$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft File: HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json) Hash identifier: C4JTjLN/rwDdvDYDPqiTV/9Oo9m+qORgPRQeo6Y4Aro= Subject key identifier: 69:78:12:80:72:19:8C:44:65:77:57:60:46:A0:44:FC:04:8D:E0:F1 Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft Manifest number: 08EA Signing time: Tue 04 Nov 2025 20:27:25 +0000 Manifest this update: Tue 04 Nov 2025 20:27:25 +0000 Manifest next update: Tue 11 Nov 2025 20:27:25 +0000 Files and hashes: 1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: MPp1J7UtM6QlmVJld0cAavJz5EeBnntpiLb6wUAeQ8Y=) 2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: +c2DPE0WaPr48QApZCLfEPaMsExO+TZ/BLuuQJmn+Mg=) 3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: /qSqUUquW8P34EzhMbBxrdao9SE8qOtCjPceo9nPsLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Nov 4 20:27:25 2025 GMT Not After : Nov 11 20:27:25 2025 GMT Subject: CN=690a61ad-167b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0c:85:26:3b:1e:1f:f1:5c:7d:ad:65:02:ad: 59:f4:aa:9b:57:a1:70:b9:4a:90:c4:73:60:61:d1: e9:48:bd:33:0a:de:fe:a8:a5:8b:20:72:98:33:52: 2e:2e:f4:ab:1e:6f:90:06:f4:20:3d:76:d8:8d:00: c3:12:24:00:9f:74:9d:56:2a:5d:25:79:5f:0f:4c: fc:06:f1:47:ae:8c:5e:54:cb:ac:d8:c7:31:04:16: 4d:94:3a:8c:3e:94:b2:64:bc:6f:9d:e5:0e:e4:8c: b1:f4:12:c1:14:15:09:4f:98:fa:05:53:0f:6e:16: f0:b8:85:06:40:a0:0f:53:43:38:63:bb:df:81:6e: a2:64:ca:5d:30:23:f9:47:96:b4:2a:19:f4:8f:e9: b1:ec:e5:3a:3b:72:65:2a:94:84:95:08:24:89:39: 93:c4:53:d6:d3:bd:84:9a:96:ab:e0:86:63:28:20: 06:3c:8f:e1:91:4e:83:5b:49:51:98:5c:12:99:82: 5b:20:56:5d:c6:8a:c3:74:d4:ba:f6:56:38:2d:4e: bf:e1:15:eb:cf:7b:23:03:ff:21:c1:d1:a7:68:7b: 6d:ff:17:6a:83:85:d5:c2:e2:c9:5e:9d:1e:90:af: f6:38:d3:5a:4f:f1:a1:ad:23:0a:b6:8d:bd:db:3a: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:78:12:80:72:19:8C:44:65:77:57:60:46:A0:44:FC:04:8D:E0:F1 X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:72:2f:32:31:dd:c0:98:bf:03:98:5d:86:fc:d8:2f:b7:d0: 44:1c:c0:62:39:74:bb:ca:c2:5f:39:8b:09:8f:73:e0:0e:d6: e3:29:2f:02:d7:fa:44:9b:8e:1e:91:6f:09:f1:6f:46:98:c9: 73:e9:5b:e4:21:fa:a6:e5:cf:31:7d:23:a8:04:3d:97:de:30: d5:81:59:bf:9e:91:a5:6e:93:84:ad:1e:ae:8d:8d:fe:c5:11: 6b:89:74:7b:c0:4d:87:c9:fd:d8:50:c0:d8:a5:2b:38:81:e1: 80:e2:40:40:e6:09:27:c9:5d:ec:3e:db:6d:65:b6:30:75:78: 1a:5e:6d:22:71:d1:fe:fc:1a:d1:20:52:ef:e3:0c:76:7a:79: 2a:5e:05:ec:15:f5:63:96:a8:b6:fc:8f:6c:20:d8:ba:c4:30: 7f:bf:3f:2c:fa:af:97:fa:1c:a8:72:41:05:85:e1:b1:97:b4: 45:e1:ab:38:fd:73:7d:bc:de:b0:d7:c8:cf:08:df:1d:0f:62: b9:7c:76:c2:7d:22:12:3f:09:85:5d:57:36:54:c4:6e:5c:a3: ff:90:e1:3a:0b:49:9a:18:ab:a7:2b:16:d2:cb:51:9e:4c:2e: ba:16:f3:99:93:2e:02:a4:0e:07:eb:a5:05:3d:62:5d:f4:39: 1e:fb:39:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUxMTA0MjAyNzI1WhcNMjUxMTExMjAyNzI1WjAYMRYwFAYD VQQDEw02OTBhNjFhZC0xNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QyFJjseH/Fcfa1lAq1Z9KqbV6FwuUqQxHNgYdHpSL0zCt7+qKWLIHKYM1Iu LvSrHm+QBvQgPXbYjQDDEiQAn3SdVipdJXlfD0z8BvFHroxeVMus2McxBBZNlDqM PpSyZLxvneUO5Iyx9BLBFBUJT5j6BVMPbhbwuIUGQKAPU0M4Y7vfgW6iZMpdMCP5 R5a0Khn0j+mx7OU6O3JlKpSElQgkiTmTxFPW072Empar4IZjKCAGPI/hkU6DW0lR mFwSmYJbIFZdxorDdNS69lY4LU6/4RXrz3sjA/8hwdGnaHtt/xdqg4XVwuLJXp0e kK/2ONNaT/GhrSMKto292zoasQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl4EoBy GYxEZXdXYEagRPwEjeDxMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnci8yMd3AmL8DmF2G/Ngvt9BEHMBiOXS7ysJfOYsJj3PgDtbjKS8C 1/pEm44ekW8J8W9GmMlz6VvkIfqm5c8xfSOoBD2X3jDVgVm/npGlbpOErR6ujY3+ xRFriXR7wE2Hyf3YUMDYpSs4geGA4kBA5gknyV3sPtttZbYwdXgaXm0icdH+/BrR IFLv4wx2enkqXgXsFfVjlqi2/I9sINi6xDB/vz8s+q+X+hyockEFheGxl7RF4as4 /XN9vN6w18jPCN8dD2K5fHbCfSISPwmFXVc2VMRuXKP/kOE6C0maGKunKxbSy1Ge TC66FvOZky4CpA4H66UFPWJd9Dke+znx -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:46 2025 by rpki-client