$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft File: Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json) Hash identifier: mUv+7gvNutHkiHSv3zPSYUx4lp1JkEYz0x8LARmhXWI= Subject key identifier: D6:CC:43:28:E4:E7:B8:97:50:C1:01:D8:FF:FA:D9:29:21:1C:74:4E Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A Certificate issuer: /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft Manifest number: 04CB Signing time: Tue 04 Nov 2025 23:55:26 +0000 Manifest this update: Tue 04 Nov 2025 23:55:26 +0000 Manifest next update: Tue 11 Nov 2025 23:55:26 +0000 Files and hashes: 1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: 6/LyK7UpOvLWCxPof1eBmHsNRLjZRW1jijHHIiP5giA=) 2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: Ib+CF/sk+KvnPvMxoim8MHqeWZYKc+NyST1cJiaAhsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A Validity Not Before: Nov 4 23:55:26 2025 GMT Not After : Nov 11 23:55:26 2025 GMT Subject: CN=690a926e-7337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:f6:d4:70:89:50:5d:fd:84:9d:f2:0e:df: 79:72:d4:e0:5e:53:cc:27:e1:06:99:4e:19:79:b0: 6d:4d:ca:1b:7d:7a:e5:ad:1f:6c:a3:7a:9a:bd:e6: 8e:22:d6:01:3b:8f:12:73:3f:88:6e:a2:67:bb:f6: 74:78:7c:9a:f5:f6:14:ad:71:82:32:53:bb:73:3b: b2:2b:c4:bc:8c:f0:98:ec:80:dc:af:c5:2a:54:f7: 84:24:95:07:06:14:be:c8:3f:92:dc:5b:20:20:ad: 6c:9b:45:ee:b5:ea:bf:c9:da:8c:1b:5e:80:43:dc: 94:03:d9:ef:77:2c:c9:d6:1c:7a:00:2a:37:bc:39: ef:1e:3b:47:74:bc:d9:96:be:67:20:15:dc:c9:11: 05:79:e9:38:70:a7:ba:78:e5:23:ea:88:b1:73:93: d8:e8:cc:9b:d2:58:10:da:47:83:14:5f:7a:c4:73: 71:c3:20:4e:0c:20:37:ae:d3:41:0f:66:25:99:d0: 22:32:80:7c:70:d2:c4:1b:11:47:04:fa:47:e5:65: 39:5c:51:d2:fb:8a:a6:7e:f1:87:90:99:ee:e8:c1: d7:f2:fc:a9:43:1e:0f:52:08:2c:31:9b:50:cd:bd: 9b:48:d2:34:96:b6:8f:a0:c5:ae:ac:d3:4c:75:78: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CC:43:28:E4:E7:B8:97:50:C1:01:D8:FF:FA:D9:29:21:1C:74:4E X509v3 Authority Key Identifier: keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:89:3f:31:cf:c3:8b:e4:be:8e:4d:8b:99:e7:55:9b:b1:52: 68:4d:76:37:71:36:af:26:26:a4:04:1d:48:c9:24:b4:a5:3f: 24:41:49:67:87:67:31:ad:9c:52:58:ff:91:45:a4:e5:cc:c9: 8f:6e:7d:65:a2:7a:c1:cb:86:f9:4f:19:21:89:bc:c8:58:b8: aa:85:6c:2e:ce:d0:71:d1:f9:b6:b0:90:16:8c:a6:04:af:39: a6:c6:7d:61:a1:8d:1c:2e:ce:94:f2:5b:6c:dd:cc:7d:b8:3c: 94:37:a0:67:9f:01:58:35:ba:de:54:d4:42:d8:66:0f:4c:1e: 6d:34:b9:55:3d:6f:03:fe:5b:7c:41:27:55:a9:72:31:6e:b3: a6:5f:4a:67:4b:8e:77:2b:97:81:6d:19:36:7a:e5:f4:61:7e: 9c:76:07:bb:9c:b7:68:b3:c6:18:97:3f:17:0d:26:37:fe:66: 8d:dd:26:0a:37:b1:ab:b4:75:b8:e0:73:16:fd:ec:b7:f8:ff: 1f:5c:5c:dd:e0:87:e0:fa:2b:ea:f7:7e:11:4e:4a:ec:69:59: 62:6d:9f:5d:ed:d5:22:fd:6c:4c:59:92:b1:0d:20:fc:1c:29: 83:de:55:1a:a3:40:e4:81:73:0c:bd:8e:3c:5f:10:e2:1a:bb: d5:bc:d6:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2 MUM0MUQ5OUEwHhcNMjUxMTA0MjM1NTI2WhcNMjUxMTExMjM1NTI2WjAYMRYwFAYD VQQDEw02OTBhOTI2ZS03MzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDj21HCJUF39hJ3yDt95ctTgXlPMJ+EGmU4ZebBtTcobfXrlrR9so3qaveaO ItYBO48Scz+IbqJnu/Z0eHya9fYUrXGCMlO7czuyK8S8jPCY7IDcr8UqVPeEJJUH BhS+yD+S3FsgIK1sm0Xuteq/ydqMG16AQ9yUA9nvdyzJ1hx6ACo3vDnvHjtHdLzZ lr5nIBXcyREFeek4cKe6eOUj6oixc5PY6Myb0lgQ2keDFF96xHNxwyBODCA3rtNB D2YlmdAiMoB8cNLEGxFHBPpH5WU5XFHS+4qmfvGHkJnu6MHX8vypQx4PUggsMZtQ zb2bSNI0lraPoMWurNNMdXiMTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbMQyjk 57iXUMEB2P/62SkhHHROMB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ M2M5TnpvUW93enRoeEIyWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIiT8xz8OL5L6OTYuZ51WbsVJoTXY3cTavJiakBB1IySS0pT8kQUln h2cxrZxSWP+RRaTlzMmPbn1lonrBy4b5TxkhibzIWLiqhWwuztBx0fm2sJAWjKYE rzmmxn1hoY0cLs6U8lts3cx9uDyUN6BnnwFYNbreVNRC2GYPTB5tNLlVPW8D/lt8 QSdVqXIxbrOmX0pnS453K5eBbRk2euX0YX6cdge7nLdos8YYlz8XDSY3/maN3SYK N7GrtHW44HMW/ey3+P8fXFzd4Ifg+ivq934RTkrsaVlibZ9d7dUi/WxMWZKxDSD8 HCmD3lUao0DkgXMMvY48XxDiGrvVvNYO -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:12 2025 by rpki-client