$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft File: HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json) Hash identifier: MwFa+eZ12Q75f0W2HAEF1qsF++aB5MhG7NbdJR2vzLc= Subject key identifier: 89:B4:B0:EA:AB:7B:DA:F7:A2:0C:89:5D:65:64:61:19:11:22:C3:1C Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 Certificate issuer: /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft Manifest number: 01D9 Signing time: Wed 05 Nov 2025 03:47:56 +0000 Manifest this update: Wed 05 Nov 2025 03:47:56 +0000 Manifest next update: Wed 12 Nov 2025 03:47:56 +0000 Files and hashes: 1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: 1/j993lHF7jmsLoVHJ2ygcljYYMwP4ACLLbAo8GfQGo=) 2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: FTTjUL10ToIc4MEgN67GxhQU6klz+xrvQNr4Q+Gwl4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6 Validity Not Before: Nov 5 03:47:56 2025 GMT Not After : Nov 12 03:47:56 2025 GMT Subject: CN=690ac8ec-8768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:a8:48:53:d2:88:09:1e:58:5f:50:c5:c8: 93:8f:21:82:d3:bb:9a:f8:87:2d:38:c3:5f:02:78: 36:30:47:44:a7:3d:a1:b6:cd:9b:03:f2:b7:53:b0: 83:7f:64:af:c3:2a:78:2c:08:46:93:f0:ce:3a:f9: 80:f1:36:87:c7:d5:42:db:1d:e7:db:6e:9d:a2:ab: 4e:b5:bc:24:2f:76:61:f7:79:98:84:d9:15:c3:05: 44:78:ef:1f:69:7c:8c:ef:50:96:cb:dd:75:09:26: a3:f3:f0:9d:16:8c:0f:ce:aa:11:1a:c7:2f:c1:1c: 34:f4:26:67:21:e0:11:e5:98:0d:ad:27:87:1a:f7: be:1b:61:a9:46:c6:77:88:ab:ee:67:0d:67:0d:6b: 32:a5:e4:dd:c0:da:78:59:f3:0a:c2:5a:cd:c7:62: b3:54:e5:6f:a5:a6:cb:a9:87:83:0a:de:62:d8:47: 8f:3e:35:03:04:1e:1b:ea:b4:11:d4:60:b3:6e:82: d8:6d:36:48:3a:d7:e8:bb:e7:e6:d9:22:20:bf:32: 5a:6e:c9:7a:d0:dd:84:44:62:91:d4:c8:54:05:ab: 21:1a:94:d7:2e:b8:f7:39:f3:8e:c8:d3:d3:d7:ab: 39:8e:9b:fc:22:1d:11:be:fe:1a:f0:1b:10:35:43: 3d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B4:B0:EA:AB:7B:DA:F7:A2:0C:89:5D:65:64:61:19:11:22:C3:1C X509v3 Authority Key Identifier: keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:28:72:7c:73:4e:04:31:30:71:55:df:75:f0:59:09:79:0c: 24:51:e2:c3:a2:f1:b7:96:16:a9:46:ec:47:65:23:85:b9:7f: 78:4a:b0:14:97:bb:15:d4:74:8b:f0:79:58:1b:7e:31:3e:da: c1:9f:66:ce:bc:3f:f6:b3:4e:8c:3f:c6:52:cc:c6:3d:78:fe: ab:71:13:65:8a:65:db:87:24:f1:a1:2d:92:18:94:a5:d8:7e: 43:44:1f:33:c1:5a:80:06:69:72:60:c0:de:9b:dd:66:28:f8: e3:26:75:05:9f:02:6f:5c:ba:f0:0a:c9:74:6d:62:39:c3:51: 8a:06:8c:43:a9:14:ea:7b:22:41:0c:9c:03:c4:34:f0:ba:bd: 3b:d2:02:88:fa:f3:1a:9b:f2:b2:fa:1e:63:7e:15:c9:84:2c: 1c:76:50:a0:0d:eb:ec:ee:a3:65:be:82:3d:e4:70:b3:1e:08: 58:95:10:42:ae:a2:84:41:92:29:e1:52:c7:8f:f6:fb:02:3b: 52:5f:51:1d:f7:97:0a:f0:64:66:43:ac:5e:7f:4f:76:93:9e: f6:17:da:d1:ff:48:65:92:9f:6c:a3:75:13:7d:3f:e9:3b:21: fc:b7:b8:3e:c7:26:8d:28:c3:2c:47:74:a4:17:a3:34:c1:30: 34:fe:2c:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGQUYxMTAvBgNVBAUTKDFFODVBODYwRDYyRTI2MDc5MjMzQ0I3QTAxREIwQkFD QkIwMzY5QTYwHhcNMjUxMTA1MDM0NzU2WhcNMjUxMTEyMDM0NzU2WjAYMRYwFAYD VQQDEw02OTBhYzhlYy04NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7eoSFPSiAkeWF9QxciTjyGC07ua+IctOMNfAng2MEdEpz2hts2bA/K3U7CD f2Svwyp4LAhGk/DOOvmA8TaHx9VC2x3n226doqtOtbwkL3Zh93mYhNkVwwVEeO8f aXyM71CWy911CSaj8/CdFowPzqoRGscvwRw09CZnIeAR5ZgNrSeHGve+G2GpRsZ3 iKvuZw1nDWsypeTdwNp4WfMKwlrNx2KzVOVvpabLqYeDCt5i2EePPjUDBB4b6rQR 1GCzboLYbTZIOtfou+fm2SIgvzJabsl60N2ERGKR1MhUBashGpTXLrj3OfOOyNPT 16s5jpv8Ih0Rvv4a8BsQNUM9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm0sOqr e9r3ogyJXWVkYRkRIsMcMB8GA1UdIwQYMBaAFB6FqGDWLiYHkjPLegHbC6y7A2mm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0ZBRi9BOTBEMUI5NjQx NUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpnZVNNOHQ2QWRzTHJMc0Rh YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hvV29ZTll1SmdlU004dDZBZHNMckxzRGFhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0ZBRi9BOTBEMUI5NjQxNUMxMUVFOUQzNTVEMkNDNEY5QUUwMi9Ib1dvWU5ZdUpn ZVNNOHQ2QWRzTHJMc0RhYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJKHJ8c04EMTBxVd918FkJeQwkUeLDovG3lhapRuxHZSOFuX94SrAU l7sV1HSL8HlYG34xPtrBn2bOvD/2s06MP8ZSzMY9eP6rcRNlimXbhyTxoS2SGJSl 2H5DRB8zwVqABmlyYMDem91mKPjjJnUFnwJvXLrwCsl0bWI5w1GKBoxDqRTqeyJB DJwDxDTwur070gKI+vMam/Ky+h5jfhXJhCwcdlCgDevs7qNlvoI95HCzHghYlRBC rqKEQZIp4VLHj/b7AjtSX1Ed95cK8GRmQ6xef092k572F9rR/0hlkp9so3UTfT/p OyH8t7g+xyaNKMMsR3SkF6M0wTA0/iyL -----END CERTIFICATE-----Generated at Wed Nov 5 14:36:17 2025 by rpki-client