$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft File: s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json) Hash identifier: vkyvadIxIBI62OHUh4hv6x18mqZDURId/UrdFk8+AkA= Subject key identifier: 4C:19:ED:88:EA:7F:E6:FC:9D:F8:80:A2:F1:75:B5:9B:41:30:9B:D4 Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC Certificate issuer: /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft Manifest number: 9B Signing time: Mon 03 Nov 2025 06:20:37 +0000 Manifest this update: Mon 03 Nov 2025 06:20:36 +0000 Manifest next update: Mon 10 Nov 2025 06:20:36 +0000 Files and hashes: 1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: UR7BVZIaRBzkyLhoJHZtW4A1+R0ztqlbaB0U/18dllk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC Validity Not Before: Nov 3 06:20:36 2025 GMT Not After : Nov 10 06:20:36 2025 GMT Subject: CN=690849b4-05f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:d1:e4:a7:9e:f6:11:5d:25:2b:c3:4e:51: 3e:4b:c9:40:d7:03:98:68:ca:ce:85:bc:f6:8f:3a: 6b:df:ac:7c:d2:d6:75:f1:ec:c8:b6:46:68:70:8f: 34:a8:ab:23:b9:90:ff:09:d6:70:91:a1:e8:bf:7a: 69:56:1b:af:d1:6e:50:5e:e4:e8:81:a4:c5:40:cd: 7e:1e:38:e8:ef:81:f2:f2:8e:43:3d:4c:62:cf:dd: 2e:cb:33:51:d7:ac:de:89:37:01:b1:88:50:23:ea: 26:0b:d3:46:f4:3f:e4:38:74:a1:e7:91:71:be:db: 1e:21:49:a6:b1:4e:8c:c7:e9:07:11:d5:fa:8f:1f: ba:27:c9:93:4e:21:77:6a:d9:c0:84:41:e5:63:c2: c8:6a:6d:67:06:6d:0c:c9:9e:ab:64:eb:7b:49:39: ff:5b:01:f2:62:de:9d:57:66:38:26:82:b6:f8:2f: 41:32:d6:51:9e:ce:b1:4a:e1:1d:c4:bc:a7:9c:c9: 9b:f3:cd:19:97:a9:ec:7a:db:df:07:aa:e2:ce:13: 52:06:46:c0:b9:f8:a7:8c:ad:b4:1d:ab:a7:d7:eb: dd:6a:bb:99:cf:9f:7b:a2:41:7b:a5:fa:0f:ad:2a: af:83:fd:86:e2:e6:dd:d5:30:ba:30:42:07:b1:5a: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:19:ED:88:EA:7F:E6:FC:9D:F8:80:A2:F1:75:B5:9B:41:30:9B:D4 X509v3 Authority Key Identifier: keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:ca:0e:c0:45:75:e8:cc:56:d2:52:1b:5f:0b:70:b2:1d:83: 38:0e:ac:2a:ac:50:36:d4:58:09:42:68:50:af:f1:e0:74:a6: da:c3:ea:ae:e6:20:ee:ac:cc:2a:f5:f9:64:ff:d3:56:5b:77: 29:31:c6:12:5e:4a:d9:e3:66:dd:a8:eb:76:4a:c3:63:40:e6: 76:12:6e:72:14:c4:f6:5e:4c:52:e5:45:5b:3c:3d:d7:08:9b: 01:e3:29:40:99:5c:73:c4:00:a3:fa:e0:24:d1:73:b3:dd:c0: 7d:0a:2b:a0:36:34:f8:8c:85:5a:e7:6b:c5:9b:71:1f:a5:39: cf:86:07:40:74:94:40:11:40:e8:cc:f0:39:d7:15:90:e2:4d: 04:32:55:c1:1e:60:1c:7f:26:26:7c:5a:40:2c:f7:71:c2:77: bb:d0:6e:e2:ff:8e:d0:f8:7f:38:b2:cc:02:d9:21:e8:27:ed: fa:47:01:c3:cd:27:8e:6d:4a:e5:81:74:99:d4:bd:8d:3f:6f: ea:c2:bc:08:40:88:e1:1f:f7:6a:35:df:9d:11:01:37:ed:fb: 65:14:d1:6d:12:44:f8:12:0f:86:15:07:e2:1a:56:6c:f3:52: 8e:7a:d0:f2:42:93:48:20:42:ce:f5:da:fc:49:f0:72:98:88: 39:d4:df:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF MTVGQTdEQ0MwHhcNMjUxMTAzMDYyMDM2WhcNMjUxMTEwMDYyMDM2WjAYMRYwFAYD VQQDEw02OTA4NDliNC0wNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1unR5Kee9hFdJSvDTlE+S8lA1wOYaMrOhbz2jzpr36x80tZ18ezItkZocI80 qKsjuZD/CdZwkaHov3ppVhuv0W5QXuTogaTFQM1+Hjjo74Hy8o5DPUxiz90uyzNR 16zeiTcBsYhQI+omC9NG9D/kOHSh55FxvtseIUmmsU6Mx+kHEdX6jx+6J8mTTiF3 atnAhEHlY8LIam1nBm0MyZ6rZOt7STn/WwHyYt6dV2Y4JoK2+C9BMtZRns6xSuEd xLynnMmb880Zl6nsetvfB6rizhNSBkbAufinjK20Haun1+vdaruZz597okF7pfoP rSqvg/2G4ubd1TC6MEIHsVoytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwZ7Yjq f+b8nfiAovF1tZtBMJvUMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm MlhJX25SMjhVMWZoWDZmY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDByg7ARXXozFbSUhtfC3CyHYM4DqwqrFA21FgJQmhQr/HgdKbaw+qu 5iDurMwq9flk/9NWW3cpMcYSXkrZ42bdqOt2SsNjQOZ2Em5yFMT2XkxS5UVbPD3X CJsB4ylAmVxzxACj+uAk0XOz3cB9CiugNjT4jIVa52vFm3EfpTnPhgdAdJRAEUDo zPA51xWQ4k0EMlXBHmAcfyYmfFpALPdxwne70G7i/47Q+H84sswC2SHoJ+36RwHD zSeObUrlgXSZ1L2NP2/qwrwIQIjhH/dqNd+dEQE37ftlFNFtEkT4Eg+GFQfiGlZs 81KOetDyQpNIIELO9dr8SfBymIg51N8M -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:54 2025 by rpki-client