$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft File: HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json) Hash identifier: Sv5NxaaBKN3dUe4MQDDlk9kuv6CAnw5DHdYS4tcoGU8= Subject key identifier: 11:52:20:4A:8A:77:AD:D1:C0:6F:F6:62:61:A6:CF:9B:78:09:65:0B Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft Manifest number: 06B4 Signing time: Tue 04 Nov 2025 22:24:26 +0000 Manifest this update: Tue 04 Nov 2025 22:24:25 +0000 Manifest next update: Tue 11 Nov 2025 22:24:25 +0000 Files and hashes: 1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: 86ORahoOYn7MFaXZ4pIWQt3mEA/WHFxH7V+TSyhKFlQ=) 2: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (hash: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU=) 3: 996F44A8AED211F0B837C970C4F9AE02.roa (hash: tCXZU+KGwsujyN/RYr6hZD1s2TH5XkVS8kG4GiK7hzU=) 4: 7CDC37C03AE611F089DABB7EC4F9AE02.roa (hash: XCoMjj/a7K84fKvxm+f/Sa+whPmY6o7sv3EG/EHcW4Q=) 5: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: xP9Z5oul8hfvI4Bg3vDxNFPmRZDWzmgh7aXnheGSSko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Nov 4 22:24:25 2025 GMT Not After : Nov 11 22:24:25 2025 GMT Subject: CN=690a7d19-7483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:35:d8:fb:f0:aa:49:8b:d0:70:f5:8c:4b: 83:18:40:6d:dd:60:b6:28:52:5d:d6:5d:89:04:85: a1:d9:ce:08:48:6a:3d:a2:5a:47:be:04:14:3d:31: 25:5a:c4:3b:bc:90:d5:94:7a:d8:06:3e:50:e1:fb: 67:2d:11:eb:e3:37:a6:e6:ff:a0:fa:39:5b:a3:bc: b2:14:87:4f:dd:d2:b8:c2:d2:40:e2:c6:04:54:da: d9:b0:1c:fc:98:3a:67:be:e2:aa:e2:73:1f:82:49: 88:f3:63:9f:f4:5b:69:8a:85:28:e7:5a:7d:f5:9c: 55:42:89:c4:f5:3c:69:bf:90:95:e4:14:47:90:3e: 63:7f:2a:ee:40:20:3d:34:92:9f:54:cd:57:07:9e: 41:89:90:30:94:d7:2b:18:33:a9:9b:ad:22:96:60: 9b:cd:49:5d:a5:6e:f7:17:77:ec:6a:a8:46:9d:f1: ce:c4:9b:f4:82:9d:85:6d:b9:d9:25:e4:c4:8e:ec: c3:2a:71:cd:cd:46:b5:c0:b0:8e:28:00:28:4e:88: 2f:d0:80:09:26:79:ae:25:27:35:9c:91:20:0a:63: f2:a1:58:46:2b:e0:f3:da:c2:ec:e6:8f:18:80:23: e2:5d:ac:5c:38:7f:ba:0e:f3:5c:96:a7:a6:90:f1: 5e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:20:4A:8A:77:AD:D1:C0:6F:F6:62:61:A6:CF:9B:78:09:65:0B X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0d:3d:37:e8:a9:9c:df:cf:d0:30:7c:3c:56:dc:51:f3:80: bb:95:06:bf:1f:b4:b7:f3:a1:26:95:e2:11:b0:18:d0:3f:f7: 8a:73:b4:f2:10:55:ac:d9:10:91:f9:58:59:b9:bd:67:2e:fa: c3:f9:87:61:97:a0:6f:61:49:14:a2:cd:82:73:51:31:ec:48: a5:b9:73:f1:56:1e:ec:83:1e:68:01:d3:74:86:e7:70:1d:66: 85:40:cd:8b:f7:d2:ce:8d:1c:55:8a:4f:82:77:e1:9c:6b:a5: 4e:b2:11:ee:e2:89:df:56:1d:ae:a1:88:e1:ad:4b:f6:36:0a: 74:38:93:f7:5c:94:13:44:54:f7:a4:2a:80:8f:e5:4c:45:38: 04:c1:34:16:c8:12:72:42:fd:a1:5c:4e:27:37:3d:15:a1:a5: e8:a0:67:81:bb:df:d5:95:c7:c6:a0:64:cb:b4:ba:50:e9:a0: 66:26:78:e5:fd:dd:72:3c:7e:30:c3:c2:80:cb:e7:0e:2f:15: ce:0d:fd:d4:72:54:5f:de:e4:ac:f4:49:ec:4b:f5:89:25:e6: 1c:06:0d:0d:3d:65:f9:04:30:11:b2:4c:5f:d6:da:c2:7c:82: 6c:bd:11:1f:90:8f:40:87:16:ac:d8:78:33:e8:bc:2c:d8:a6: c7:1e:a2:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUxMTA0MjIyNDI1WhcNMjUxMTExMjIyNDI1WjAYMRYwFAYD VQQDEw02OTBhN2QxOS03NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ812PvwqkmL0HD1jEuDGEBt3WC2KFJd1l2JBIWh2c4ISGo9olpHvgQUPTEl WsQ7vJDVlHrYBj5Q4ftnLRHr4zem5v+g+jlbo7yyFIdP3dK4wtJA4sYEVNrZsBz8 mDpnvuKq4nMfgkmI82Of9FtpioUo51p99ZxVQonE9Txpv5CV5BRHkD5jfyruQCA9 NJKfVM1XB55BiZAwlNcrGDOpm60ilmCbzUldpW73F3fsaqhGnfHOxJv0gp2FbbnZ JeTEjuzDKnHNzUa1wLCOKAAoTogv0IAJJnmuJSc1nJEgCmPyoVhGK+Dz2sLs5o8Y gCPiXaxcOH+6DvNclqemkPFe2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFSIEqK d63RwG/2YmGmz5t4CWULMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTlFRC81NEI5N0EyNjhBQjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFln Q2d3bWFBYWFLREpQbjJxVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApDT036Kmc38/QMHw8VtxR84C7lQa/H7S386EmleIRsBjQP/eKc7Ty EFWs2RCR+VhZub1nLvrD+Ydhl6BvYUkUos2Cc1Ex7EiluXPxVh7sgx5oAdN0hudw HWaFQM2L99LOjRxVik+Cd+Gca6VOshHu4onfVh2uoYjhrUv2Ngp0OJP3XJQTRFT3 pCqAj+VMRTgEwTQWyBJyQv2hXE4nNz0VoaXooGeBu9/VlcfGoGTLtLpQ6aBmJnjl /d1yPH4ww8KAy+cOLxXODf3UclRf3uSs9EnsS/WJJeYcBg0NPWX5BDARskxf1trC fIJsvREfkI9Ahxas2Hgz6Lws2KbHHqLA -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:52 2025 by rpki-client