$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft File: HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json) Hash identifier: QiMVsERJ1HCPQyRvdL9wnV8X3QBdpy7MlAsTr3gna5k= Subject key identifier: CF:AE:F0:7A:7C:F2:D0:26:D5:55:0B:48:B2:4A:55:11:15:33:74:EB Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft Manifest number: 047B Signing time: Mon 03 Nov 2025 00:05:33 +0000 Manifest this update: Mon 03 Nov 2025 00:05:32 +0000 Manifest next update: Mon 10 Nov 2025 00:05:32 +0000 Files and hashes: 1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: cebEln6w6MywKBnezp0eXyOYuVnjFs9tpA371f9G8IU=) 2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: wVB4uw3FvRPkAbU+6VZBotQsPi/8FbB7ml2/chpWBXA=) 3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Nov 3 00:05:32 2025 GMT Not After : Nov 10 00:05:32 2025 GMT Subject: CN=6907f1cc-de89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:11:f1:e3:4a:16:f5:fd:b1:6e:94:f2:04: 75:cd:c2:b2:a8:9c:fc:9f:2d:bf:5c:70:de:d1:ba: 9b:9a:87:2d:d3:39:c9:be:66:91:f5:7a:84:58:93: 2a:a9:1b:d2:2b:9b:cb:98:1e:7f:fd:97:e9:bc:02: d6:f5:32:10:ca:f1:99:a9:17:9e:d9:bd:77:e7:a0: 83:80:d4:b5:7b:85:2a:02:ad:92:cf:46:82:f1:b6: e8:6d:ab:83:de:71:a3:29:08:df:c7:e8:f1:31:b1: 54:0e:21:e6:75:84:97:53:5a:b3:35:73:4a:18:e6: e0:25:a3:f1:6f:2e:ea:09:c2:3b:53:f3:6c:c8:74: ae:74:ec:6f:90:86:45:8d:b9:4d:9c:76:9f:06:a8: 9a:6f:57:ae:ce:18:fc:f6:00:0a:b6:be:3e:ca:55: 93:0c:31:28:f9:40:64:9d:c4:2c:9b:d6:34:7f:39: 37:92:6f:89:79:6e:05:97:5a:26:85:5c:46:29:ed: 62:93:1f:2f:39:af:92:d2:a3:80:0c:dc:49:3f:53: 08:1a:7c:6d:c0:38:84:b2:ca:77:88:1c:f6:8c:ed: 5c:d4:53:b7:47:87:55:9b:3b:31:3b:a9:47:39:06: 2d:ef:c3:78:80:03:1d:ee:e6:22:eb:24:4d:57:3b: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AE:F0:7A:7C:F2:D0:26:D5:55:0B:48:B2:4A:55:11:15:33:74:EB X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:54:38:41:7b:a9:6a:a5:58:2b:ce:b0:4a:84:39:6e:80:d5: 39:d9:ba:89:dd:12:46:c3:70:15:85:15:d0:26:ee:1b:f7:39: 7c:52:5b:f2:78:f8:43:b1:36:ce:55:5d:3d:78:14:6b:ef:e1: a5:8c:1f:82:2f:63:8b:88:bb:80:40:26:84:3f:a8:05:f9:77: 38:35:54:36:7c:63:40:cf:6e:01:26:c7:23:42:80:5d:c7:29: af:8f:c1:ad:19:ef:80:2e:a7:6d:82:3d:28:17:14:af:a8:c3: fd:11:9b:8b:64:34:f3:d3:21:a8:34:53:e7:de:70:3a:57:6a: d2:b1:85:ec:5d:80:14:47:c4:f1:63:2c:80:7c:01:4a:79:78: fd:19:8f:f1:1c:fa:24:6c:39:96:ee:6d:92:bd:82:74:82:04: 21:cb:08:d1:4f:f5:28:bf:7a:d1:2d:d8:67:88:3c:e3:fb:ce: a5:08:cc:8f:f7:20:4e:0c:9a:8e:11:73:f3:9b:3b:09:47:67: 93:5f:e5:28:cf:70:8c:9e:95:ea:92:2d:03:7f:0d:a3:1c:9e: bb:a4:97:17:2f:d1:81:9c:e3:1c:da:8e:ed:00:df:93:3b:93: 5f:3f:10:77:c1:1d:63:cf:2f:90:54:fc:5c:ba:ad:49:12:d0: 6c:a5:87:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUxMTAzMDAwNTMyWhcNMjUxMTEwMDAwNTMyWjAYMRYwFAYD VQQDEw02OTA3ZjFjYy1kZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmIR8eNKFvX9sW6U8gR1zcKyqJz8ny2/XHDe0bqbmoct0znJvmaR9XqEWJMq qRvSK5vLmB5//ZfpvALW9TIQyvGZqRee2b1356CDgNS1e4UqAq2Sz0aC8bbobauD 3nGjKQjfx+jxMbFUDiHmdYSXU1qzNXNKGObgJaPxby7qCcI7U/NsyHSudOxvkIZF jblNnHafBqiab1euzhj89gAKtr4+ylWTDDEo+UBkncQsm9Y0fzk3km+JeW4Fl1om hVxGKe1ikx8vOa+S0qOADNxJP1MIGnxtwDiEssp3iBz2jO1c1FO3R4dVmzsxO6lH OQYt78N4gAMd7uYi6yRNVzsXOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+u8Hp8 8tAm1VULSLJKVREVM3TrMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTEzQi83QkU3QzA5MDYyRjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVC WTdSUDYyS0Y3LTdsaDhiZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQVDhBe6lqpVgrzrBKhDlugNU52bqJ3RJGw3AVhRXQJu4b9zl8Ulvy ePhDsTbOVV09eBRr7+GljB+CL2OLiLuAQCaEP6gF+Xc4NVQ2fGNAz24BJscjQoBd xymvj8GtGe+ALqdtgj0oFxSvqMP9EZuLZDTz0yGoNFPn3nA6V2rSsYXsXYAUR8Tx YyyAfAFKeXj9GY/xHPokbDmW7m2SvYJ0ggQhywjRT/Uov3rRLdhniDzj+86lCMyP 9yBODJqOEXPzmzsJR2eTX+Uoz3CMnpXqki0Dfw2jHJ67pJcXL9GBnOMc2o7tAN+T O5NfPxB3wR1jzy+QVPxcuq1JEtBspYdq -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:33 2025 by rpki-client