$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: wxtYbbZtfHosglyiCk0XsYBHH5MPBFc0cA3NgCaZOyU= Subject key identifier: 4E:5A:4D:30:97:05:91:54:30:71:6F:1C:56:79:8F:64:CE:DE:5C:7C Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 0127 Signing time: Wed 05 Nov 2025 04:54:31 +0000 Manifest this update: Wed 05 Nov 2025 04:54:30 +0000 Manifest next update: Wed 12 Nov 2025 04:54:30 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: cvKW2DtCaCD4vo3GcXl+mJln1GeyRdpeB5GYndvfJPk=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: rMJAoxoS++kNzcCP2pW17iqc9CzolSJB2caGijczQIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Nov 5 04:54:30 2025 GMT Not After : Nov 12 04:54:30 2025 GMT Subject: CN=690ad886-97d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:af:db:85:69:c2:29:6a:3a:c5:8a:8f:2c: 1b:62:3a:a3:8c:f8:c9:b9:7e:e4:18:5f:c0:2c:d5: 53:38:ec:11:00:94:1d:7b:00:15:b0:0c:d1:4f:fc: 90:80:5d:39:67:fa:0b:e1:94:27:f4:8e:70:96:68: 3b:4b:1c:d2:eb:2a:6b:04:0e:70:34:ed:16:8f:68: 71:72:5d:ff:35:5f:e9:05:8d:16:9d:89:15:eb:cc: af:59:d2:28:27:1f:7f:89:d7:70:cb:01:15:a5:04: 63:67:e3:10:97:89:2b:37:a7:fb:e1:8d:51:b7:96: ad:d6:2e:47:0a:d4:8a:fb:f5:80:b8:c9:49:2a:7e: 65:c4:e3:e6:46:fa:67:a3:85:0b:c1:3a:10:e5:fc: 58:7e:ba:34:76:36:c4:16:3d:4a:4b:b0:98:7b:3e: 23:11:91:b2:dc:14:80:e9:93:e9:4a:59:ad:82:8a: b2:d1:64:aa:5b:14:28:83:5a:fa:22:1b:16:15:a6: 2b:a5:fe:d5:e4:18:c2:52:7a:3f:ae:bc:03:44:b1: a9:73:03:dd:fc:c7:50:a7:eb:db:df:89:7b:59:18: ca:a3:79:51:f7:4b:e2:bd:5b:58:16:91:74:a3:a7: ca:97:f1:ad:0e:78:70:e5:8e:c4:80:9f:96:d8:97: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5A:4D:30:97:05:91:54:30:71:6F:1C:56:79:8F:64:CE:DE:5C:7C X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:c8:b8:6d:d5:e8:76:12:76:e6:39:7c:74:6b:6a:ce:a0:07: 8c:d9:16:c7:7a:e4:7a:34:50:a6:c5:f1:8d:94:57:d7:95:32: 29:5b:6b:e9:dc:48:48:e8:7a:34:60:5b:da:45:9a:9a:13:ba: ff:1c:56:52:72:0f:75:a2:2d:79:ec:c8:2f:64:38:b3:9d:1f: 81:3c:02:c2:be:bf:66:b2:33:49:cc:e6:9a:ca:79:33:a7:6c: af:81:02:c1:c1:1a:bb:86:13:2a:d3:8d:96:0f:d5:ca:68:47: 1a:69:af:3b:dc:f3:05:59:39:31:6a:dd:e0:ff:25:05:fe:1f: b9:c2:b8:2d:ef:c1:e6:b9:31:66:6e:2b:d0:6d:ab:87:5a:a1: 1f:95:e1:ff:53:b3:58:a7:06:cc:e5:d9:db:78:7b:64:7b:32: fa:90:01:b4:16:4d:50:72:ee:6d:e8:04:d1:18:87:03:cb:70: 14:29:a0:ae:d4:b0:99:b1:a1:90:81:00:b9:99:7f:b0:31:c0: 4e:dd:a1:46:39:07:ad:ca:22:00:48:00:71:bc:57:43:b1:99: 2e:d8:2e:1e:b0:af:48:8c:36:26:5e:9f:78:dc:24:97:69:5f: 75:db:89:4c:5a:1b:fc:32:6e:d2:38:d5:ac:75:dc:9d:c1:af: 1a:9c:66:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUxMTA1MDQ1NDMwWhcNMjUxMTEyMDQ1NDMwWjAYMRYwFAYD VQQDEw02OTBhZDg4Ni05N2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIOv24VpwilqOsWKjywbYjqjjPjJuX7kGF/ALNVTOOwRAJQdewAVsAzRT/yQ gF05Z/oL4ZQn9I5wlmg7SxzS6yprBA5wNO0Wj2hxcl3/NV/pBY0WnYkV68yvWdIo Jx9/iddwywEVpQRjZ+MQl4krN6f74Y1Rt5at1i5HCtSK+/WAuMlJKn5lxOPmRvpn o4ULwToQ5fxYfro0djbEFj1KS7CYez4jEZGy3BSA6ZPpSlmtgoqy0WSqWxQog1r6 IhsWFaYrpf7V5BjCUno/rrwDRLGpcwPd/MdQp+vb34l7WRjKo3lR90vivVtYFpF0 o6fKl/GtDnhw5Y7EgJ+W2Je8VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5aTTCX BZFUMHFvHFZ5j2TO3lx8MB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyyLht1eh2EnbmOXx0a2rOoAeM2RbHeuR6NFCmxfGNlFfXlTIpW2vp 3EhI6Ho0YFvaRZqaE7r/HFZScg91oi157MgvZDiznR+BPALCvr9msjNJzOaaynkz p2yvgQLBwRq7hhMq042WD9XKaEcaaa873PMFWTkxat3g/yUF/h+5wrgt78HmuTFm bivQbauHWqEfleH/U7NYpwbM5dnbeHtkezL6kAG0Fk1Qcu5t6ATRGIcDy3AUKaCu 1LCZsaGQgQC5mX+wMcBO3aFGOQetyiIASABxvFdDsZku2C4esK9IjDYmXp943CSX aV9124lMWhv8Mm7SONWsddydwa8anGbx -----END CERTIFICATE-----Generated at Wed Nov 5 20:25:57 2025 by rpki-client