$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft File: HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json) Hash identifier: Qya/+fH1mrNJv07df5/IMSEbyWkBMCXGskeEHrYlp8M= Subject key identifier: 1E:A2:FF:E1:85:B2:EB:3C:F7:D7:80:D2:86:3C:3F:AF:F5:A5:F1:29 Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF Certificate issuer: /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 06:24:11 +0000 Manifest this update: Mon 03 Nov 2025 06:24:10 +0000 Manifest next update: Mon 10 Nov 2025 06:24:10 +0000 Files and hashes: 1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: ZYilTg8xLuLT66nL2ScO5D2E7tol6Y3VlXi/gFY8vwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF Validity Not Before: Nov 3 06:24:10 2025 GMT Not After : Nov 10 06:24:10 2025 GMT Subject: CN=69084a8b-68a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:83:fa:a2:dd:16:16:9b:b7:0b:4a:91:27: ca:9e:e0:51:f4:6f:a7:2b:d0:6f:6e:bd:34:06:1f: 0a:38:8d:b8:48:0f:28:9c:7d:1a:e1:0a:f7:29:d5: 93:2b:f5:c3:97:8d:1a:98:9b:5c:c3:a1:f0:56:4b: 9b:42:c8:90:d8:bd:9f:64:2d:ba:2a:41:fe:0e:4b: 13:1b:65:0e:5f:e4:cd:12:e8:fb:fd:02:04:00:bf: 9e:07:80:da:fb:f0:2d:36:8b:09:2d:8e:e2:d7:e6: d3:a5:ef:8b:15:45:25:71:bf:34:cb:e9:06:59:12: de:c0:9c:49:d7:23:e2:66:8f:84:31:a7:c5:57:cf: cc:af:2b:82:82:c4:ae:98:78:83:d3:16:a7:93:98: 44:5c:73:60:83:3b:ee:59:4b:e7:07:18:2f:bf:3c: 12:1b:62:b2:d4:43:e7:52:f6:a5:1e:5a:af:38:ab: 15:3c:92:70:57:dd:7e:0a:8d:e1:05:84:a8:07:c8: 90:d1:5a:1f:51:c6:ca:3f:6e:6c:4f:0e:e5:81:35: 87:89:e3:83:62:61:86:2e:c4:36:cd:d7:e9:2a:bb: b0:9b:b1:25:97:51:7c:95:73:ff:69:bb:c3:cb:cf: 08:1d:d0:7f:98:e6:b6:5a:b3:3d:88:db:b8:56:b0: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A2:FF:E1:85:B2:EB:3C:F7:D7:80:D2:86:3C:3F:AF:F5:A5:F1:29 X509v3 Authority Key Identifier: keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4e:a4:ca:2e:22:09:ec:28:0e:30:29:fb:6e:e8:0e:5f:08: 44:57:43:5f:5d:41:04:9a:9d:9a:6e:48:58:98:54:b1:82:ad: 1b:0d:6f:cb:fd:2d:c0:ea:d0:1c:9c:61:8d:2e:09:3d:f2:16: 06:48:0b:80:7f:2f:03:d7:9f:6f:5c:ef:f8:8c:36:82:88:43: b2:3f:8a:be:66:a9:8d:66:52:cb:ae:7a:08:1e:02:03:4f:bd: 9c:e8:ba:f7:9f:1c:15:dd:c4:a5:bc:61:5b:b3:0c:38:66:a4: f1:50:f2:ab:5d:bc:fc:a1:51:5a:9e:5a:07:6f:b4:46:6f:a1: c6:a0:ae:9b:c7:c7:06:0a:ba:57:5d:3f:e5:2f:75:71:b4:03: 30:2e:b7:ec:69:3d:8a:23:b3:40:1b:7c:fd:ad:60:ee:f5:84: 5e:19:b6:4f:fd:c7:f5:28:f6:15:56:dc:9a:9d:63:15:2a:c1: aa:b5:6b:85:e5:a6:cf:06:47:a0:5c:e4:d8:6f:44:6c:29:16: c2:8f:9a:72:62:23:91:c7:82:14:08:5a:68:94:cb:2d:f4:28: 49:63:73:29:d9:f2:5c:cc:09:94:2a:f4:81:88:c6:5f:ee:99: 4e:68:58:a1:42:26:1a:0a:f9:e0:03:7b:d7:d0:09:fb:f3:e1: e5:b9:a6:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1NzgxMTAvBgNVBAUTKDFFOUIwRDE2M0NFMEFBMTFFOTFENTU2MEY1QTNDQzY2 OUUzMjkxRUYwHhcNMjUxMTAzMDYyNDEwWhcNMjUxMTEwMDYyNDEwWjAYMRYwFAYD VQQDEw02OTA4NGE4Yi02OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu56D+qLdFhabtwtKkSfKnuBR9G+nK9Bvbr00Bh8KOI24SA8onH0a4Qr3KdWT K/XDl40amJtcw6HwVkubQsiQ2L2fZC26KkH+DksTG2UOX+TNEuj7/QIEAL+eB4Da +/AtNosJLY7i1+bTpe+LFUUlcb80y+kGWRLewJxJ1yPiZo+EMafFV8/MryuCgsSu mHiD0xank5hEXHNggzvuWUvnBxgvvzwSG2Ky1EPnUvalHlqvOKsVPJJwV91+Co3h BYSoB8iQ0VofUcbKP25sTw7lgTWHieODYmGGLsQ2zdfpKruwm7Ell1F8lXP/abvD y88IHdB/mOa2WrM9iNu4VrAa1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6i/+GF sus899eA0oY8P6/1pfEpMB8GA1UdIwQYMBaAFB6bDRY84KoR6R1VYPWjzGaeMpHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wOTUzMEE4Q0NG M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3FoSHBIVlZnOWFQTVpwNHlr ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hwc05GanpncWhIcEhWVmc5YVBNWnA0eWtlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDU3OC8wOTUzMEE4Q0NGM0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IcHNORmp6Z3Fo SHBIVlZnOWFQTVpwNHlrZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2TqTKLiIJ7CgOMCn7bugOXwhEV0NfXUEEmp2abkhYmFSxgq0bDW/L /S3A6tAcnGGNLgk98hYGSAuAfy8D159vXO/4jDaCiEOyP4q+ZqmNZlLLrnoIHgID T72c6Lr3nxwV3cSlvGFbsww4ZqTxUPKrXbz8oVFanloHb7RGb6HGoK6bx8cGCrpX XT/lL3VxtAMwLrfsaT2KI7NAG3z9rWDu9YReGbZP/cf1KPYVVtyanWMVKsGqtWuF 5abPBkegXOTYb0RsKRbCj5pyYiORx4IUCFpolMst9ChJY3Mp2fJczAmUKvSBiMZf 7plOaFihQiYaCvngA3vX0An78+Hluaay -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:05 2025 by rpki-client