$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft File: H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json) Hash identifier: tRgERoXjwRL0oI4qZGv/GqJJJfW49sj0NPAE2VhdM54= Subject key identifier: E1:DB:BC:1C:0D:16:2A:0B:80:FC:54:6B:1F:B7:8E:62:37:0D:B5:20 Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 Certificate issuer: /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft Manifest number: 01E6 Signing time: Wed 05 Nov 2025 02:45:48 +0000 Manifest this update: Wed 05 Nov 2025 02:45:48 +0000 Manifest next update: Wed 12 Nov 2025 02:45:48 +0000 Files and hashes: 1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: 8GGmI2rcX+LxZiejdcj+Wr2dfFFlkGqTPBj/wTrpicc=) 2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: bednLb1aavoMryTZu6a+ZITB3tAwjB8YeG5P5A+FHwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368 Validity Not Before: Nov 5 02:45:48 2025 GMT Not After : Nov 12 02:45:48 2025 GMT Subject: CN=690aba5c-1ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:b5:e0:ff:84:54:eb:b5:d3:7c:be:08:08: 13:72:22:b5:b7:63:67:ae:f2:14:af:16:70:5d:8d: c2:22:b6:a6:e7:5d:65:6b:3e:ec:90:bb:fe:49:bb: ec:62:ef:8b:94:8d:51:3e:df:a8:fa:bf:c5:f7:27: cf:ae:06:53:a8:1d:9d:37:ed:22:d5:f6:00:d2:fd: 97:a7:ce:c8:c4:74:0b:6e:c3:b8:77:2f:58:91:69: 8b:bd:1b:49:9c:5c:17:a7:5c:27:07:44:c6:eb:fc: 82:b3:b9:23:37:f9:e5:51:1a:cd:05:e6:95:b8:e8: 89:d4:3d:ca:a9:2d:e9:13:9f:03:4e:9d:dd:ae:ab: 7a:45:e6:94:79:4f:93:a3:35:33:b0:d6:06:f0:39: a8:8a:c5:35:1d:3e:02:42:ec:cc:2f:b2:1d:e8:1c: 7c:ab:d5:c0:2c:e7:44:21:4e:f5:21:56:f4:66:66: 06:63:44:24:7c:2a:78:09:9c:d4:52:89:51:b4:99: 7b:18:cc:28:38:98:f2:6b:d2:ba:2d:a0:0f:40:27: c3:01:56:27:86:16:ce:24:01:cb:0b:35:9c:a3:de: 1d:fa:6b:c6:b3:5a:02:ea:8a:8a:49:b8:c3:49:69: 8d:c1:82:f5:33:07:5e:18:5a:31:1d:15:b9:d6:8f: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:BC:1C:0D:16:2A:0B:80:FC:54:6B:1F:B7:8E:62:37:0D:B5:20 X509v3 Authority Key Identifier: keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:40:c9:10:a7:51:08:ec:ae:23:f3:ce:50:1e:a6:fd:c0:ba: b3:ca:fa:ac:c0:6b:fc:01:f8:48:b5:e2:1a:0f:d8:6b:3e:00: a2:d5:71:49:9a:3c:f8:4b:74:3d:fc:9f:0e:61:36:aa:00:94: e9:b8:8c:83:79:5b:97:52:ef:99:cb:a6:03:a9:b5:e7:f8:10: 49:0d:d4:df:ec:90:d5:95:8e:be:67:26:32:48:97:25:b0:94: 24:80:4f:07:41:56:a5:18:f0:59:c3:6a:b2:c9:18:08:46:fb: 39:34:8b:fe:4b:d8:f2:b2:ef:e9:5d:4f:84:38:6d:4b:ee:ac: 76:21:ce:45:9f:86:ce:7e:24:e3:d1:96:9f:60:d0:e0:d9:f9: 3a:68:d4:fe:6c:dd:dd:05:41:13:ef:63:16:67:fa:8b:55:64: 87:d7:e5:cc:ff:cc:50:bd:58:01:cc:65:63:60:79:2f:18:31: 62:db:46:27:cb:21:f5:ac:6e:cd:82:cc:63:bf:81:cb:be:af: d0:e5:a9:e9:ae:9e:04:e3:21:32:3f:21:ae:94:11:98:31:e9: 09:dc:c8:e6:96:95:98:32:52:8a:6b:0d:7d:e5:e7:4f:a9:51: 93:7e:19:29:ac:2d:fb:2a:72:2f:a4:8e:bc:85:a1:a7:9a:5a: 4a:e5:64:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5 M0FDNjkzNjgwHhcNMjUxMTA1MDI0NTQ4WhcNMjUxMTEyMDI0NTQ4WjAYMRYwFAYD VQQDEw02OTBhYmE1Yy0xYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzga14P+EVOu103y+CAgTciK1t2NnrvIUrxZwXY3CIram511laz7skLv+Sbvs Yu+LlI1RPt+o+r/F9yfPrgZTqB2dN+0i1fYA0v2Xp87IxHQLbsO4dy9YkWmLvRtJ nFwXp1wnB0TG6/yCs7kjN/nlURrNBeaVuOiJ1D3KqS3pE58DTp3drqt6ReaUeU+T ozUzsNYG8DmoisU1HT4CQuzML7Id6Bx8q9XALOdEIU71IVb0ZmYGY0QkfCp4CZzU UolRtJl7GMwoOJjya9K6LaAPQCfDAVYnhhbOJAHLCzWco94d+mvGs1oC6oqKSbjD SWmNwYL1MwdeGFoxHRW51o8zJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHbvBwN FioLgPxUax+3jmI3DbUgMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1 ZmpjZzdGU3N2MWlUckdrMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdQMkQp1EI7K4j885QHqb9wLqzyvqswGv8AfhIteIaD9hrPgCi1XFJ mjz4S3Q9/J8OYTaqAJTpuIyDeVuXUu+Zy6YDqbXn+BBJDdTf7JDVlY6+ZyYySJcl sJQkgE8HQValGPBZw2qyyRgIRvs5NIv+S9jysu/pXU+EOG1L7qx2Ic5Fn4bOfiTj 0ZafYNDg2fk6aNT+bN3dBUET72MWZ/qLVWSH1+XM/8xQvVgBzGVjYHkvGDFi20Yn yyH1rG7Ngsxjv4HLvq/Q5anprp4E4yEyPyGulBGYMekJ3MjmlpWYMlKKaw195edP qVGTfhkprC37KnIvpI68haGnmlpK5WRf -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:01 2025 by rpki-client