$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: GdBgz85fFRisBftj+mr77Ivz1L+rFq8aqTklkuzvijo= Subject key identifier: 57:F1:90:AA:94:39:F8:17:80:0B:30:51:70:3F:19:78:1A:A9:18:DD Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 0212 Signing time: Wed 05 Nov 2025 02:19:28 +0000 Manifest this update: Wed 05 Nov 2025 02:19:27 +0000 Manifest next update: Wed 12 Nov 2025 02:19:27 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: GSZ4IdKVSy+Fe5v8e2XxhiglcksLwQVdvcVZDfi7ji0=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: fk3GNutu1Xl8jf9hzH4EWHosYGuy+JY1n5pgsTabR1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Nov 5 02:19:27 2025 GMT Not After : Nov 12 02:19:27 2025 GMT Subject: CN=690ab430-797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:d4:65:ad:d3:6f:28:c4:ee:db:19:50:30: e4:73:6f:b9:5f:a7:c6:7a:ef:03:0a:b6:4c:87:34: 7d:92:b2:88:04:da:dd:84:9d:13:88:70:0b:1b:83: 94:97:72:ca:45:1a:ec:50:c9:3c:a5:bf:d9:2d:a5: ad:08:76:57:87:f2:f7:24:64:88:54:5e:a3:40:ca: 04:c3:6c:1d:87:f5:45:50:34:72:6d:c7:43:e5:c8: 0c:9d:f5:17:7f:cb:f9:78:87:39:51:25:71:f4:33: 58:08:aa:b4:c7:37:1f:d2:2c:ef:ac:07:e5:ec:13: cb:c5:75:25:70:4b:06:9c:1f:6c:ef:ff:15:df:66: d2:71:37:2a:d6:6e:31:7c:68:6b:50:50:b7:88:01: 3e:02:a8:96:99:1c:e5:e0:13:7b:19:3c:9f:44:d9: 88:93:a6:f3:bf:cc:07:2f:f5:9e:49:1e:d8:55:f7: a7:ed:30:c0:27:7f:d9:05:36:40:d8:f1:37:2f:93: 96:21:28:25:8d:3b:45:4c:58:51:82:46:2f:b9:20: 6c:65:c2:05:a7:fc:37:f2:ed:5a:93:b7:c1:d5:54: 47:40:cd:fb:36:33:a1:5c:d4:34:80:72:d2:7a:fe: f1:7a:bb:d1:02:e7:6d:12:14:1a:bd:1e:f6:36:82: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F1:90:AA:94:39:F8:17:80:0B:30:51:70:3F:19:78:1A:A9:18:DD X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1c:58:b4:df:fa:90:1b:ef:b4:03:da:e2:52:f8:46:4c:fc: b2:f0:c8:bd:3a:d0:b6:c4:a6:ee:78:82:30:cc:f5:f3:77:9e: 91:9b:25:f0:45:55:c7:ed:a4:f7:63:00:cd:0f:68:a9:df:25: 17:f9:76:5c:7c:ba:68:a7:e7:6a:fb:66:9e:35:64:79:39:cd: 9d:ad:9e:53:71:0e:38:f4:41:2b:81:b8:86:68:08:36:b9:4c: f2:ae:8c:27:58:80:55:d3:93:96:93:f0:5f:56:75:be:b5:b5: 65:1d:fd:68:46:a7:cd:5a:61:f1:9c:82:dc:2b:bb:42:2d:fa: 05:79:f6:4a:eb:5b:3b:cf:10:b5:69:d1:e9:5b:5f:35:b6:2c: 5e:7c:b8:9b:03:56:8a:74:41:c4:04:9b:e3:8f:e9:bb:f0:9e: 5d:37:cb:6d:8c:6f:df:07:4d:ef:df:5b:13:4c:cc:91:76:fa: 51:c5:f1:d5:9f:1a:d5:29:43:b2:60:ba:db:bc:b8:56:db:cb: 0b:56:92:52:9f:c2:bf:29:d5:34:b6:fe:10:41:ba:8f:47:28: 6e:33:db:31:6e:fc:b1:f3:b2:99:84:4d:c6:df:50:88:d9:2e: c0:94:47:15:67:d9:21:26:d2:ed:bf:c4:f4:19:9d:ba:72:b5: a8:5e:9b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjUxMTA1MDIxOTI3WhcNMjUxMTEyMDIxOTI3WjAYMRYwFAYD VQQDEw02OTBhYjQzMC03OTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvLUZa3TbyjE7tsZUDDkc2+5X6fGeu8DCrZMhzR9krKIBNrdhJ0TiHALG4OU l3LKRRrsUMk8pb/ZLaWtCHZXh/L3JGSIVF6jQMoEw2wdh/VFUDRybcdD5cgMnfUX f8v5eIc5USVx9DNYCKq0xzcf0izvrAfl7BPLxXUlcEsGnB9s7/8V32bScTcq1m4x fGhrUFC3iAE+AqiWmRzl4BN7GTyfRNmIk6bzv8wHL/WeSR7YVfen7TDAJ3/ZBTZA 2PE3L5OWISgljTtFTFhRgkYvuSBsZcIFp/w38u1ak7fB1VRHQM37NjOhXNQ0gHLS ev7xervRAudtEhQavR72NoLrVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfxkKqU OfgXgAswUXA/GXgaqRjdMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTHFi03/qQG++0A9riUvhGTPyy8Mi9OtC2xKbueIIwzPXzd56RmyXw RVXH7aT3YwDND2ip3yUX+XZcfLpop+dq+2aeNWR5Oc2drZ5TcQ449EErgbiGaAg2 uUzyrownWIBV05OWk/BfVnW+tbVlHf1oRqfNWmHxnILcK7tCLfoFefZK61s7zxC1 adHpW181tixefLibA1aKdEHEBJvjj+m78J5dN8ttjG/fB03v31sTTMyRdvpRxfHV nxrVKUOyYLrbvLhW28sLVpJSn8K/KdU0tv4QQbqPRyhuM9sxbvyx87KZhE3G31CI 2S7AlEcVZ9khJtLtv8T0GZ26crWoXptu -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:50 2025 by rpki-client