$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft File: HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json) Hash identifier: LDPgdUUkteXJ9WsXjM3iVPdnU0xqgFDxDJhOlY+/SIg= Subject key identifier: BD:2F:66:96:49:AF:78:DD:7A:A8:CB:05:5E:BE:3F:D8:80:A0:92:81 Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft Manifest number: 353B Signing time: Tue 04 Nov 2025 14:16:00 +0000 Manifest this update: Tue 04 Nov 2025 14:15:59 +0000 Manifest next update: Tue 11 Nov 2025 14:15:59 +0000 Files and hashes: 1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: bZi2grUFXc/gG4fgMdsVXD05LzO5BkGSi2YiH1Mmzyc=) 2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: OnxDy/55jjMCiBnkBT8Gsibkcizt1adU0FH5L5R2Oyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: Nov 4 14:15:59 2025 GMT Not After : Nov 11 14:15:59 2025 GMT Subject: CN=690a0a9f-b568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:cb:cf:94:d5:21:17:41:a4:7f:06:fc:fd: e5:e2:6e:4c:6c:cc:eb:92:5d:7b:ce:6c:4c:05:4b: 1a:e6:cc:d4:8e:18:4e:65:a7:89:5d:ab:e6:3e:07: 22:bb:da:b8:98:6a:09:f8:41:12:a5:ad:24:58:9f: f2:d3:83:0b:f6:0f:85:34:89:0a:20:63:e3:76:52: c1:d3:d7:1c:34:8e:09:d5:8a:82:8f:f8:f2:27:bc: aa:dc:6c:ff:cc:f0:e8:a4:69:d7:e5:64:bc:7e:7f: da:cc:fe:02:aa:84:dc:20:83:ae:6f:15:73:dd:68: d1:ad:55:f7:ab:0a:5e:f2:3c:ba:4a:c9:95:72:0b: dc:0c:a0:95:83:13:17:8e:e7:51:bc:69:1d:21:5e: 53:ab:9c:b0:ae:ac:51:8f:0c:ee:29:f6:f4:63:22: 97:e3:42:70:c3:16:d0:12:88:c6:24:ce:27:2b:54: 81:ea:0f:da:d9:55:c5:b2:b7:93:2d:a8:86:2a:66: 63:14:dd:c0:5e:4c:c9:a4:28:16:1b:98:69:09:d7: d5:13:af:53:5d:d4:99:d9:5a:33:66:6c:b0:a6:e8: c4:00:af:de:ea:ae:c3:82:9f:c3:a7:8e:f6:ae:03: 45:5d:9a:8b:95:6e:ed:bd:a3:60:d3:d4:9d:e8:83: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:66:96:49:AF:78:DD:7A:A8:CB:05:5E:BE:3F:D8:80:A0:92:81 X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:97:3d:e5:7a:d1:25:3d:e1:1a:3d:10:37:d6:94:19:45:dd: 08:48:2a:ef:05:97:ff:44:45:53:fd:b6:75:c5:64:a7:02:5a: 99:72:5e:5b:22:2c:5e:09:8a:f7:d7:ef:32:88:64:8d:c1:d2: 1b:9a:c5:6f:16:66:13:39:7c:13:8f:d2:1c:15:51:bd:7c:b8: 95:24:1e:13:d4:87:a8:e9:75:57:b0:2e:3a:d4:8b:53:a3:d7: 52:e2:98:4b:b0:61:81:3b:ae:31:40:db:df:ac:6d:b2:47:e4: f7:8f:19:7d:c6:cf:21:44:f6:a0:6d:fd:38:98:02:78:af:cd: d9:30:35:20:19:b7:6e:31:b5:ec:db:90:d7:b4:34:39:d2:45: 2a:3a:39:0b:a9:dd:9e:a5:a6:7d:42:32:d3:54:08:18:32:29: 23:6d:2b:ce:e6:e5:14:86:b9:18:6d:e3:6c:d2:cb:60:42:44: 87:36:0c:58:46:a0:d8:66:2b:de:20:f7:55:ea:21:d1:63:e3: fd:9c:20:24:c6:90:5a:d1:23:79:c2:c9:64:9d:e3:69:6f:5c: 73:73:c2:20:9e:b1:74:f6:03:24:96:f6:7e:11:43:c0:21:b4: c5:d5:c7:07:75:0b:57:7c:25:d6:4f:f4:80:0f:5d:3f:6f:18: 25:5b:c1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjUxMTA0MTQxNTU5WhcNMjUxMTExMTQxNTU5WjAYMRYwFAYD VQQDEw02OTBhMGE5Zi1iNTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpjLz5TVIRdBpH8G/P3l4m5MbMzrkl17zmxMBUsa5szUjhhOZaeJXavmPgci u9q4mGoJ+EESpa0kWJ/y04ML9g+FNIkKIGPjdlLB09ccNI4J1YqCj/jyJ7yq3Gz/ zPDopGnX5WS8fn/azP4CqoTcIIOubxVz3WjRrVX3qwpe8jy6SsmVcgvcDKCVgxMX judRvGkdIV5Tq5ywrqxRjwzuKfb0YyKX40JwwxbQEojGJM4nK1SB6g/a2VXFsreT LaiGKmZjFN3AXkzJpCgWG5hpCdfVE69TXdSZ2VozZmywpujEAK/e6q7Dgp/Dp472 rgNFXZqLlW7tvaNg09Sd6IMvyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0vZpZJ r3jdeqjLBV6+P9iAoJKBMB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQ3Ni82Mjg3QTExNDFENjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9J UnZxSnZ4T2J6czI2MDR2amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBolz3letElPeEaPRA31pQZRd0ISCrvBZf/REVT/bZ1xWSnAlqZcl5b IixeCYr31+8yiGSNwdIbmsVvFmYTOXwTj9IcFVG9fLiVJB4T1Ieo6XVXsC461ItT o9dS4phLsGGBO64xQNvfrG2yR+T3jxl9xs8hRPagbf04mAJ4r83ZMDUgGbduMbXs 25DXtDQ50kUqOjkLqd2epaZ9QjLTVAgYMikjbSvO5uUUhrkYbeNs0stgQkSHNgxY RqDYZiveIPdV6iHRY+P9nCAkxpBa0SN5wslkneNpb1xzc8IgnrF09gMklvZ+EUPA IbTF1ccHdQtXfCXWT/SAD10/bxglW8Gp -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:56 2025 by rpki-client