$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft File: hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json) Hash identifier: RKzAHtJOOuV/GWI8QiIRrNL/RFPwV0vlWUdakk4BN3Q= Subject key identifier: 31:37:3A:C5:FA:A5:EF:CA:9D:CB:D7:5F:82:9A:67:7E:DE:E2:10:F5 Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E Certificate issuer: /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft Manifest number: 0144 Signing time: Mon 03 Nov 2025 04:18:58 +0000 Manifest this update: Mon 03 Nov 2025 04:18:57 +0000 Manifest next update: Mon 10 Nov 2025 04:18:57 +0000 Files and hashes: 1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: reEo0Ccpg7LybR2bJHRE+6nzU6OZqgvbLDpI4RKEL3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E Validity Not Before: Nov 3 04:18:57 2025 GMT Not After : Nov 10 04:18:57 2025 GMT Subject: CN=69082d31-ac8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:06:d8:49:56:b5:aa:54:35:0b:db:15:7f: 95:eb:e9:95:c4:1b:3a:06:aa:50:8e:f6:75:3e:7b: f9:23:da:d7:d0:9a:b6:f6:36:a5:02:9a:da:81:e3: cd:8c:4c:7e:4d:1c:05:2c:fc:d0:6e:9f:32:5a:70: 76:aa:59:c8:34:cb:0d:33:4a:27:d4:17:83:bc:0a: d3:ab:97:0e:6d:5a:c8:e8:06:12:62:d8:87:08:78: 89:79:3e:f7:a4:35:45:65:c1:9b:6c:31:9b:a1:a5: 31:68:86:e5:8c:ad:3a:35:35:2f:46:4c:7b:57:76: 31:f5:a7:6b:9f:4b:88:91:73:8c:9d:08:fa:86:56: 45:bb:ec:7c:9e:2a:e3:d4:4e:ba:7f:16:f8:53:ba: 4a:0b:ee:2f:5e:c9:cb:b9:5f:47:43:97:ae:c8:5b: f2:9c:0a:92:d7:fb:2a:9a:ec:a6:68:3f:f3:01:cb: 70:9e:8c:3d:c6:43:48:fb:e9:f7:e8:c9:18:ca:80: 81:48:d5:f0:c9:f3:05:1e:15:f1:5b:7e:b6:f8:fc: 83:a5:09:63:b0:e0:73:78:31:dd:3c:c0:c7:99:e2: d9:f7:12:1d:0a:a5:53:fa:6d:09:0b:a2:f6:3e:85: 1e:c1:cf:82:f1:a5:fb:c3:ab:4e:7c:f4:c7:07:7d: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:3A:C5:FA:A5:EF:CA:9D:CB:D7:5F:82:9A:67:7E:DE:E2:10:F5 X509v3 Authority Key Identifier: keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8e:2b:99:c0:da:b9:07:a9:f0:8c:fc:2c:2d:08:b3:1e:4d: fd:eb:0c:c4:27:26:2b:af:8a:ad:b5:71:8c:e2:9f:0a:f4:0d: b4:bd:c6:89:24:4b:b0:3d:10:d6:5e:a5:7d:44:77:d5:2c:1d: a8:1f:13:cc:e1:d4:6d:e2:27:6b:74:71:b4:0f:f6:a7:99:f1: e3:c8:6b:bb:cd:ac:3a:f3:57:e3:88:13:f7:4d:a6:54:19:7a: 46:25:dd:ac:c5:42:96:1c:d7:8e:d3:6b:4f:f8:cd:57:91:36: 6b:0c:0e:90:4d:a9:45:43:ef:38:02:a8:d2:44:33:33:5a:26: 40:83:86:7e:bb:17:6c:a9:6d:a4:7f:83:fa:82:17:e9:fa:20: bc:12:eb:e9:7b:24:a7:b8:27:70:29:3f:5e:25:08:14:bd:11: 10:08:ec:f6:00:97:b8:ac:2b:46:31:df:25:c7:52:ee:e6:f7: cd:8e:d9:e4:63:4a:6c:ee:d5:5e:51:91:aa:d0:ca:28:7f:42: 01:eb:2a:d4:fa:cf:d2:da:84:69:43:91:cb:ec:b9:42:c5:ec: 1a:45:b4:b3:4c:ff:92:dd:cf:38:db:64:15:8a:f3:79:9b:0f: 59:cf:a3:c7:5f:f3:ec:64:0d:40:de:a6:a7:ec:4b:53:49:5b: 59:7f:3d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY1QzcxMTAvBgNVBAUTKDg1OEI2NDU0RTIyMjQ2Qzc4MUU1MTM1MkIzMDU2NDEw OTg2ODU3N0UwHhcNMjUxMTAzMDQxODU3WhcNMjUxMTEwMDQxODU3WjAYMRYwFAYD VQQDEw02OTA4MmQzMS1hYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kgG2ElWtapUNQvbFX+V6+mVxBs6BqpQjvZ1Pnv5I9rX0Jq29jalApragePN jEx+TRwFLPzQbp8yWnB2qlnINMsNM0on1BeDvArTq5cObVrI6AYSYtiHCHiJeT73 pDVFZcGbbDGboaUxaIbljK06NTUvRkx7V3Yx9adrn0uIkXOMnQj6hlZFu+x8nirj 1E66fxb4U7pKC+4vXsnLuV9HQ5euyFvynAqS1/sqmuymaD/zActwnow9xkNI++n3 6MkYyoCBSNXwyfMFHhXxW362+PyDpQljsOBzeDHdPMDHmeLZ9xIdCqVT+m0JC6L2 PoUewc+C8aX7w6tOfPTHB31aSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE3OsX6 pe/KncvXX4KaZ37e4hD1MB8GA1UdIwQYMBaAFIWLZFTiIkbHgeUTUrMFZBCYaFd+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjVDNy9FRDBGQjY4NkMz RTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJzZUI1Uk5Tc3dWa0VKaG9W MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZdGtWT0lpUnNlQjVSTlNzd1ZrRUpob1YzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjVDNy9FRDBGQjY4NkMzRTQxMUVFOTYxM0Y1ODNDNEY5QUUwMi9oWXRrVk9JaVJz ZUI1Uk5Tc3dWa0VKaG9WMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbjiuZwNq5B6nwjPwsLQizHk396wzEJyYrr4qttXGM4p8K9A20vcaJ JEuwPRDWXqV9RHfVLB2oHxPM4dRt4idrdHG0D/anmfHjyGu7zaw681fjiBP3TaZU GXpGJd2sxUKWHNeO02tP+M1XkTZrDA6QTalFQ+84AqjSRDMzWiZAg4Z+uxdsqW2k f4P6ghfp+iC8EuvpeySnuCdwKT9eJQgUvREQCOz2AJe4rCtGMd8lx1Lu5vfNjtnk Y0ps7tVeUZGq0Moof0IB6yrU+s/S2oRpQ5HL7LlCxewaRbSzTP+S3c8422QVivN5 mw9Zz6PHX/PsZA1A3qan7EtTSVtZfz2L -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:50 2025 by rpki-client