$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft File: hpk8iGXMBr2Yu5T0pukGEieCgAA.mft (raw, json) Hash identifier: 13m0rZODQQd6PzH2NnjKi18UFqe2Oj0l6LMILCgR5nk= Subject key identifier: 13:E4:B2:DF:5D:C0:37:97:F2:19:2E:C9:F0:57:D3:51:59:A2:DE:51 Authority key identifier: 86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 Certificate issuer: /CN=A91DC6AD/serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft Manifest number: 0189 Signing time: Mon 03 Nov 2025 03:33:41 +0000 Manifest this update: Mon 03 Nov 2025 03:33:41 +0000 Manifest next update: Mon 10 Nov 2025 03:33:41 +0000 Files and hashes: 1: hpk8iGXMBr2Yu5T0pukGEieCgAA.crl (hash: pwusbcXBpolFDdvBlezp3hDG0n4K0kMp+GiyvI3+w8c=) 2: E2ECBFC65DF211EEB46BCB27C4F9AE02.roa (hash: VLTTYVtZCZ689N9IR847Wk29ehkfdaAv1fIzpOf8NmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC6AD, serialNumber=86993C8865CC06BD98BB94F4A6E9061227828000 Validity Not Before: Nov 3 03:33:41 2025 GMT Not After : Nov 10 03:33:41 2025 GMT Subject: CN=69082295-bcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:be:4c:92:91:32:f6:15:41:a3:b1:c1:ff: c2:70:55:d0:6c:a0:a2:14:5b:60:fc:60:a9:0a:77: 35:76:e9:d2:da:9c:93:9b:c1:ff:35:c0:15:41:b6: 2b:f8:ec:e2:f9:1b:ec:e8:00:27:7e:9d:41:b7:92: a3:8b:bd:42:ff:70:89:ed:7c:40:e1:b8:a0:fe:4c: 36:6a:63:31:ab:4b:63:bb:0c:4f:c8:ef:29:d1:52: d7:c3:54:8b:e3:a7:0a:20:f7:a8:67:c8:df:dd:cb: f8:ac:07:e8:fd:03:40:85:aa:5e:62:e1:ea:9a:da: 7c:47:0a:6e:8e:10:c5:59:35:23:d7:65:6a:09:68: d5:54:5e:7a:17:22:7e:a0:21:5d:0a:01:ac:7d:1f: 56:1d:5f:4e:91:43:97:da:61:f6:28:a6:7c:ed:dc: 75:04:77:3c:3e:83:e6:ef:db:04:f6:4a:83:d0:2d: 26:c4:51:59:b4:e9:29:c9:21:ba:15:12:e6:fe:b3: 40:65:b9:f0:55:c4:65:3c:54:68:ae:2b:c9:22:2b: 32:de:d3:e9:da:df:c6:07:90:f9:cc:41:c4:a6:38: 90:9c:d8:b9:30:17:d6:91:f6:59:c7:46:ac:7e:64: 3e:e7:c7:5e:fd:a3:4f:eb:af:9d:72:25:30:c3:3d: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E4:B2:DF:5D:C0:37:97:F2:19:2E:C9:F0:57:D3:51:59:A2:DE:51 X509v3 Authority Key Identifier: keyid:86:99:3C:88:65:CC:06:BD:98:BB:94:F4:A6:E9:06:12:27:82:80:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpk8iGXMBr2Yu5T0pukGEieCgAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC6AD/539F23CC5DF211EE9B04430EC4F9AE02/hpk8iGXMBr2Yu5T0pukGEieCgAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d7:e6:1a:9b:d4:6f:29:59:b1:f1:2a:38:a3:f4:52:ab:99: 