$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: TCHRUFyvB3hwI0Gxl7OZGLpkgDdWm/jUTZUsodv0148= Subject key identifier: 4E:18:17:86:1C:CB:36:31:86:FF:6B:24:1F:B2:36:37:81:C9:15:34 Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 010B Signing time: Mon 03 Nov 2025 04:55:52 +0000 Manifest this update: Mon 03 Nov 2025 04:55:52 +0000 Manifest next update: Mon 10 Nov 2025 04:55:51 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: 8xWeGVDBHuYohscLCeC+HbfR9D+nYM1mGqWtfCtYePY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Nov 3 04:55:52 2025 GMT Not After : Nov 10 04:55:51 2025 GMT Subject: CN=690835d8-7db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:e8:63:89:b0:3d:c5:a6:c1:04:56:83:35: 6a:7f:c5:d7:18:44:36:b2:ea:7a:73:68:f3:3b:d9: ad:5f:7a:67:51:b3:4a:4d:78:8b:d8:4e:e0:be:3a: 7b:8d:f8:bb:81:cb:75:88:0c:1d:ea:9f:88:4b:7b: 67:c4:43:71:19:33:9e:39:7c:e2:5f:b8:58:5f:83: cf:26:78:44:7d:fc:17:e0:c9:8d:5b:53:5f:2f:67: f2:52:8d:33:26:7a:a0:fd:1a:6b:7a:5d:96:c8:f1: b6:7d:c6:ba:8d:c2:52:2d:54:be:4f:20:1b:bc:80: 23:54:5f:40:69:48:85:24:b3:f7:56:22:61:b4:7b: 7c:a7:ed:fc:82:70:af:99:87:5c:87:d5:76:9e:ca: 38:08:69:0d:67:10:d1:e5:6d:d6:5b:c0:8a:ff:1a: 80:84:92:1d:a3:f1:de:8f:12:22:f4:8e:60:98:bb: e8:97:e2:b5:62:ff:b5:d7:52:98:d0:20:0c:06:40: 49:1e:49:34:ef:ee:b2:e9:e3:9d:1f:b3:b9:cb:e3: 12:a6:9a:98:e7:b5:70:21:4d:25:85:79:6b:cf:46: 56:c1:7f:1a:a6:01:26:37:41:de:79:cc:f2:33:0d: aa:50:44:7e:4c:93:ad:d3:93:b0:61:57:a5:fa:6b: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:18:17:86:1C:CB:36:31:86:FF:6B:24:1F:B2:36:37:81:C9:15:34 X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5e:3c:5b:bd:07:25:f1:d1:39:6c:b3:11:69:25:6a:55:13: 0d:ba:10:09:92:88:95:75:73:a8:de:0d:40:18:65:91:e2:55: c8:17:0b:7e:d3:14:86:12:e7:21:80:97:e3:53:19:e9:4f:65: 17:b5:4e:3e:71:d3:f0:5e:c8:f1:d2:6d:62:ca:c9:25:eb:a8: e5:fa:a6:4e:b8:e6:6b:01:51:32:24:2b:ed:10:d8:45:02:a1: 8d:23:c2:b3:44:81:34:3b:6c:15:8c:03:cb:95:3d:d7:c1:95: 2c:9d:da:f1:d9:13:ee:d0:98:90:e8:3f:78:84:2f:ff:f8:89: f7:1e:7f:fa:7c:0d:1e:d6:28:2c:28:1f:b9:20:42:91:bd:10: 30:9d:93:7e:53:84:57:e9:d9:a7:40:bf:9d:e0:8a:dc:0a:c2: c6:57:3b:ff:a0:f5:ad:c5:5e:1e:34:33:92:2a:b2:42:dd:a4: 06:d2:13:2a:11:38:11:39:48:56:33:88:8c:54:5f:20:4d:b3: 2e:70:e8:f0:2d:da:03:35:85:9a:c3:53:1c:8b:8d:51:b4:9b: 32:49:b6:93:fd:14:21:0a:55:a4:9f:fa:7c:83:a5:4b:7f:c4: 5c:76:22:f5:b4:9c:6f:93:a6:58:37:75:8f:5a:91:8e:03:e9: f5:fa:1e:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG RDgzMjQ5MzEwHhcNMjUxMTAzMDQ1NTUyWhcNMjUxMTEwMDQ1NTUxWjAYMRYwFAYD VQQDEw02OTA4MzVkOC03ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3/oY4mwPcWmwQRWgzVqf8XXGEQ2sup6c2jzO9mtX3pnUbNKTXiL2E7gvjp7 jfi7gct1iAwd6p+IS3tnxENxGTOeOXziX7hYX4PPJnhEffwX4MmNW1NfL2fyUo0z Jnqg/Rprel2WyPG2fca6jcJSLVS+TyAbvIAjVF9AaUiFJLP3ViJhtHt8p+38gnCv mYdch9V2nso4CGkNZxDR5W3WW8CK/xqAhJIdo/HejxIi9I5gmLvol+K1Yv+111KY 0CAMBkBJHkk07+6y6eOdH7O5y+MSppqY57VwIU0lhXlrz0ZWwX8apgEmN0Heeczy Mw2qUER+TJOt05OwYVel+muBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4YF4Yc yzYxhv9rJB+yNjeByRU0MB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARXjxbvQcl8dE5bLMRaSVqVRMNuhAJkoiVdXOo3g1AGGWR4lXIFwt+ 0xSGEuchgJfjUxnpT2UXtU4+cdPwXsjx0m1iyskl66jl+qZOuOZrAVEyJCvtENhF AqGNI8KzRIE0O2wVjAPLlT3XwZUsndrx2RPu0JiQ6D94hC//+In3Hn/6fA0e1igs KB+5IEKRvRAwnZN+U4RX6dmnQL+d4IrcCsLGVzv/oPWtxV4eNDOSKrJC3aQG0hMq ETgROUhWM4iMVF8gTbMucOjwLdoDNYWaw1Mci41RtJsySbaT/RQhClWkn/p8g6VL f8RcdiL1tJxvk6ZYN3WPWpGOA+n1+h7U -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:40 2025 by rpki-client