$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft File: Hy55yPeszIoD-1tKOvzF9pMbN4I.mft (raw, json) Hash identifier: TYOTekWcqzSgPGhVlG472jnz0VdqdN7vxZ18FKMUpSg= Subject key identifier: BB:EB:21:E0:04:CB:83:D0:0A:01:F5:49:68:EC:71:F9:E4:DC:EB:CD Authority key identifier: 1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 Certificate issuer: /CN=A91BB09C/serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Certificate serial: 1785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft Manifest number: 177B Signing time: Tue 04 Nov 2025 16:41:09 +0000 Manifest this update: Tue 04 Nov 2025 16:41:08 +0000 Manifest next update: Tue 11 Nov 2025 16:41:08 +0000 Files and hashes: 1: Hy55yPeszIoD-1tKOvzF9pMbN4I.crl (hash: jrrZNwq4j2uTbTX1/Krxhb/C0CBFXw/qWXj7R93IDOk=) 2: 02181C4CE13511E7B0D71C83C4F9AE02.roa (hash: kYdi56Vh70Qo/SN0C8R4CSPhNox0X9SfOcU95n5XzCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6021 (0x1785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB09C, serialNumber=1F2E79C8F7ACCC8A03FB5B4A3AFCC5F6931B3782 Validity Not Before: Nov 4 16:41:08 2025 GMT Not After : Nov 11 16:41:08 2025 GMT Subject: CN=690a2ca5-4da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:85:e0:a0:6a:f0:b4:33:c0:5c:e9:45:76:14: 23:b7:1d:25:28:cd:a8:fd:f9:d9:ca:3d:a2:27:b6: b3:95:1e:36:1b:3b:dc:0b:a0:33:1e:73:ac:bf:58: 1c:41:f2:a3:dd:74:07:5a:ff:08:cc:8a:57:6b:7e: 58:5b:7a:d6:18:3d:09:5b:8b:77:6f:35:ae:3b:95: 53:dd:e1:a2:ea:7f:87:ea:eb:d2:58:bf:5c:69:1f: c9:2c:b1:95:79:73:f9:3f:83:ca:54:da:de:7b:9b: 50:89:11:df:84:09:4a:e0:ae:1b:40:86:0f:86:28: 07:dd:b8:a0:99:7f:f6:cb:dd:25:6a:30:86:59:6a: 83:4f:a9:fd:de:60:24:2f:27:5e:cc:59:6f:5e:4c: 63:d1:36:1e:fb:48:28:31:29:d9:70:19:4d:35:34: ad:d9:fc:91:1c:45:b6:4a:86:f3:d3:8f:87:a9:dc: 6d:c6:90:ef:06:94:4a:9c:65:c6:84:aa:e9:33:43: 54:18:69:14:6a:05:fa:9d:b6:be:61:8f:be:02:a3: 0d:19:c9:65:39:e4:9a:da:3d:58:b4:f6:48:9f:ab: e5:ac:c9:e2:74:fb:e2:3a:f9:64:4b:85:a5:0e:97: be:03:94:a3:f4:ef:ad:89:6b:aa:dd:03:5d:c2:81: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:21:E0:04:CB:83:D0:0A:01:F5:49:68:EC:71:F9:E4:DC:EB:CD X509v3 Authority Key Identifier: keyid:1F:2E:79:C8:F7:AC:CC:8A:03:FB:5B:4A:3A:FC:C5:F6:93:1B:37:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hy55yPeszIoD-1tKOvzF9pMbN4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB09C/1FCD15E0E13411E782531082C4F9AE02/Hy55yPeszIoD-1tKOvzF9pMbN4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:4f:19:d5:ee:8d:64:a8:16:6e:49:ba:4d:e3:fe:be:c0:53: