$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft File: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json) Hash identifier: cQkmzC5ngiMeurv0k9ytpmgsbGAN/vsk+rJoRN8ZeYU= Subject key identifier: F1:C3:15:F3:DD:B5:5D:E7:29:E8:A7:16:FC:6D:3D:10:31:35:72:B5 Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB Certificate issuer: /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Certificate serial: 11DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft Manifest number: 11CA Signing time: Tue 04 Nov 2025 17:17:18 +0000 Manifest this update: Tue 04 Nov 2025 17:17:17 +0000 Manifest next update: Tue 11 Nov 2025 17:17:17 +0000 Files and hashes: 1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: k6b9uEqHF69jBo4A3EX9vf0D8nMqDrNYs06fNOyQibg=) 2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: IU4SG15xY5pa/IoW3wwDCZ3o/ZxiWKB5Df2NzHDteOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB Validity Not Before: Nov 4 17:17:17 2025 GMT Not After : Nov 11 17:17:17 2025 GMT Subject: CN=690a351e-9058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:7a:fb:f3:f6:ff:f5:ac:63:84:36:aa:0e: 6b:1a:44:36:98:18:4d:84:fc:07:42:d1:ac:ac:45: f9:1f:1d:83:58:ab:5d:a2:ca:8a:bb:2b:37:1c:ed: fc:3b:61:2e:d8:02:73:8e:b3:58:d2:5f:e7:50:00: 29:a6:93:d3:e5:32:75:62:17:b3:4d:e4:83:29:d9: 8d:a6:52:d9:bf:db:02:4a:53:1c:05:f0:e1:1c:83: 28:da:de:2a:5a:e7:36:a0:f4:72:db:e9:4f:74:0a: 36:df:7f:40:99:e3:21:86:4e:d4:de:db:0a:2b:fb: c8:d9:b2:16:88:73:93:ad:1f:85:61:1b:ea:91:2f: e6:62:55:0e:b2:1c:39:4a:16:96:dc:c1:46:93:eb: 4b:35:62:6f:e9:95:32:0b:c3:eb:e7:ed:68:1a:c7: 30:e9:67:bf:65:80:d6:73:02:bd:95:ea:e5:18:91: 0e:22:db:78:1d:14:66:3d:ab:a2:3f:43:f9:ba:e3: e7:82:ef:b3:54:70:72:b5:1c:24:e5:10:82:ae:52: 82:17:21:57:b6:32:da:c8:7c:3c:53:8a:db:e3:7e: c7:69:65:75:94:08:e6:d3:5f:59:7f:f8:98:72:90: 15:7c:5b:64:b5:e1:d9:20:57:00:45:cf:f3:d7:a5: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C3:15:F3:DD:B5:5D:E7:29:E8:A7:16:FC:6D:3D:10:31:35:72:B5 X509v3 Authority Key Identifier: keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:16:74:80:53:a6:20:77:87:7a:40:1b:1b:1f:fd:58:34:d7: dd:b0:dc:8a:11:87:55:ff:49:e3:52:47:d2:f2:d5:93:73:70: fe:ef:11:60:b0:aa:f2:c9:12:50:e5:82:c8:c1:23:bc:5f:c7: c8:50:00:ca:6a:66:c0:a5:fe:3d:44:3b:9d:d2:a1:9b:a2:4e: 0a:66:9c:bd:12:a5:60:01:66:f4:08:68:ca:3b:1d:04:49:1a: ba:88:95:ad:a3:24:c4:2f:13:f5:b8:9d:86:eb:28:25:82:55: fb:d4:24:83:a6:44:2a:a1:a6:4c:32:bf:41:3c:1c:23:68:7e: 2f:35:49:bd:9d:05:b0:7c:fd:aa:d9:38:fc:c0:ff:97:89:8c: 16:77:8b:c6:be:0c:b6:fa:f7:0e:c8:69:3d:6e:a7:b6:3e:31: bb:c4:7d:8c:68:ac:90:bf:54:8b:d6:4e:3c:3a:76:27:69:58: 0b:01:27:2e:4f:44:11:7b:6c:b6:b2:7e:4f:70:1b:f8:d8:fa: 1d:3a:39:b3:ae:a5:34:cc:25:63:e2:2e:00:cb:70:65:0f:ac: 74:aa:c9:f5:f2:c6:57:a0:2d:9f:b4:6b:2a:87:4d:99:a3:80: fd:98:1c:f1:04:b7:bb:44:c3:c4:c6:1a:30:99:e5:f7:67:8d: 85:67:d5:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyN0MxMTAvBgNVBAUTKDFEODgyQzhDRjI0MzRDQzlCQkZENzkxOTFEQzJDNjk4 MjkyNkU4QUIwHhcNMjUxMTA0MTcxNzE3WhcNMjUxMTExMTcxNzE3WjAYMRYwFAYD VQQDEw02OTBhMzUxZS05MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO16+/P2//WsY4Q2qg5rGkQ2mBhNhPwHQtGsrEX5Hx2DWKtdosqKuys3HO38 O2Eu2AJzjrNY0l/nUAApppPT5TJ1YhezTeSDKdmNplLZv9sCSlMcBfDhHIMo2t4q Wuc2oPRy2+lPdAo2339AmeMhhk7U3tsKK/vI2bIWiHOTrR+FYRvqkS/mYlUOshw5 ShaW3MFGk+tLNWJv6ZUyC8Pr5+1oGscw6We/ZYDWcwK9lerlGJEOItt4HRRmPaui P0P5uuPngu+zVHBytRwk5RCCrlKCFyFXtjLayHw8U4rb437HaWV1lAjm019Zf/iY cpAVfFtkteHZIFcARc/z16VnhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHDFfPd tV3nKeinFvxtPRAxNXK1MB8GA1UdIwQYMBaAFB2ILIzyQ0zJu/15GR3CxpgpJuir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI3Qy85RDc3QzZENDAy OEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRNbTdfWGtaSGNMR21Da202 S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hZZ3NqUEpEVE1tN19Ya1pIY0xHbUNrbTZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzI3Qy85RDc3QzZENDAyOEYxMUU5OUQ4MUY2NDBDNEY5QUUwMi9IWWdzalBKRFRN bTdfWGtaSGNMR21Da202S3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxFnSAU6Ygd4d6QBsbH/1YNNfdsNyKEYdV/0njUkfS8tWTc3D+7xFg sKryyRJQ5YLIwSO8X8fIUADKambApf49RDud0qGbok4KZpy9EqVgAWb0CGjKOx0E SRq6iJWtoyTELxP1uJ2G6yglglX71CSDpkQqoaZMMr9BPBwjaH4vNUm9nQWwfP2q 2Tj8wP+XiYwWd4vGvgy2+vcOyGk9bqe2PjG7xH2MaKyQv1SL1k48OnYnaVgLAScu T0QRe2y2sn5PcBv42PodOjmzrqU0zCVj4i4Ay3BlD6x0qsn18sZXoC2ftGsqh02Z o4D9mBzxBLe7RMPExhowmeX3Z42FZ9Wv -----END CERTIFICATE-----Generated at Tue Nov 4 21:25:41 2025 by rpki-client