$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft File: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft (raw, json) Hash identifier: mgXe3YxaAROGWWOqyaQtzWRG6x4DaKMF0VNOgz8lNPc= Subject key identifier: 26:48:31:B7:CD:B7:22:C7:D8:4A:59:88:49:79:C1:D6:F1:1A:B1:D1 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft Manifest number: 352B Signing time: Tue 04 Nov 2025 14:43:20 +0000 Manifest this update: Tue 04 Nov 2025 14:43:19 +0000 Manifest next update: Tue 11 Nov 2025 14:43:19 +0000 Files and hashes: 1: HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl (hash: px4KF2yfBGY2ZV7mziv4gwGhc8vsgRpFj9qCJ1WQRfQ=) 2: 87EFB95AC01811EF90CE8B0EC4F9AE02.roa (hash: qZJPfG2amv1YRehnUzdlHxLOWwvXz8+dMtqCKRYUJpM=) 3: 725D1810BD0E11EA8CEF0681C4F9AE02.roa (hash: uxN4zJEmGXmB/qpIp2ey6SpNrf4s6W/tukdRHW9gvLc=) 4: 0FCDEA68113B11F09E3A4157C4F9AE02.roa (hash: HhPaW5eoa8YAXMCyUgrMCG4GBbrYuP09obNUWTvTJmo=) 5: 2B622E1282F511EF9090F681C4F9AE02.roa (hash: o+SVOkw4B+Pgr5TLQfMcQYEp6f3Jn3P38kWJLEEf/tQ=) 6: C2DFDA20DE0611EF9DC6A135C4F9AE02.roa (hash: Kgqe2j6IHwMDhGgmbFi5UiveUmKiCe0XXLEEC0ovFyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13684 (0x3574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770, serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Nov 4 14:43:19 2025 GMT Not After : Nov 11 14:43:19 2025 GMT Subject: CN=690a1108-bc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:96:80:56:bb:3f:4f:b5:80:a1:62:1d:fc: ed:fb:21:90:70:0a:5b:d7:59:c1:01:fd:83:af:2f: 43:bf:de:5f:6c:91:7f:44:f6:13:6b:d6:3e:04:1f: 64:bc:6c:42:aa:d7:bd:fa:3b:63:0d:0a:52:5c:8a: 29:86:bc:bd:fb:2c:f8:5c:cb:a2:22:75:4c:ec:6b: a4:b3:a9:d3:2c:91:70:b1:bd:59:3a:77:0f:4b:5c: ff:22:7d:f0:8e:10:fb:b2:62:31:ac:2e:15:94:ee: fb:76:0b:e9:5e:2d:34:82:f3:0d:06:f2:01:d4:52: 22:0f:d4:bf:f5:41:a2:56:88:16:e7:ba:6c:88:b6: b2:75:8f:23:7c:e2:d9:4d:c8:aa:96:96:77:20:7e: 46:87:0a:68:ba:1e:60:53:82:5b:03:6b:47:d6:cd: a7:d5:1d:bd:a6:b4:4b:14:0d:43:25:3b:bf:17:b5: 55:fb:7d:2a:87:0a:8f:42:33:6a:48:c9:9a:2f:0b: ee:60:c2:0d:69:be:a7:f9:ad:35:77:55:11:57:2a: 32:a1:06:01:2d:c8:12:c8:d5:62:89:ab:e3:a7:ec: 72:b2:24:a3:27:0c:69:46:e5:83:63:a0:a9:68:a5: 3e:fd:31:56:3b:87:ce:8a:1a:26:09:50:ad:ab:90: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:48:31:B7:CD:B7:22:C7:D8:4A:59:88:49:79:C1:D6:F1:1A:B1:D1 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:75:2a:15:73:7c:f1:3d:b7:71:c5:12:f3:73:59:34:26:fa: 93:e5:f1:f1:e8:10:28:16:da:dd:79:f3:42:da:af:7c:82:66: e7:59:76:be:b2:b6:bf:b2:4d:7a:6f:9e:81:c0:16:37:f1:14: ac:3e:8b:b9:42:e1:57:46:8e:f6:7d:a1:53:5c:d4:fa:89:f7: 0c:b3:ca:77:81:fc:77:bb:7c:70:b9:c5:c8:4f:af:39:e0:d4: b6:73:81:a0:66:c7:d5:4b:e7:55:3d:f2:43:9d:8e:ba:7f:95: 31:be:e7:0d:3d:99:f0:1e:f4:52:e7:13:e7:0a:ae:39:6d:aa: be:05:ac:2f:90:3d:4c:d9:7d:46:97:b1:70:59:86:e2:5c:90: 57:28:40:48:fd:93:d8:4a:3d:ac:c0:9a:fd:47:08:64:54:b0: 81:83:8a:b2:67:86:a2:2d:9e:86:e7:af:35:6c:85:ee:24:95: c8:f4:ba:22:45:90:37:b1:e5:b7:8d:2c:f4:f4:aa:9c:cf:de: 5a:4c:ec:01:8c:35:ce:05:f3:dd:17:b0:46:d7:e1:32:05:04: 68:ee:d2:45:08:2b:e3:f9:b6:89:8b:90:0e:04:f0:3d:a7:d9: b2:cd:c6:8e:9d:f0:9c:62:a5:31:ee:1b:bc:82:39:94:48:ce: 5d:23:98:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjUxMTA0MTQ0MzE5WhcNMjUxMTExMTQ0MzE5WjAYMRYwFAYD VQQDEw02OTBhMTEwOC1iYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oqWgFa7P0+1gKFiHfzt+yGQcApb11nBAf2Dry9Dv95fbJF/RPYTa9Y+BB9k vGxCqte9+jtjDQpSXIophry9+yz4XMuiInVM7Guks6nTLJFwsb1ZOncPS1z/In3w jhD7smIxrC4VlO77dgvpXi00gvMNBvIB1FIiD9S/9UGiVogW57psiLaydY8jfOLZ TciqlpZ3IH5Ghwpouh5gU4JbA2tH1s2n1R29prRLFA1DJTu/F7VV+30qhwqPQjNq SMmaLwvuYMINab6n+a01d1URVyoyoQYBLcgSyNViiavjp+xysiSjJwxpRuWDY6Cp aKU+/TFWO4fOihomCVCtq5DviwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZIMbfN tyLH2EpZiEl5wdbxGrHRMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc3MC9DMzM2ODNCNjFEOEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlq aWZwTFpzR1hRMUhqVEVLUHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCldSoVc3zxPbdxxRLzc1k0JvqT5fHx6BAoFtrdefNC2q98gmbnWXa+ sra/sk16b56BwBY38RSsPou5QuFXRo72faFTXNT6ifcMs8p3gfx3u3xwucXIT685 4NS2c4GgZsfVS+dVPfJDnY66f5UxvucNPZnwHvRS5xPnCq45baq+BawvkD1M2X1G l7FwWYbiXJBXKEBI/ZPYSj2swJr9RwhkVLCBg4qyZ4aiLZ6G5681bIXuJJXI9Loi RZA3seW3jSz09Kqcz95aTOwBjDXOBfPdF7BG1+EyBQRo7tJFCCvj+baJi5AOBPA9 p9myzcaOnfCcYqUx7hu8gjmUSM5dI5gt -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:29 2025 by rpki-client