$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft File: _hniRte_DjbyHipWt8mvtJ1Z1tQ.mft (raw, json) Hash identifier: l4nWpcXgehxFVQkUJyoOYIWCASlkWj7OWMJ7de8bq20= Subject key identifier: CE:10:C1:4E:AA:C9:36:D7:AA:F0:34:AB:FB:1B:DF:84:82:A7:91:04 Authority key identifier: FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 Certificate issuer: /CN=A91F30C0/serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft Manifest number: 047A Signing time: Wed 05 Nov 2025 00:13:03 +0000 Manifest this update: Wed 05 Nov 2025 00:13:02 +0000 Manifest next update: Wed 12 Nov 2025 00:13:02 +0000 Files and hashes: 1: _hniRte_DjbyHipWt8mvtJ1Z1tQ.crl (hash: dPCgRyunXUSDCiYt+KiGBGGJbRxtScvGf34rILzM+cE=) 2: 5DB5AFEE635C11ECB7C65C23C4F9AE02.roa (hash: ZASmtlmvUHGE1HGhcQSQsz+Y4m88fTiUKIlWzdcPUk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30C0, serialNumber=FE19E246D7BF0E36F21E2A56B7C9AFB49D59D6D4 Validity Not Before: Nov 5 00:13:02 2025 GMT Not After : Nov 12 00:13:02 2025 GMT Subject: CN=690a968e-ac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:3d:85:6a:20:31:05:ff:b2:e1:33:c1:00: 1b:b6:f9:c4:e1:01:fe:f9:7d:04:2a:f1:83:39:f1: b4:68:db:bb:f1:de:17:47:db:91:03:70:d8:9e:e8: 21:46:9c:49:48:fa:81:34:18:ee:4a:ae:4a:34:62: 6b:36:db:b5:c0:53:dc:87:fc:9f:4d:3e:aa:f8:c4: 67:06:e6:c5:45:01:13:7c:a2:1c:ee:71:9c:10:9a: 31:0e:f9:2a:75:28:bc:a8:a7:0c:7c:2f:7f:7e:ee: 1f:cd:07:d3:4b:99:88:ac:4b:be:73:0a:76:a6:b9: 6f:95:24:ed:50:63:81:fd:7c:5f:8d:fa:73:dc:f6: 99:41:34:6e:a8:1b:c2:4a:c2:49:5d:89:19:8d:cc: 99:e7:a7:e9:33:35:a1:b2:38:c7:c3:b2:3d:93:b8: a1:71:8f:0a:bb:2d:cf:fc:47:b2:84:99:0a:cf:ed: 35:ee:7b:39:5a:79:40:16:60:f1:67:93:99:71:64: 6f:1b:8b:48:81:06:1b:46:eb:2e:52:5c:a2:9a:c2: d5:7e:ce:65:98:a8:0e:22:d4:74:c8:8a:96:88:27: fe:70:c1:db:81:ee:1b:13:43:7e:9c:c9:79:ba:f5: 9d:22:26:32:6c:e0:f8:56:1e:17:73:71:7b:a7:c6: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:C1:4E:AA:C9:36:D7:AA:F0:34:AB:FB:1B:DF:84:82:A7:91:04 X509v3 Authority Key Identifier: keyid:FE:19:E2:46:D7:BF:0E:36:F2:1E:2A:56:B7:C9:AF:B4:9D:59:D6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hniRte_DjbyHipWt8mvtJ1Z1tQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30C0/387E863C635811ECB82E3B4CC4F9AE02/_hniRte_DjbyHipWt8mvtJ1Z1tQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:fe:02:67:10:45:54:78:8b:67:d6:57:a6:37:09:4f:0b: 