$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: GX4552++/t9nYAZZ/UEAdrJp1nVKUjzJ8FPEEDm3nlM= Subject key identifier: 3E:AA:3A:68:D7:E6:AF:51:2B:7F:C2:C3:9E:E4:9D:AA:5F:BD:AD:09 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 3556 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 352D Signing time: Tue 04 Nov 2025 14:23:34 +0000 Manifest this update: Tue 04 Nov 2025 14:23:34 +0000 Manifest next update: Tue 11 Nov 2025 14:23:34 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: wyjnOgFIJgUQiWmN3+fHaddo/h93rAAH629siHn4RLw=) 2: D750ADC20ACF11F0B4EBA55FC4F9AE02.roa (hash: NL1ARYRNOz8aLxkxUrPpKF6D4wwBVw7q5BCEbZZrFuo=) 3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: I6SN+VthWHNwpn13bC2pRMPfdtmxkMFNn0d1M2WvxFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13654 (0x3556) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Nov 4 14:23:34 2025 GMT Not After : Nov 11 14:23:34 2025 GMT Subject: CN=690a0c66-65cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:0d:f4:48:ed:6d:1a:90:a2:ba:c3:06:e8: 67:06:05:d8:45:ce:3e:50:43:6f:54:84:d5:2d:53: a8:13:27:da:16:70:28:26:65:04:68:6f:d5:b9:e4: 09:81:ea:21:5b:cf:71:3d:fa:a3:90:e3:a1:a2:4c: 58:fe:0b:2f:26:47:6d:67:07:7c:82:29:8d:2d:2e: d2:31:0b:05:97:53:41:db:e8:de:72:79:85:9f:0f: 59:90:c5:e7:79:80:27:02:1a:c0:28:04:6f:55:f8: a3:9c:3f:55:cd:1b:14:2d:f4:58:d1:5b:e4:b9:e7: 0b:77:e7:12:3c:ff:53:ae:a9:e8:c7:0d:7c:7f:dc: 83:78:ad:a4:ce:f2:36:ac:bc:a1:35:86:dc:1c:5f: e7:b2:da:e3:2e:a0:e8:59:4a:f5:64:d9:c2:81:f1: 31:d0:cf:55:bd:ca:57:26:1b:38:29:64:dd:30:af: 5b:61:d1:b4:34:35:32:bc:85:33:bb:10:c4:b6:a7: 5a:d3:b9:50:f0:dc:4f:34:d3:35:60:b0:a0:1f:c3: fd:d4:67:88:27:38:37:cc:5a:00:f9:9b:5e:e6:33: 81:c4:d4:b2:06:23:f2:b3:01:a5:d2:fd:63:52:7a: 8a:74:a2:5f:00:e0:c0:8f:75:3e:dc:ae:fc:87:32: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:3A:68:D7:E6:AF:51:2B:7F:C2:C3:9E:E4:9D:AA:5F:BD:AD:09 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:ff:a3:3e:26:77:21:a2:04:be:c6:f0:e8:4c:85:ac:9a: a4:c6:ef:e9:9b:b6:7e:e0:1a:e3:38:2e:6a:ce:c8:9d:62:b5: 3f:32:a3:d7:ee:9b:42:9e:13:89:69:c4:d8:69:98:b9:91:e8: b5:77:06:73:55:5c:0d:df:20:3e:ec:64:29:7c:fc:8f:63:76: bc:1d:a6:e5:df:82:91:82:c0:b4:1a:65:68:8a:af:9a:c2:28: dc:37:56:dc:26:c6:e0:19:13:cf:22:8c:8e:04:3a:10:23:b6: 40:b9:5c:bd:46:79:07:dc:a0:85:71:2d:13:f4:19:ec:d2:78: 2e:73:ab:54:c5:de:2e:d7:01:74:f1:38:28:ac:eb:6f:9f:61: e8:0d:06:7f:cb:ed:51:a0:00:ec:cd:5d:13:58:8a:be:99:74: cd:3b:1f:00:b7:f5:8c:2f:c2:1c:c0:49:ce:27:af:d3:16:b9: f6:85:52:57:0f:4a:ed:3a:cd:bc:df:e9:de:60:7a:cb:9e:8a: 2d:02:7f:71:c1:59:fc:9a:9c:70:50:39:5c:5c:f5:f9:c9:c6: f3:6f:f5:fe:73:37:8e:a7:b3:af:73:d0:b1:2c:8c:aa:d1:14: 32:bd:44:52:1f:6b:de:5e:96:1c:fe:ff:4c:68:25:ad:1a:fc: 79:81:02:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjUxMTA0MTQyMzM0WhcNMjUxMTExMTQyMzM0WjAYMRYwFAYD VQQDEw02OTBhMGM2Ni02NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkEN9EjtbRqQorrDBuhnBgXYRc4+UENvVITVLVOoEyfaFnAoJmUEaG/VueQJ geohW89xPfqjkOOhokxY/gsvJkdtZwd8gimNLS7SMQsFl1NB2+jecnmFnw9ZkMXn eYAnAhrAKARvVfijnD9VzRsULfRY0VvkuecLd+cSPP9Trqnoxw18f9yDeK2kzvI2 rLyhNYbcHF/nstrjLqDoWUr1ZNnCgfEx0M9VvcpXJhs4KWTdMK9bYdG0NDUyvIUz uxDEtqda07lQ8NxPNNM1YLCgH8P91GeIJzg3zFoA+Zte5jOBxNSyBiPyswGl0v1j UnqKdKJfAODAj3U+3K78hzI7EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6qOmjX 5q9RK3/Cw57knapfva0JMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8j/+jPiZ3IaIEvsbw6EyFrJqkxu/pm7Z+4BrjOC5qzsidYrU/MqPX 7ptCnhOJacTYaZi5kei1dwZzVVwN3yA+7GQpfPyPY3a8Habl34KRgsC0GmVoiq+a wijcN1bcJsbgGRPPIoyOBDoQI7ZAuVy9RnkH3KCFcS0T9Bns0nguc6tUxd4u1wF0 8TgorOtvn2HoDQZ/y+1RoADszV0TWIq+mXTNOx8At/WML8IcwEnOJ6/TFrn2hVJX D0rtOs283+neYHrLnootAn9xwVn8mpxwUDlcXPX5ycbzb/X+czeOp7Ovc9CxLIyq 0RQyvURSH2veXpYc/v9MaCWtGvx5gQKY -----END CERTIFICATE-----Generated at Wed Nov 5 12:20:53 2025 by rpki-client