:11:ec:7d:0a:b4:1b:93:d4:c4:db:8e:58:06:80:5d:a3:9d: 22:bf:11:ef:fc:43:d5:00:37:04:da:24:4a:45:c7:bc:13:67: 13:6e:a3:56:bb:54:3b:cd:57:77:e6:d3:1c:2b:9b:ef:b6:c7: 47:be:62:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjUxMTA1MDQzNDI5WhcNMjUxMTEyMDQzNDI5WjAYMRYwFAYD VQQDEw02OTBhZDNkNi04MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7w0JW9SIMDDQYNl1pj8QxEsWsg+faZE1SE5Fa5eQc4W2BfVgpab4bJHk+mfM zVuNzKMHbrk3O4iPYKCfESoxPLqyrHvhBwBIxwKHZY6kT6EeeJ0p+XRnZjgyUY6X EoYCvqEKOwUlSoJWJm+GXE1NHQFh9GsPjNbYfLtAxb+2TtNCQXvdim/2VIBARHOG p3idr/BuclUFmKnCU65g6o79GSqj/0H5dpOy7xhc94O0Co4mlj1TWAHJxmoj8cBJ qqcb4OrWqp+dBXO/Hw5ZgypIIzbIzhugaKLrL97M96y71PGeG08AEWBNq0QT2Env hAfxscu7ieOPGPWHazpd7Ih5bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpk7RPo kq9eBeymOeXK2cliDja3MB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83NUEwQ0QxNEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0 Tlh3cVdwbS16XzluZFZDc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA63WsnAN2FxHrld7VzUT2iePLbCaVOGS3TFeBaj7+J/A15IPdEkyNT t2JRDx49dZ6BuZAEaah+hhwEAiREFdGu5qhZeHSO2BCdbTWqQ9XEQCRHf8YQBao+ BWqsdSsxhGf+w1VrQhozarPxaD66EJruRYDfwEMAviloV1x7W3VFdYl3ffcq3V2o xwKNtOot2/rElqVrDBuRZFbInQCVNmUIGFZUveLskxzGEetMocmrdJEl6XPRic2d 3Kqwu0OrtpTwwVCMb684Eex9CrQbk9TE245YBoBdo50ivxHv/EPVADcE2iRKRce8 E2cTbqNWu1Q7zVd35tMcK5vvtsdHvmJM -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:47 2025 by rpki-client