$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft File: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json) Hash identifier: h4FRgYDAXO0zBTQQnAltPuwlx8Nbw5ktQOyEtyovFmM= Subject key identifier: CA:42:B6:94:49:0E:F6:D6:81:00:8F:D5:36:23:B5:EE:91:CD:05:85 Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 Certificate issuer: /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft Manifest number: E8 Signing time: Wed 05 Nov 2025 05:32:23 +0000 Manifest this update: Wed 05 Nov 2025 05:32:23 +0000 Manifest next update: Wed 12 Nov 2025 05:32:23 +0000 Files and hashes: 1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: jpoUuYMjVI12n2NLtOVnIOcslYCB+VBB/GOYLiHfZXk=) 2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: zU0ivsUwwPcioIh+SJNEn0/D/vk8mXy+zIutWbBZmTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4 Validity Not Before: Nov 5 05:32:23 2025 GMT Not After : Nov 12 05:32:23 2025 GMT Subject: CN=690ae167-ce45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:06:96:61:1f:93:5e:fe:f0:28:87:25:ab: 39:24:3e:7f:7b:78:32:d3:4d:91:9d:2e:8f:ee:2d: ee:b6:e5:0b:5e:b0:bf:aa:d9:38:c8:e2:c5:f2:69: 64:a7:13:53:47:e7:84:d5:51:10:b7:b9:0d:d6:ec: e0:67:2c:92:da:18:63:5f:aa:9f:e8:42:00:a6:0b: 8c:b6:ba:e1:90:0b:43:f5:de:8c:35:11:ed:5b:c7: 16:ee:ed:1a:57:0b:4c:e2:e0:b4:25:48:6b:a7:61: e8:4e:59:69:49:24:28:c6:af:b9:b4:9e:e0:50:6b: b8:05:a4:01:51:53:1b:22:db:df:89:c8:3e:97:2d: e7:1a:8c:ef:af:09:f4:d5:ef:f1:eb:64:b7:20:cd: 69:aa:86:65:10:b4:c9:52:b7:2e:61:5b:81:34:eb: d7:1f:f5:68:51:30:42:44:ca:46:c3:04:f0:42:79: 11:c5:9b:7b:65:78:75:70:64:fa:0c:eb:82:94:9d: 06:63:b5:64:f1:b8:62:dd:80:14:37:06:36:c5:b5: d5:29:8e:1b:0c:98:fa:bd:26:a2:6c:7b:60:17:af: fb:17:19:ba:9d:59:f6:ad:16:2f:be:b9:60:5e:3e: db:b1:b4:aa:3a:f7:26:58:2c:ec:5c:04:c2:2c:ef: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:42:B6:94:49:0E:F6:D6:81:00:8F:D5:36:23:B5:EE:91:CD:05:85 X509v3 Authority Key Identifier: keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bb:f4:b8:d5:14:74:ab:0e:31:53:b0:c0:70:da:77:87:66: a4:23:b3:f0:65:2c:c4:70:e1:e3:cb:a5:b4:4c:00:5b:f6:79: b1:54:cd:c7:88:08:0e:14:29:ad:16:bc:5e:41:c6:92:44:64: a9:0a:bd:0b:19:22:1b:f9:0c:9c:fa:d9:c8:70:05:3a:28:70: c1:84:ec:fd:94:18:53:b2:26:9f:1d:ab:67:ac:ce:f0:23:6b: ec:17:bd:6d:00:bd:95:77:49:76:f2:88:dd:09:e1:2b:5c:65: 48:47:34:07:92:99:f9:9c:a3:17:09:9c:fe:a1:cd:6c:5d:1d: 82:00:0a:95:bd:b6:e0:41:71:ea:a7:f5:92:2d:e3:97:90:a9: 32:7d:14:b2:26:79:55:cc:36:c8:58:ec:50:3d:44:9b:90:b9: bc:2d:31:c2:91:6e:ae:01:99:bf:08:36:2b:f6:5a:58:06:2f: 3d:2c:2b:ed:b4:7b:e2:8f:ba:90:78:f1:68:b4:1b:e0:8c:5a: 2f:5a:96:9a:68:68:02:6c:5c:16:d8:cb:c3:cb:c9:9c:87:8e: 0f:3a:0b:f1:7e:5d:92:e8:c0:ef:64:8f:db:e4:86:9f:37:85: 43:77:cb:17:7a:47:a1:03:8e:e4:0f:85:8d:fe:bd:28:1f:3d: cb:37:fe:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQkExMTAvBgNVBAUTKDg1QUU2MjE5Rjg2MjY5NDE0QkUxNzZCNzgyNUYxNkNE REQ0MjQyRDQwHhcNMjUxMTA1MDUzMjIzWhcNMjUxMTEyMDUzMjIzWjAYMRYwFAYD VQQDEw02OTBhZTE2Ny1jZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKkGlmEfk17+8CiHJas5JD5/e3gy002RnS6P7i3utuULXrC/qtk4yOLF8mlk pxNTR+eE1VEQt7kN1uzgZyyS2hhjX6qf6EIApguMtrrhkAtD9d6MNRHtW8cW7u0a VwtM4uC0JUhrp2HoTllpSSQoxq+5tJ7gUGu4BaQBUVMbItvficg+ly3nGozvrwn0 1e/x62S3IM1pqoZlELTJUrcuYVuBNOvXH/VoUTBCRMpGwwTwQnkRxZt7ZXh1cGT6 DOuClJ0GY7Vk8bhi3YAUNwY2xbXVKY4bDJj6vSaibHtgF6/7Fxm6nVn2rRYvvrlg Xj7bsbSqOvcmWCzsXATCLO/dvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpCtpRJ DvbWgQCP1TYjte6RzQWFMB8GA1UdIwQYMBaAFIWuYhn4YmlBS+F2t4JfFs3dQkLU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVCQS9GQTMyMENEQTVB REMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFVRkw0WGEzZ2w4V3pkMUNR dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hhNWlHZmhpYVVGTDRYYTNnbDhXemQxQ1F0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUVCQS9GQTMyMENEQTVBREMxMUVGQjU2MDY2MzdDNEY5QUUwMi9oYTVpR2ZoaWFV Rkw0WGEzZ2w4V3pkMUNRdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJu/S41RR0qw4xU7DAcNp3h2akI7PwZSzEcOHjy6W0TABb9nmxVM3H iAgOFCmtFrxeQcaSRGSpCr0LGSIb+Qyc+tnIcAU6KHDBhOz9lBhTsiafHatnrM7w I2vsF71tAL2Vd0l28ojdCeErXGVIRzQHkpn5nKMXCZz+oc1sXR2CAAqVvbbgQXHq p/WSLeOXkKkyfRSyJnlVzDbIWOxQPUSbkLm8LTHCkW6uAZm/CDYr9lpYBi89LCvt tHvij7qQePFotBvgjFovWpaaaGgCbFwW2MvDy8mch44POgvxfl2S6MDvZI/b5Iaf N4VDd8sXekehA47kD4WN/r0oHz3LN/54 -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:22 2025 by rpki-client