$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: qvpqLD8Pzfl0LNh06YxvwiQoOz80LA+o5sXPRG2y370= Subject key identifier: B7:B8:78:F9:82:B5:DB:1E:85:B1:62:E6:08:17:90:61:2B:8D:3D:FF Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0451 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 044B Signing time: Wed 05 Nov 2025 00:18:46 +0000 Manifest this update: Wed 05 Nov 2025 00:18:46 +0000 Manifest next update: Wed 12 Nov 2025 00:18:46 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: W3kEejNm37Jki8i9A3xoLQAJQW5+4OMQz97YzblIS7A=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Nov 5 00:18:46 2025 GMT Not After : Nov 12 00:18:46 2025 GMT Subject: CN=690a97e6-3d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:ad:4a:18:a1:42:fb:84:f9:f8:f4:0b:e3: 23:a2:1f:b3:a1:25:1f:0a:e3:20:fe:6e:f7:7b:58: 03:d4:00:69:03:c2:f8:fc:4b:94:2c:04:53:da:1b: ab:ed:09:d8:c6:15:2b:5d:96:d9:56:25:c6:83:f9: 6b:fe:07:9b:ab:3a:71:74:17:f8:97:81:92:a3:94: a5:32:1b:0f:96:d8:96:ab:9a:3e:88:bf:4e:2b:09: bc:e5:d8:96:08:d7:85:28:fa:c8:a2:2e:b2:7c:e0: e0:75:5a:87:fe:98:b0:7d:2a:61:d1:e2:b5:5a:43: 5e:38:a5:ee:cd:20:e2:d8:79:c7:4e:7c:8d:96:fe: 16:1d:84:5a:ec:09:1d:63:ef:2a:fe:9d:56:6b:9b: 68:cc:6b:61:98:ff:0f:eb:22:0c:87:91:a1:8b:57: bd:6c:23:8f:26:53:77:47:81:66:24:7e:58:5d:72: fc:98:17:68:a4:65:69:3e:b0:ff:e7:2a:a0:2b:a3: d9:67:d8:5c:9b:71:81:ac:4e:c3:bc:6c:13:02:6b: 1c:e6:28:e4:a0:dd:99:1e:5e:ea:c9:40:fa:50:93: 7e:9f:d9:21:a3:87:8e:82:17:4a:4d:75:c5:fa:40: 65:34:62:bb:2a:86:f7:90:77:a4:68:59:c8:ba:28: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B8:78:F9:82:B5:DB:1E:85:B1:62:E6:08:17:90:61:2B:8D:3D:FF X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:34:b8:f3:f0:42:c5:27:73:ef:9d:a3:35:71:14:b8:96:2b: d2:f9:d7:0d:c1:12:54:3c:74:62:e9:83:56:3d:64:52:55:3e: c1:36:40:ef:27:55:dd:d5:f1:95:cc:5f:d8:b1:7d:a5:1f:a1: 2b:e9:1d:92:15:f3:7d:4a:1a:81:e7:01:19:7f:48:66:7e:37: d9:8b:96:6c:17:d7:12:ba:df:0f:18:1b:15:af:70:93:ee:0b: 09:a0:c0:5d:39:fe:40:c0:d8:0a:4f:f1:9f:ed:4e:97:ab:06: dc:c0:fe:99:77:a0:dc:36:41:13:77:e1:03:5e:89:08:8f:75: b6:78:51:7a:fd:af:c2:bc:98:78:73:95:43:e7:93:0a:b7:ef: 0e:cd:84:3a:e0:78:14:9a:69:a4:44:45:5a:4b:ad:1c:a5:9b: fb:cb:1e:a2:53:8b:6c:0e:20:bc:58:76:7e:3a:34:59:23:ef: 74:58:03:a8:f6:ea:b5:c2:21:c6:7b:43:d0:c3:11:5f:9f:05: 9a:90:61:04:5a:f2:a3:06:89:4d:27:8f:26:31:ab:d2:0b:f8: 1b:8a:d1:8a:97:57:d2:e6:4e:ce:b4:75:4e:fb:80:72:ce:8a: 3e:10:24:e9:3a:6b:19:bf:2a:fa:91:d3:64:95:69:43:99:8f: 0c:b0:15:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUxMTA1MDAxODQ2WhcNMjUxMTEyMDAxODQ2WjAYMRYwFAYD VQQDEw02OTBhOTdlNi0zZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWmtShihQvuE+fj0C+Mjoh+zoSUfCuMg/m73e1gD1ABpA8L4/EuULART2hur 7QnYxhUrXZbZViXGg/lr/gebqzpxdBf4l4GSo5SlMhsPltiWq5o+iL9OKwm85diW CNeFKPrIoi6yfODgdVqH/piwfSph0eK1WkNeOKXuzSDi2HnHTnyNlv4WHYRa7Akd Y+8q/p1Wa5tozGthmP8P6yIMh5Ghi1e9bCOPJlN3R4FmJH5YXXL8mBdopGVpPrD/ 5yqgK6PZZ9hcm3GBrE7DvGwTAmsc5ijkoN2ZHl7qyUD6UJN+n9kho4eOghdKTXXF +kBlNGK7Kob3kHekaFnIuigGDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe4ePmC tdsehbFi5ggXkGErjT3/MB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6NLjz8ELFJ3PvnaM1cRS4livS+dcNwRJUPHRi6YNWPWRSVT7BNkDv J1Xd1fGVzF/YsX2lH6Er6R2SFfN9ShqB5wEZf0hmfjfZi5ZsF9cSut8PGBsVr3CT 7gsJoMBdOf5AwNgKT/Gf7U6XqwbcwP6Zd6DcNkETd+EDXokIj3W2eFF6/a/CvJh4 c5VD55MKt+8OzYQ64HgUmmmkREVaS60cpZv7yx6iU4tsDiC8WHZ+OjRZI+90WAOo 9uq1wiHGe0PQwxFfnwWakGEEWvKjBolNJ48mMavSC/gbitGKl1fS5k7OtHVO+4By zoo+ECTpOmsZvyr6kdNklWlDmY8MsBUO -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:04 2025 by rpki-client