6e:72:b2:2b:96:28:3d:06:0a:c5:a3:e4:82:1f:a3:e3:5a:a4: 0a:af:6d:dc:4a:46:db:01:91:95:ba:fd:ea:24:ac:44:f9:74: 59:49:3d:b1:59:09:8d:dd:7a:60:4a:5d:68:b7:f2:3a:04:fa: a7:d0:8e:e6:27:f5:42:1a:89:80:d9:ad:e0:85:1d:78:c7:0e: 1a:2d:1c:9a:af:3b:fc:20:e6:0e:16:74:65:e2:88:3a:2b:a1: c5:98:99:25:0e:ec:7e:bf:59:fd:3a:31:ba:6a:60:e6:86:0a: a6:a5:c9:69:81:44:a9:b8:9e:ba:d2:a8:c1:12:46:bb:92:05: bc:64:6a:8d:a9:24:62:b8:fe:72:d8:8e:70:ce:55:45:e9:80: 1f:2d:58:0b:a5:4f:1f:29:6a:0f:4c:f4:29:b5:a1:54:bc:0d: 98:56:bb:8d:23:ae:96:43:88:e2:f5:3b:fb:04:31:9d:fd:89: 84:1f:fa:ce:40:42:30:86:1f:c0:47:72:64:70:bf:a3:56:e7: 21:64:c1:ac:4a:26:46:51:2a:4d:1a:6f:c7:da:fe:b6:01:88: f6:fe:48:fb:8f:61:c3:94:20:80:a6:71:88:16:26:c6:68:ff: 12:fb:8b:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM2QUQxMTAvBgNVBAUTKDg2OTkzQzg4NjVDQzA2QkQ5OEJCOTRGNEE2RTkwNjEy Mjc4MjgwMDAwHhcNMjUxMTAzMDMzMzQxWhcNMjUxMTEwMDMzMzQxWjAYMRYwFAYD VQQDEw02OTA4MjI5NS1iY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7O+TJKRMvYVQaOxwf/CcFXQbKCiFFtg/GCpCnc1dunS2pyTm8H/NcAVQbYr +Ozi+Rvs6AAnfp1Bt5Kji71C/3CJ7XxA4big/kw2amMxq0tjuwxPyO8p0VLXw1SL 46cKIPeoZ8jf3cv4rAfo/QNAhapeYuHqmtp8RwpujhDFWTUj12VqCWjVVF56FyJ+ oCFdCgGsfR9WHV9OkUOX2mH2KKZ87dx1BHc8PoPm79sE9kqD0C0mxFFZtOkpySG6 FRLm/rNAZbnwVcRlPFRorivJIisy3tPp2t/GB5D5zEHEpjiQnNi5MBfWkfZZx0as fmQ+58de/aNP66+dciUwwz00dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPkst9d wDeX8hkuyfBX01FZot5RMB8GA1UdIwQYMBaAFIaZPIhlzAa9mLuU9KbpBhIngoAA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzZBRC81MzlGMjNDQzVE RjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJyMll1NVQwcHVrR0VpZUNn QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hwazhpR1hNQnIyWXU1VDBwdWtHRWllQ2dBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzZBRC81MzlGMjNDQzVERjIxMUVFOUIwNDQzMEVDNEY5QUUwMi9ocGs4aUdYTUJy Mll1NVQwcHVrR0VpZUNnQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu1+Yam9RvKVmx8So4o/RSq5lucrIrlig9BgrFo+SCH6PjWqQKr23c SkbbAZGVuv3qJKxE+XRZST2xWQmN3XpgSl1ot/I6BPqn0I7mJ/VCGomA2a3ghR14 xw4aLRyarzv8IOYOFnRl4og6K6HFmJklDux+v1n9OjG6amDmhgqmpclpgUSpuJ66 0qjBEka7kgW8ZGqNqSRiuP5y2I5wzlVF6YAfLVgLpU8fKWoPTPQptaFUvA2YVruN I66WQ4ji9Tv7BDGd/YmEH/rOQEIwhh/AR3JkcL+jVuchZMGsSiZGUSpNGm/H2v62 AYj2/kj7j2HDlCCApnGIFibGaP8S+4uT -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:47 2025 by rpki-client