54:98:7b:2e:25:08:42:2d:cc:8b:56:8a:c5:c1:a5:86:e7:65: 94:75:a4:8f:44:f1:0d:e5:cc:c0:b4:75:b1:97:1e:5a:5d:d2: 21:c7:70:65:25:c8:f6:a7:f3:a5:ab:7e:71:d8:24:ac:59:b5: bd:e7:77:ff:cb:59:13:39:c8:49:ea:12:5d:81:d3:d5:ef:aa: 81:d1:40:01:d1:18:9e:26:b6:57:53:b5:8a:0a:7e:ca:f4:3d: 4f:8f:ee:37:fb:41:53:a9:02:b3:a2:3b:4b:c8:57:54:2d:05: 16:4b:b3:28:b6:aa:0c:84:47:81:7c:8f:66:7d:de:8c:f3:c6: 11:78:19:67:64:10:6d:52:08:e0:79:8a:99:54:2d:a5:06:b9: e5:07:2c:ae:05:21:1b:dd:f2:3a:77:e2:f5:88:10:d5:73:46: fb:66:1e:1e:3e:bb:d5:e3:7c:ac:47:e9:9b:b0:9b:a9:9f:86: 2f:b8:ce:98:2e:ab:8a:cf:4d:17:10:bf:16:08:f9:00:14:7b: c7:73:c5:ae:9a:ab:9c:97:9e:0d:54:8d:72:44:8b:ee:97:52: 6a:34:bf:a3:88:d0:9b:b5:4a:43:0d:87:e3:60:91:30:34:5f: 15:83:af:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQzAxMTAvBgNVBAUTKEZFMTlFMjQ2RDdCRjBFMzZGMjFFMkE1NkI3QzlBRkI0 OUQ1OUQ2RDQwHhcNMjUxMTA1MDAxMzAyWhcNMjUxMTEyMDAxMzAyWjAYMRYwFAYD VQQDEw02OTBhOTY4ZS1hYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cQ9hWogMQX/suEzwQAbtvnE4QH++X0EKvGDOfG0aNu78d4XR9uRA3DYnugh RpxJSPqBNBjuSq5KNGJrNtu1wFPch/yfTT6q+MRnBubFRQETfKIc7nGcEJoxDvkq dSi8qKcMfC9/fu4fzQfTS5mIrEu+cwp2prlvlSTtUGOB/Xxfjfpz3PaZQTRuqBvC SsJJXYkZjcyZ56fpMzWhsjjHw7I9k7ihcY8Kuy3P/EeyhJkKz+017ns5WnlAFmDx Z5OZcWRvG4tIgQYbRusuUlyimsLVfs5lmKgOItR0yIqWiCf+cMHbge4bE0N+nMl5 uvWdIiYybOD4Vh4Xc3F7p8ambwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4QwU6q yTbXqvA0q/sb34SCp5EEMB8GA1UdIwQYMBaAFP4Z4kbXvw428h4qVrfJr7SdWdbU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBDMC8zODdFODYzQzYz NTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0RqYnlIaXBXdDhtdnRKMVox dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19obmlSdGVfRGpieUhpcFd0OG12dEoxWjF0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBDMC8zODdFODYzQzYzNTgxMUVDQjgyRTNCNENDNEY5QUUwMi9faG5pUnRlX0Rq YnlIaXBXdDhtdnRKMVoxdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEwv4CZxBFVHiLZ9ZXpjcJTwtUmHsuJQhCLcyLVorFwaWG52WUdaSP RPEN5czAtHWxlx5aXdIhx3BlJcj2p/Olq35x2CSsWbW953f/y1kTOchJ6hJdgdPV 76qB0UAB0RieJrZXU7WKCn7K9D1Pj+43+0FTqQKzojtLyFdULQUWS7MotqoMhEeB fI9mfd6M88YReBlnZBBtUgjgeYqZVC2lBrnlByyuBSEb3fI6d+L1iBDVc0b7Zh4e PrvV43ysR+mbsJupn4YvuM6YLquKz00XEL8WCPkAFHvHc8Wumqucl54NVI1yRIvu l1JqNL+jiNCbtUpDDYfjYJEwNF8Vg68d -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:32 2025 by rpki-client