$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft File: HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json) Hash identifier: 6jhMQjC8Zp5m8BS3CdYzHrh0dbJa3iwGiat0s0pklpE= Subject key identifier: 38:3D:E5:E5:E7:81:FC:37:78:9E:05:15:D3:FB:14:57:B4:3F:B1:25 Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Certificate serial: 0AA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft Manifest number: 0A96 Signing time: Sun 02 Nov 2025 19:32:14 +0000 Manifest this update: Sun 02 Nov 2025 19:32:13 +0000 Manifest next update: Sun 09 Nov 2025 19:32:13 +0000 Files and hashes: 1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: tKroJxUnfbiMZeGqJ7B3g1iszPqUNvLtsTxd0Eu+9pE=) 2: 9261E554464611EE84B7C534C4F9AE02.roa (hash: i3esyJrHHzIBHRmVCNUz0W4VMdpIDRgi+XPXqZ5CNEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2720 (0xaa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497 Validity Not Before: Nov 2 19:32:13 2025 GMT Not After : Nov 9 19:32:13 2025 GMT Subject: CN=6907b1bd-1d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4d:dd:cd:c4:a5:36:ef:f0:47:ac:f5:a9:b1: b9:39:31:fc:0d:5f:87:01:4b:ea:3d:99:c4:72:f5: 8b:55:3d:07:ce:b6:a1:a3:37:6a:f7:ae:a2:f2:fb: 7e:29:58:d0:99:60:98:3c:28:fc:38:90:56:d9:20: c5:8d:58:9f:b9:9d:1a:05:a7:00:b0:f3:39:5f:c0: 02:e8:62:58:81:5c:ed:03:43:2f:77:83:59:2e:f6: 5a:fc:ad:78:e2:3e:3f:2b:53:a1:62:4e:10:76:88: c0:38:6c:c3:71:07:08:20:e8:8f:15:47:c2:74:f0: 38:76:64:78:b6:2f:bb:82:23:c7:f2:08:3c:a2:6c: 78:12:ba:53:f0:79:c5:99:a4:5a:28:a4:08:fa:08: 7f:5e:64:3e:f8:95:be:68:d4:e3:1f:17:12:7a:34: 68:a1:ab:bc:9e:cd:6e:17:95:8a:72:9c:1a:9d:1f: d3:9a:0a:9c:ca:da:8a:df:c5:01:2c:a7:c8:e3:67: 58:68:ef:29:4b:40:fb:81:c2:c1:68:14:4f:6f:c9: 03:59:4d:45:e4:30:9c:7d:cb:a7:6f:f1:cc:b7:08: 33:f7:53:2e:f4:57:44:49:b5:21:a2:03:61:c5:f8: 57:e3:c6:a9:ee:e9:c1:21:f8:72:5c:3a:c3:15:33: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3D:E5:E5:E7:81:FC:37:78:9E:05:15:D3:FB:14:57:B4:3F:B1:25 X509v3 Authority Key Identifier: keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:dd:17:cd:7d:19:03:03:40:63:ac:fe:00:53:52:7c:b8: 8a:af:23:a2:77:3d:2a:0b:c4:f5:ed:55:13:f4:a8:9b:7b:36: ed:35:2e:04:0e:2e:01:4b:1b:d6:80:72:73:ea:66:60:c9:a6: 0d:8f:e3:1c:bd:74:72:9a:be:9a:f8:e1:03:e3:7f:d8:33:63: 87:a8:28:ad:a3:db:2a:93:e2:37:49:16:07:78:d5:ea:33:a5: 27:f0:1f:10:23:00:8d:6f:31:f3:16:5c:75:a0:73:2d:55:0f: 76:23:d5:7a:6a:5f:e6:ac:34:00:8e:ab:b8:30:7a:cd:15:a8: 1a:54:45:c9:b9:07:bd:4b:34:47:cb:05:f2:5b:31:81:3f:4e: b3:24:56:28:84:c3:2d:24:32:9a:3a:a5:04:cf:86:b3:6a:9f: a1:fd:8b:14:1b:ec:ad:3a:8b:74:18:74:e9:26:b4:e8:1a:9e: f0:90:c6:33:34:9e:9f:b7:f0:57:54:4b:51:84:53:61:44:69: 77:d4:9e:c5:66:60:f6:0d:e6:77:87:80:dc:d9:15:10:eb:14: 83:5e:64:8a:f5:18:a0:75:1a:ba:3d:1f:15:b3:13:92:1d:cd: 6e:90:6c:2c:51:4b:a5:97:66:ed:fb:48:6e:af:4d:c4:cb:cd: 1c:48:ba:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCQjQxMTAvBgNVBAUTKDFEMTIxN0VGOEZFODRCNTgyNTUxNjcxQkNBMzVFNjg0 NDg2OTI0OTcwHhcNMjUxMTAyMTkzMjEzWhcNMjUxMTA5MTkzMjEzWjAYMRYwFAYD VQQDEw02OTA3YjFiZC0xZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAok3dzcSlNu/wR6z1qbG5OTH8DV+HAUvqPZnEcvWLVT0Hzrahozdq966i8vt+ KVjQmWCYPCj8OJBW2SDFjVifuZ0aBacAsPM5X8AC6GJYgVztA0Mvd4NZLvZa/K14 4j4/K1OhYk4QdojAOGzDcQcIIOiPFUfCdPA4dmR4ti+7giPH8gg8omx4ErpT8HnF maRaKKQI+gh/XmQ++JW+aNTjHxcSejRooau8ns1uF5WKcpwanR/TmgqcytqK38UB LKfI42dYaO8pS0D7gcLBaBRPb8kDWU1F5DCcfcunb/HMtwgz91Mu9FdESbUhogNh xfhX48ap7unBIfhyXDrDFTPQFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg95eXn gfw3eJ4FFdP7FFe0P7ElMB8GA1UdIwQYMBaAFB0SF++P6EtYJVFnG8o15oRIaSSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJCNC9EOTU0QkFCRTY5 QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1MxZ2xVV2NieWpYbWhFaHBK SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hSSVg3NF9vUzFnbFVXY2J5alhtaEVocEpKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJCNC9EOTU0QkFCRTY5QjcxMUVBODhFNzJFNTlDNEY5QUUwMi9IUklYNzRfb1Mx Z2xVV2NieWpYbWhFaHBKSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUHd0XzX0ZAwNAY6z+AFNSfLiKryOidz0qC8T17VUT9KibezbtNS4E Di4BSxvWgHJz6mZgyaYNj+McvXRymr6a+OED43/YM2OHqCito9sqk+I3SRYHeNXq M6Un8B8QIwCNbzHzFlx1oHMtVQ92I9V6al/mrDQAjqu4MHrNFagaVEXJuQe9SzRH ywXyWzGBP06zJFYohMMtJDKaOqUEz4azap+h/YsUG+ytOot0GHTpJrToGp7wkMYz NJ6ft/BXVEtRhFNhRGl31J7FZmD2DeZ3h4Dc2RUQ6xSDXmSK9RigdRq6PR8VsxOS Hc1ukGwsUUull2bt+0hur03Ey80cSLr1 -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:59 2025 by rpki-client