$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft File: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json) Hash identifier: ljustmYajDzW0HaR3kORysBYKDVv7+5MxPexIdglTKg= Subject key identifier: 72:A5:72:A3:B1:AB:AA:81:DC:17:65:89:39:29:12:18:D8:32:17:B5 Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 Certificate issuer: /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Certificate serial: 031B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft Manifest number: 0310 Signing time: Wed 05 Nov 2025 01:14:22 +0000 Manifest this update: Wed 05 Nov 2025 01:14:21 +0000 Manifest next update: Wed 12 Nov 2025 01:14:21 +0000 Files and hashes: 1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: qFdyxQPv6xGObnvUVTP7QqeR3/11Wii6z0SAKaK/r9Q=) 2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc=) 3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: WLqs4EYDGZGhgsTcvZkB1qzpm9zeqwQq3iz4UzKMW3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 795 (0x31b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694 Validity Not Before: Nov 5 01:14:21 2025 GMT Not After : Nov 12 01:14:21 2025 GMT Subject: CN=690aa4ed-f6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:df:5b:1b:f2:9a:36:d5:3e:72:ee:6c:91: a6:3b:8f:2d:31:48:93:6a:ed:24:ea:4f:97:4b:3d: 8c:14:a5:cb:88:09:34:d3:3a:94:90:f6:b8:4d:96: 50:97:6e:18:c4:e2:b5:25:4b:5c:52:2e:60:16:2b: 67:40:81:db:ff:d5:d5:1e:79:6c:3e:c9:c2:b5:45: 05:55:8c:03:3d:0a:3e:77:38:96:18:be:b0:3b:ed: e7:23:78:a7:ec:cb:ac:49:01:2a:6f:61:ca:0d:db: 27:f5:c8:af:e1:b3:03:b7:ec:39:ab:13:ec:7b:d0: 25:db:f8:6a:42:09:10:bc:a6:4d:3b:0f:62:47:4c: f7:46:83:9a:dd:89:3e:50:c9:f8:4d:b4:0e:3a:1d: 70:57:fe:d1:76:3a:36:f1:65:4d:df:8f:42:6d:39: 50:41:38:38:89:6a:c1:5a:76:86:3f:62:b8:b2:46: 9d:28:20:57:9b:32:db:da:94:6b:00:2d:cd:b5:ab: 86:50:0a:22:c8:f9:25:0f:75:06:8c:f9:ea:50:92: 75:79:9d:88:99:99:6e:76:df:ec:7c:59:92:6d:a1: e6:a5:37:02:69:93:fd:9e:c6:41:2b:3d:bf:2f:eb: 45:20:3f:bf:b7:7f:ef:46:e8:90:84:05:31:ee:cb: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:72:A3:B1:AB:AA:81:DC:17:65:89:39:29:12:18:D8:32:17:B5 X509v3 Authority Key Identifier: keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:87:32:0c:af:47:f1:8b:07:44:67:94:fe:dc:97:48:cd:93: 62:8a:4e:a7:65:32:cf:86:e4:6d:5f:15:19:6a:03:06:c5:ca: c8:c0:5c:4c:f6:bd:cf:3d:af:48:53:3a:55:b2:b5:2d:7e:16: 99:e7:6a:3e:7a:9c:bf:fc:81:92:ce:03:f7:cc:d5:6b:99:49: 8b:e1:18:89:25:e8:03:5f:fc:ba:e0:0d:36:e8:29:5c:53:cc: 8b:cd:ef:de:cc:f5:ae:84:ea:4f:3a:88:0c:8a:fc:42:2a:90: e3:a5:c5:af:88:7b:f7:4f:4b:c6:05:10:33:66:a7:ff:4b:f2: 0e:21:e8:75:f6:ed:fd:4b:6a:b2:64:47:bf:6b:27:43:0c:f1: 2e:23:be:8d:94:b7:7f:79:ef:16:94:00:21:bf:6e:f8:b5:a9: 88:cb:4f:87:05:1b:5c:32:86:40:62:31:27:3a:b0:97:f0:7b: 81:48:2d:f4:45:7b:0d:52:6a:cf:0f:2a:cc:59:c8:87:71:5d: a4:27:5a:86:93:38:5a:ff:7f:e9:bf:d2:ba:88:4b:39:49:9b: 04:a5:41:ce:57:9a:a4:4d:f0:4f:4c:77:70:a2:90:70:97:72: c6:c5:4c:7a:5d:f0:ac:b7:be:8c:8b:c8:3f:73:d8:be:85:5d: 86:88:f8:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY1QzAxMTAvBgNVBAUTKDg1NzkzNzcyNjFDQTI3OUYxQzJGRjJFQkM0NDI5NzQz N0RENkU2OTQwHhcNMjUxMTA1MDExNDIxWhcNMjUxMTEyMDExNDIxWjAYMRYwFAYD VQQDEw02OTBhYTRlZC1mNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H3fWxvymjbVPnLubJGmO48tMUiTau0k6k+XSz2MFKXLiAk00zqUkPa4TZZQ l24YxOK1JUtcUi5gFitnQIHb/9XVHnlsPsnCtUUFVYwDPQo+dziWGL6wO+3nI3in 7MusSQEqb2HKDdsn9civ4bMDt+w5qxPse9Al2/hqQgkQvKZNOw9iR0z3RoOa3Yk+ UMn4TbQOOh1wV/7Rdjo28WVN349CbTlQQTg4iWrBWnaGP2K4skadKCBXmzLb2pRr AC3NtauGUAoiyPklD3UGjPnqUJJ1eZ2ImZludt/sfFmSbaHmpTcCaZP9nsZBKz2/ L+tFID+/t3/vRuiQhAUx7stquwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKlcqOx q6qB3BdliTkpEhjYMhe1MB8GA1UdIwQYMBaAFIV5N3JhyiefHC/y68RCl0N91uaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjVDMC9CQ0JENEZCNkYx QzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1OGNMX0xyeEVLWFEzM1c1 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hYazNjbUhLSjU4Y0xfTHJ4RUtYUTMzVzVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjVDMC9CQ0JENEZCNkYxQzIxMUVDQTE2M0ZENDJDNEY5QUUwMi9oWGszY21IS0o1 OGNMX0xyeEVLWFEzM1c1cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8hzIMr0fxiwdEZ5T+3JdIzZNiik6nZTLPhuRtXxUZagMGxcrIwFxM 9r3PPa9IUzpVsrUtfhaZ52o+epy//IGSzgP3zNVrmUmL4RiJJegDX/y64A026Clc U8yLze/ezPWuhOpPOogMivxCKpDjpcWviHv3T0vGBRAzZqf/S/IOIeh19u39S2qy ZEe/aydDDPEuI76NlLd/ee8WlAAhv274tamIy0+HBRtcMoZAYjEnOrCX8HuBSC30 RXsNUmrPDyrMWciHcV2kJ1qGkzha/3/pv9K6iEs5SZsEpUHOV5qkTfBPTHdwopBw l3LGxUx6XfCst76Mi8g/c9i+hV2GiPiC -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:06 2025 by rpki-client