$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: 58+HWU7QYxp3yPZseen5M2iLk6d65ASyD2v0s0uKtrk= Subject key identifier: E0:BE:51:86:C6:14:2C:24:F3:A6:CB:F4:C1:4C:14:E8:FB:73:9F:52 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: E7 Signing time: Mon 03 Nov 2025 05:24:34 +0000 Manifest this update: Mon 03 Nov 2025 05:24:34 +0000 Manifest next update: Mon 10 Nov 2025 05:24:34 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: WRBaaMOQ7Yj3EEJtZRNEhHLcE+xwnTponBPEhHEic0o=) 2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 6f4F+XIwA2rHEPqEklnobgdqYhNbXAFCeGr2CJ6y/cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Nov 3 05:24:34 2025 GMT Not After : Nov 10 05:24:34 2025 GMT Subject: CN=69083c92-e935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:91:11:62:ae:58:53:3b:49:c9:1f:0e:e4: c4:9d:1c:ab:66:28:f5:16:7f:b0:6e:ca:ee:be:73: 45:b1:cd:91:19:30:9c:52:02:53:4b:95:06:b9:13: 16:e8:09:e5:3e:d6:77:67:df:15:d6:51:4a:60:38: 64:62:b9:c3:6a:1f:de:08:05:f3:68:c5:01:13:5b: c6:b0:27:b4:21:52:8e:a0:e1:a1:45:dd:08:91:bc: cb:25:a5:af:81:a0:d1:80:c2:48:57:b4:d4:19:fa: e5:45:eb:ae:8d:03:db:d4:d0:fe:f0:2b:65:14:cd: 90:99:9f:61:12:61:8b:1d:86:46:7e:62:ca:40:74: 41:09:bc:99:89:87:04:31:fe:69:dc:e6:84:ec:fc: 99:2b:85:1f:ce:e7:e7:e6:40:cd:80:2d:96:c6:4e: 53:33:58:08:90:7d:86:48:84:ce:dd:e3:b0:05:a4: 5b:e9:06:56:fb:04:96:6f:ea:90:c0:64:9e:33:cb: 75:63:5b:b6:53:b8:07:1f:6a:e5:cb:a4:2e:33:f3: 82:53:2f:6a:04:06:57:4a:a8:13:92:af:bf:fe:b9: a0:d3:0e:16:5c:21:92:0a:fd:f6:31:2a:f9:0b:90: 20:9f:e7:c3:1b:9c:f8:d5:1e:c3:7a:c2:c1:53:b2: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BE:51:86:C6:14:2C:24:F3:A6:CB:F4:C1:4C:14:E8:FB:73:9F:52 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e4:9a:07:6f:be:eb:69:82:af:b8:9d:2b:10:8d:5c:32:1d: 8e:fb:c7:73:0b:60:c4:1b:9b:55:cf:57:2a:57:5e:49:a7:a1: 0c:45:24:2f:44:9a:70:c2:69:68:fa:19:0f:ed:63:86:b6:e3: 69:64:82:89:27:c4:e6:f5:ae:94:e6:4a:48:5f:2b:b0:e3:4a: 92:73:4f:31:c4:cf:13:f2:70:b4:47:fc:9f:a0:48:55:f8:a5: c6:7c:b7:3f:e6:ce:6a:70:fb:8a:e9:48:63:b9:5b:52:b9:31: 54:32:59:12:a0:f8:f9:92:87:39:1b:a3:e0:ef:80:ca:fb:cf: b2:18:01:20:ea:2a:96:b5:4f:df:d9:7f:6d:2a:8d:46:2c:74: d2:0f:5c:70:9d:7b:67:71:2c:82:1d:ac:57:c0:4e:a5:8a:ee: 6b:a5:f6:6a:c3:1e:89:4c:9f:bb:af:e8:0c:dc:a7:d1:42:f2: 96:10:c1:e1:0c:dc:a1:c9:74:69:40:f3:18:00:e1:7b:53:e4: b3:97:c7:63:d0:56:78:96:b4:f5:e6:7c:6b:93:fd:05:64:d6: 47:79:5a:4b:3e:d2:ab:d1:9e:27:1a:1a:ba:fb:4e:0e:8b:31: a1:d6:fe:b1:8e:63:4c:28:d3:02:26:8c:dc:ce:41:3e:6f:55: 04:a4:62:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUxMTAzMDUyNDM0WhcNMjUxMTEwMDUyNDM0WjAYMRYwFAYD VQQDEw02OTA4M2M5Mi1lOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUCREWKuWFM7SckfDuTEnRyrZij1Fn+wbsruvnNFsc2RGTCcUgJTS5UGuRMW 6AnlPtZ3Z98V1lFKYDhkYrnDah/eCAXzaMUBE1vGsCe0IVKOoOGhRd0IkbzLJaWv gaDRgMJIV7TUGfrlReuujQPb1ND+8CtlFM2QmZ9hEmGLHYZGfmLKQHRBCbyZiYcE Mf5p3OaE7PyZK4Ufzufn5kDNgC2Wxk5TM1gIkH2GSITO3eOwBaRb6QZW+wSWb+qQ wGSeM8t1Y1u2U7gHH2rly6QuM/OCUy9qBAZXSqgTkq+//rmg0w4WXCGSCv32MSr5 C5Agn+fDG5z41R7DesLBU7KXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC+UYbG FCwk86bL9MFMFOj7c59SMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL5JoHb77raYKvuJ0rEI1cMh2O+8dzC2DEG5tVz1cqV15Jp6EMRSQv RJpwwmlo+hkP7WOGtuNpZIKJJ8Tm9a6U5kpIXyuw40qSc08xxM8T8nC0R/yfoEhV +KXGfLc/5s5qcPuK6UhjuVtSuTFUMlkSoPj5koc5G6Pg74DK+8+yGAEg6iqWtU/f 2X9tKo1GLHTSD1xwnXtncSyCHaxXwE6liu5rpfZqwx6JTJ+7r+gM3KfRQvKWEMHh DNyhyXRpQPMYAOF7U+Szl8dj0FZ4lrT15nxrk/0FZNZHeVpLPtKr0Z4nGhq6+04O izGh1v6xjmNMKNMCJozczkE+b1UEpGIE -----END CERTIFICATE-----Generated at Tue Nov 4 12:35:01 2025 by rpki-client