$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: iQWZIgQ+xR9w8uH3pjM3XT2Eu9VP/B71NP+i6tH5jss= Subject key identifier: 3B:FC:17:6F:A3:7F:5A:09:01:69:86:A1:7C:90:EF:16:FF:5B:29:7B Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: C9 Signing time: Wed 05 Nov 2025 05:55:43 +0000 Manifest this update: Wed 05 Nov 2025 05:55:43 +0000 Manifest next update: Wed 12 Nov 2025 05:55:43 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: A2rwwpLw4cdskmchgQVSBZUlItegk5NczO9MTO66O0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Nov 5 05:55:43 2025 GMT Not After : Nov 12 05:55:43 2025 GMT Subject: CN=690ae6df-a190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:28:0a:da:1e:75:3e:a3:e3:3c:72:40:a3: ce:8b:1f:0c:c4:c6:b3:93:58:52:03:61:ec:fd:41: b0:df:50:54:06:c3:70:e7:45:d6:31:c4:ff:ec:08: 8d:d9:5d:71:91:7c:b3:39:fc:16:95:3b:e2:cd:10: d4:36:3e:46:af:05:67:f9:36:d4:95:5d:e5:c2:6a: d7:fc:61:48:d3:be:09:37:b1:82:16:2f:c2:a8:a5: 44:10:4e:88:a0:c2:50:93:43:40:00:e5:49:73:53: 65:37:93:99:0f:48:87:77:72:a1:fb:d6:fd:fa:9f: b5:e0:bb:f6:80:43:d6:6b:ed:32:d0:7e:7a:55:53: 2d:15:41:98:c1:61:f7:b5:99:29:a7:6c:4c:ba:13: 5e:60:d1:a0:c3:b3:74:7d:1e:78:06:f7:bf:64:76: cf:24:0b:e1:bb:f3:8a:7d:19:31:40:23:96:40:ea: 7e:75:0d:fc:91:c5:3c:18:b4:f1:48:05:ee:32:cb: 5d:2e:19:c9:fe:92:37:20:0b:7a:96:5b:a7:23:6b: e0:24:01:6f:9a:b2:ef:f0:81:56:26:84:76:af:14: b6:7d:9b:f8:9a:19:6d:4c:87:6b:b4:cf:3f:56:88: 96:ce:8e:50:0d:a0:32:32:52:b0:70:fc:2f:9a:5d: 35:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:17:6F:A3:7F:5A:09:01:69:86:A1:7C:90:EF:16:FF:5B:29:7B X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:28:63:c9:72:77:63:2a:40:fd:b4:29:7f:62:b8:a4:0a:7a: 9e:22:e5:f2:ae:f5:7e:c5:e4:b2:b6:a4:e1:ad:f9:62:c0:74: f0:c6:a6:77:c9:d7:dd:95:c1:93:e0:ca:3e:15:83:81:46:21: cf:96:d1:61:85:b1:d0:6f:5a:b3:88:a3:9f:eb:42:97:29:d5: 21:e3:4f:2b:34:98:bb:6a:a3:4b:1f:8b:68:e8:0f:68:18:3d: 8b:09:0f:a2:66:bb:8d:c8:a4:85:db:11:94:a6:17:0d:87:21: 66:94:79:72:ac:ce:cf:f4:9a:71:fc:d1:0e:91:6d:81:c8:67: e2:4d:4d:66:ad:2f:14:6e:97:04:53:a3:11:6a:fb:b5:0a:9e: f5:8d:5c:61:d7:e8:12:e1:69:6b:c4:33:fb:71:9d:ad:78:8d: e7:b8:18:3c:ad:51:5c:06:04:f7:ae:10:a7:9f:ea:80:26:33: 59:51:45:39:e3:a1:0b:0c:b1:a9:e5:6e:c5:67:65:5f:68:d2: 69:61:16:1a:70:ae:4e:4f:99:31:20:e5:a0:04:07:97:ba:22: 00:b7:24:80:83:f7:65:82:88:d8:b5:1b:9a:97:ea:80:b8:69: 5a:81:18:91:e0:fc:6a:97:dc:2f:cc:0f:ef:41:f0:cf:44:03: 51:54:59:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKDg3OTJERTM5OUNGNjMxOTNEREMyOUQzMEZCRjBBNTgx RTAyNEYwMDMwHhcNMjUxMTA1MDU1NTQzWhcNMjUxMTEyMDU1NTQzWjAYMRYwFAYD VQQDEw02OTBhZTZkZi1hMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/QoCtoedT6j4zxyQKPOix8MxMazk1hSA2Hs/UGw31BUBsNw50XWMcT/7AiN 2V1xkXyzOfwWlTvizRDUNj5GrwVn+TbUlV3lwmrX/GFI074JN7GCFi/CqKVEEE6I oMJQk0NAAOVJc1NlN5OZD0iHd3Kh+9b9+p+14Lv2gEPWa+0y0H56VVMtFUGYwWH3 tZkpp2xMuhNeYNGgw7N0fR54Bve/ZHbPJAvhu/OKfRkxQCOWQOp+dQ38kcU8GLTx SAXuMstdLhnJ/pI3IAt6llunI2vgJAFvmrLv8IFWJoR2rxS2fZv4mhltTIdrtM8/ VoiWzo5QDaAyMlKwcPwvml01HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDv8F2+j f1oJAWmGoXyQ7xb/Wyl7MB8GA1UdIwQYMBaAFIeS3jmc9jGT3cKdMPvwpYHgJPAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy9BM0RENkI5QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1aUGR3cDB3LV9DbGdlQWs4 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTRGNy9BM0RENkI5QTg1RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi9oNUxlT1p6Mk1a UGR3cDB3LV9DbGdlQWs4QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAKGPJcndjKkD9tCl/YrikCnqeIuXyrvV+xeSytqThrfliwHTwxqZ3 ydfdlcGT4Mo+FYOBRiHPltFhhbHQb1qziKOf60KXKdUh408rNJi7aqNLH4to6A9o GD2LCQ+iZruNyKSF2xGUphcNhyFmlHlyrM7P9Jpx/NEOkW2ByGfiTU1mrS8UbpcE U6MRavu1Cp71jVxh1+gS4WlrxDP7cZ2teI3nuBg8rVFcBgT3rhCnn+qAJjNZUUU5 46ELDLGp5W7FZ2VfaNJpYRYacK5OT5kxIOWgBAeXuiIAtySAg/dlgojYtRual+qA uGlagRiR4Pxql9wvzA/vQfDPRANRVFkc -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:28 2025 by rpki-client