a2:33:a7:a7:5b:e6:06:9c:14:91:22:5a:ef:f7:4b:f1:1f:3a: 46:5a:0c:d0:bd:bc:80:42:33:36:34:50:3a:a6:40:b6:c6:ec: cf:3d:da:f4:54:d7:b3:07:1e:7c:2d:d0:51:e7:52:8f:25:7d: 02:c9:75:78:a9:e2:5d:c4:c4:6d:0c:a8:89:7c:b3:d1:f6:a2: 62:8c:95:85:f4:0e:21:00:6a:cb:c0:74:68:21:c3:35:cd:05: 09:05:de:23:cd:a7:66:ea:82:bf:2b:7f:15:67:78:cc:41:7d: 30:a3:21:d7:7b:d1:1d:51:50:15:db:a3:f3:db:a5:d8:61:cf: 7d:d7:1e:a5:ba:ff:72:94:54:1d:76:db:58:67:d3:04:f4:1a: 1b:41:12:77:85:a3:c0:42:3f:40:74:03:c1:14:80:59:24:86: 0e:fc:d7:23:0c:9a:4f:11:21:b7:b0:3a:6d:81:3e:d7:f5:b4: b0:22:9a:0c:cc:eb:ed:57:af:28:53:9e:e2:1c:e2:cd:6b:04: 19:f4:20:53:e7:a0:e0:24:40:ac:45:8c:b0:14:6b:2a:16:59: 3c:99:77:f1:d9:6b:7c:d8:f4:20:da:0b:e1:23:c0:14:f8:00: 5a:be:30:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIwOUMxMTAvBgNVBAUTKDFGMkU3OUM4RjdBQ0NDOEEwM0ZCNUI0QTNBRkNDNUY2 OTMxQjM3ODIwHhcNMjUxMTA0MTY0MTA4WhcNMjUxMTExMTY0MTA4WjAYMRYwFAYD VQQDEw02OTBhMmNhNS00ZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA74XgoGrwtDPAXOlFdhQjtx0lKM2o/fnZyj2iJ7azlR42GzvcC6AzHnOsv1gc QfKj3XQHWv8IzIpXa35YW3rWGD0JW4t3bzWuO5VT3eGi6n+H6uvSWL9caR/JLLGV eXP5P4PKVNree5tQiRHfhAlK4K4bQIYPhigH3bigmX/2y90lajCGWWqDT6n93mAk LydezFlvXkxj0TYe+0goMSnZcBlNNTSt2fyRHEW2Sobz04+HqdxtxpDvBpRKnGXG hKrpM0NUGGkUagX6nba+YY++AqMNGcllOeSa2j1YtPZIn6vlrMnidPviOvlkS4Wl Dpe+A5Sj9O+tiWuq3QNdwoF4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvrIeAE y4PQCgH1SWjscfnk3OvNMB8GA1UdIwQYMBaAFB8uecj3rMyKA/tbSjr8xfaTGzeC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjA5Qy8xRkNEMTVFMEUx MzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJb0QtMXRLT3Z6RjlwTWJO NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h5NTV5UGVzeklvRC0xdEtPdnpGOXBNYk40SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjA5Qy8xRkNEMTVFMEUxMzQxMUU3ODI1MzEwODJDNEY5QUUwMi9IeTU1eVBlc3pJ b0QtMXRLT3Z6RjlwTWJONEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYTxnV7o1kqBZuSbpN4/6+wFOiM6enW+YGnBSRIlrv90vxHzpGWgzQ vbyAQjM2NFA6pkC2xuzPPdr0VNezBx58LdBR51KPJX0CyXV4qeJdxMRtDKiJfLPR 9qJijJWF9A4hAGrLwHRoIcM1zQUJBd4jzadm6oK/K38VZ3jMQX0woyHXe9EdUVAV 26Pz26XYYc991x6luv9ylFQddttYZ9ME9BobQRJ3haPAQj9AdAPBFIBZJIYO/Ncj DJpPESG3sDptgT7X9bSwIpoMzOvtV68oU57iHOLNawQZ9CBT56DgJECsRYywFGsq Flk8mXfx2Wt82PQg2gvhI8AU+ABavjD/ -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:25 2025 by rpki-client