$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: C/fP/yryK0HuQikenZQxW/8yO2LrKE5pLojzOWXjitc= Subject key identifier: 14:A4:35:1E:9B:83:EA:CE:CE:60:F7:60:1E:3C:6E:06:6E:CB:D6:55 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 03ED Signing time: Wed 05 Nov 2025 00:35:47 +0000 Manifest this update: Wed 05 Nov 2025 00:35:46 +0000 Manifest next update: Wed 12 Nov 2025 00:35:46 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: M0QcmpHYF1zUtEnLHdhcb2eiwtSeKczsPNfdk4ZOplg=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Nov 5 00:35:46 2025 GMT Not After : Nov 12 00:35:46 2025 GMT Subject: CN=690a9be3-cea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:5a:cf:f2:02:fa:2d:0e:65:b5:17:df:f6: 66:b2:e2:24:c5:b2:64:18:3a:69:4d:e5:b1:e7:89: 07:62:04:f4:84:4a:fc:9f:e0:51:1f:d1:7c:24:4c: 9f:0d:52:fa:b5:e6:26:ae:38:f5:87:dc:fb:4d:a9: 19:9d:99:c0:db:bc:d4:ba:4d:dc:ab:d3:d2:21:8d: 98:8b:e7:a4:63:7e:ed:0a:f6:50:ee:81:96:9a:ae: 42:93:d7:c9:67:30:e1:5b:0b:05:83:fc:67:7a:a4: 45:c4:2a:13:43:48:27:d2:9e:d3:79:39:ca:be:2f: cd:b0:40:d9:b2:c0:ec:ca:92:9c:d3:47:95:d9:57: 9b:47:4e:d8:91:d9:bd:3a:a3:94:7e:a1:17:3e:9d: cf:89:16:11:12:d4:de:58:73:8b:2f:b6:d9:76:ea: 4f:2a:a0:3c:15:05:b7:8d:2f:92:25:23:bf:54:60: 99:29:d4:cd:cc:69:09:3d:26:79:64:6b:e6:43:ff: 7c:e8:bb:90:09:94:71:f5:22:09:a2:cd:54:64:0f: 34:92:8e:ea:36:f4:ad:e6:87:7c:16:58:cd:b1:8d: 6a:db:cc:d8:03:df:ed:27:5d:78:4b:34:cc:6f:00: 77:24:8f:34:56:52:d1:11:13:85:ec:ef:ed:01:80: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A4:35:1E:9B:83:EA:CE:CE:60:F7:60:1E:3C:6E:06:6E:CB:D6:55 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4d:07:38:b4:67:ed:49:d4:0c:1e:ff:d2:a3:4b:e7:61:8c: 56:1d:1a:be:67:48:50:4c:cf:ec:f7:e0:18:4b:69:46:25:45: e3:17:32:f7:00:4b:54:4f:9e:18:9d:cc:7c:fe:7a:17:33:28: f2:43:49:e5:70:2a:de:5e:74:ed:bb:e7:59:1a:a7:b7:94:d7: f8:dd:6c:d6:32:22:6d:a1:db:ed:47:cb:6e:93:31:f8:90:e0: fb:b2:c2:f4:34:b1:ae:63:97:bc:86:da:44:a8:14:07:9a:9a: 61:77:9f:89:72:b8:8e:e5:9a:11:c2:7c:3a:22:62:17:54:39: 22:92:80:6e:85:94:79:1d:6f:a5:ae:82:fa:1f:bc:34:1f:cc: 70:d9:58:8f:22:1c:38:a2:5c:48:5c:a4:f2:13:f9:c2:0b:3c: 3c:d4:c4:97:49:a1:26:65:8a:bb:ce:d9:19:73:01:70:57:2f: 90:5d:cd:6f:ab:f3:ae:69:5c:29:75:02:c9:5d:b1:06:89:0b: ce:0f:90:30:88:9d:7b:14:71:64:27:e5:68:00:ed:a1:b0:82: f4:5e:3b:9d:56:f3:4f:70:95:94:74:b2:d7:88:f0:83:02:72: cf:d8:1a:18:55:82:ad:13:22:f9:f9:a3:83:97:b9:4f:14:28: 91:4b:dc:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUxMTA1MDAzNTQ2WhcNMjUxMTEyMDAzNTQ2WjAYMRYwFAYD VQQDEw02OTBhOWJlMy1jZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J9az/IC+i0OZbUX3/ZmsuIkxbJkGDppTeWx54kHYgT0hEr8n+BRH9F8JEyf DVL6teYmrjj1h9z7TakZnZnA27zUuk3cq9PSIY2Yi+ekY37tCvZQ7oGWmq5Ck9fJ ZzDhWwsFg/xneqRFxCoTQ0gn0p7TeTnKvi/NsEDZssDsypKc00eV2VebR07Ykdm9 OqOUfqEXPp3PiRYREtTeWHOLL7bZdupPKqA8FQW3jS+SJSO/VGCZKdTNzGkJPSZ5 ZGvmQ/986LuQCZRx9SIJos1UZA80ko7qNvSt5od8FljNsY1q28zYA9/tJ114SzTM bwB3JI80VlLREROF7O/tAYCFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSkNR6b g+rOzmD3YB48bgZuy9ZVMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYTQc4tGftSdQMHv/So0vnYYxWHRq+Z0hQTM/s9+AYS2lGJUXjFzL3 AEtUT54Yncx8/noXMyjyQ0nlcCreXnTtu+dZGqe3lNf43WzWMiJtodvtR8tukzH4 kOD7ssL0NLGuY5e8htpEqBQHmpphd5+JcriO5ZoRwnw6ImIXVDkikoBuhZR5HW+l roL6H7w0H8xw2ViPIhw4olxIXKTyE/nCCzw81MSXSaEmZYq7ztkZcwFwVy+QXc1v q/OuaVwpdQLJXbEGiQvOD5AwiJ17FHFkJ+VoAO2hsIL0XjudVvNPcJWUdLLXiPCD AnLP2BoYVYKtEyL5+aODl7lPFCiRS9zC -----END CERTIFICATE-----Generated at Wed Nov 5 13:37:10 2025 by rpki-client