$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft File: HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json) Hash identifier: FuTOotSl6+5Ls2kI+eUUgXDUA8B6zCnHKN5wSbnl61k= Subject key identifier: 25:4B:A3:40:00:90:27:72:C4:39:CE:E0:EF:95:88:F7:0F:7B:2A:56 Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB Certificate issuer: /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Certificate serial: 145C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft Manifest number: 1453 Signing time: Tue 04 Nov 2025 16:59:39 +0000 Manifest this update: Tue 04 Nov 2025 16:59:38 +0000 Manifest next update: Tue 11 Nov 2025 16:59:38 +0000 Files and hashes: 1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: vfL80szL/627pck15CY7mUZb4UqREFb73kua+CYnt9I=) 2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5212 (0x145c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB Validity Not Before: Nov 4 16:59:38 2025 GMT Not After : Nov 11 16:59:38 2025 GMT Subject: CN=690a30fb-11ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:9b:a2:21:f4:76:2b:f5:8c:32:ac:30:f0: a3:25:6c:90:5e:5e:2e:f3:74:35:e7:f5:45:78:cd: 1e:d6:6f:a8:bc:ec:1d:67:82:81:08:06:7c:11:4d: 24:c1:73:3d:8d:9c:38:61:2f:ce:af:38:18:de:28: 8f:c2:3e:13:fb:6f:60:ae:6e:c7:b3:67:32:0b:3b: ee:b7:b6:01:be:9a:60:44:cc:80:2f:57:1b:b6:30: 14:ce:0b:f5:61:d0:25:ee:06:bf:2a:dd:d4:c1:95: 45:75:87:1c:1c:e7:a0:2e:29:69:fd:ee:cd:c2:f6: 00:12:f7:b5:0c:30:94:8e:a2:6d:43:1c:67:a8:f5: e7:be:fa:11:ed:54:38:37:8d:df:1e:d2:35:e3:c5: e2:11:d2:13:ba:28:5f:6c:0f:16:22:be:37:c4:f4: dc:64:ff:ba:8b:9c:22:4a:92:d1:0d:06:59:1f:3c: a5:f7:dc:bd:65:2a:82:b1:02:4e:97:0c:bb:b3:a9: 53:76:44:db:58:3a:01:46:72:b4:80:c4:d1:9b:32: 8b:75:7e:bd:02:cb:e3:ed:59:2c:ed:91:3b:32:c4: c6:c7:49:4e:c5:50:00:c2:3c:60:04:ca:7f:0a:af: ec:68:98:de:38:2f:13:db:ac:4e:4c:0e:0e:eb:5d: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4B:A3:40:00:90:27:72:C4:39:CE:E0:EF:95:88:F7:0F:7B:2A:56 X509v3 Authority Key Identifier: keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6e:7a:a7:e6:b0:89:e5:21:d1:5d:95:14:8b:dd:09:89:f8: 18:69:61:a3:71:f5:3f:d2:43:00:bd:8c:56:c4:c6:6c:57:9b: 1d:b9:9d:5a:04:32:67:1c:81:d9:ae:27:b7:f0:ce:38:36:9d: 12:5e:9f:e7:b3:b7:44:54:a6:ef:b3:94:61:01:ea:b6:a9:59: 45:51:db:23:a3:82:a4:ca:0b:d0:ea:52:64:6d:5c:14:a1:00: 3e:94:9d:cb:20:9e:0e:ca:86:ba:0f:f9:ed:33:36:53:97:bc: 5c:51:5f:ce:1a:85:ce:f2:b5:62:7c:f2:fc:72:16:b2:23:eb: 21:d4:c0:f8:6a:6e:b1:c1:25:fe:88:10:d6:33:6b:34:93:9b: b9:97:75:74:62:7e:f3:1d:e6:8b:a6:77:d8:e5:fe:15:66:d4: fe:75:2a:a4:d2:bc:63:f6:c0:33:50:31:50:a4:ef:ee:0b:12: 5f:84:6e:da:5f:9d:bc:9a:1b:6f:c5:8a:ee:d9:26:e7:28:5b: 3e:f9:bb:3d:c3:99:19:e7:a6:3b:8e:23:31:21:85:0e:2c:7a: 2a:fe:83:46:56:e3:2c:dc:e8:c6:5e:d8:69:33:8b:b4:9f:5f: f9:89:01:ec:a8:fb:c3:ca:1e:4a:71:c5:6e:6c:de:be:e8:02: ac:0e:c5:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4 NjcwQzg5Q0IwHhcNMjUxMTA0MTY1OTM4WhcNMjUxMTExMTY1OTM4WjAYMRYwFAYD VQQDEw02OTBhMzBmYi0xMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKuboiH0div1jDKsMPCjJWyQXl4u83Q15/VFeM0e1m+ovOwdZ4KBCAZ8EU0k wXM9jZw4YS/OrzgY3iiPwj4T+29grm7Hs2cyCzvut7YBvppgRMyAL1cbtjAUzgv1 YdAl7ga/Kt3UwZVFdYccHOegLilp/e7NwvYAEve1DDCUjqJtQxxnqPXnvvoR7VQ4 N43fHtI148XiEdITuihfbA8WIr43xPTcZP+6i5wiSpLRDQZZHzyl99y9ZSqCsQJO lwy7s6lTdkTbWDoBRnK0gMTRmzKLdX69Asvj7Vks7ZE7MsTGx0lOxVAAwjxgBMp/ Cq/saJjeOC8T26xOTA4O612HjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVLo0AA kCdyxDnO4O+ViPcPeypWMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ Y1dRVDc5WmhkTU9HY01pY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMbnqn5rCJ5SHRXZUUi90JifgYaWGjcfU/0kMAvYxWxMZsV5sduZ1a BDJnHIHZrie38M44Np0SXp/ns7dEVKbvs5RhAeq2qVlFUdsjo4KkygvQ6lJkbVwU oQA+lJ3LIJ4Oyoa6D/ntMzZTl7xcUV/OGoXO8rVifPL8chayI+sh1MD4am6xwSX+ iBDWM2s0k5u5l3V0Yn7zHeaLpnfY5f4VZtT+dSqk0rxj9sAzUDFQpO/uCxJfhG7a X528mhtvxYru2SbnKFs++bs9w5kZ56Y7jiMxIYUOLHoq/oNGVuMs3OjGXthpM4u0 n1/5iQHsqPvDyh5KccVubN6+6AKsDsUn -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:27 2025 by rpki-client