$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: KLu32GE5XM2JtyXnORyDxn8CXrvRLV3i5iIHNXS4IZQ= Subject key identifier: BA:EF:84:41:BD:EB:F9:67:80:01:90:D2:AB:C0:E1:25:C4:67:8A:65 Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 06A7 Signing time: Tue 04 Nov 2025 22:24:19 +0000 Manifest this update: Tue 04 Nov 2025 22:24:18 +0000 Manifest next update: Tue 11 Nov 2025 22:24:18 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: 498GKbTsRIiuy/Jm4X/++TjkrnVT98eFu8z4O6sBfwY=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Nov 4 22:24:18 2025 GMT Not After : Nov 11 22:24:18 2025 GMT Subject: CN=690a7d13-cf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:92:dd:98:5d:42:36:70:70:7c:a0:d4:13: 18:70:f0:a3:f2:1a:71:66:38:87:5d:1a:22:9d:6d: 0b:d8:cb:10:8c:e4:b6:90:4d:e5:05:8f:9a:24:56: 30:8b:5b:31:d7:00:11:fb:8a:71:56:0b:cb:2c:48: b4:38:10:bb:08:28:5c:7b:2c:20:d1:3a:7f:d1:9e: b4:19:d1:94:21:e4:dc:cc:93:07:d3:9d:53:91:70: 61:08:3a:41:28:f4:9d:c5:d2:60:9b:c5:73:09:39: 08:ee:45:fb:ec:85:8e:92:6e:31:f6:03:5c:cb:38: 21:0c:16:17:95:8e:7b:15:f8:c9:88:f8:58:47:03: 4f:66:9c:f7:2b:8f:ba:fa:f4:22:e6:a6:81:dd:51: 2e:2e:46:31:c1:74:27:25:72:92:62:d9:f7:e9:e0: 14:48:02:f9:24:be:04:a7:42:9f:1e:b8:37:b8:34: ad:89:b2:a7:d7:69:4d:0e:cc:bf:6b:d5:e7:c8:f9: 9e:db:f3:68:9a:3b:4e:8c:67:19:23:b8:da:4c:7a: 55:e0:1d:d3:03:7e:54:74:b1:37:75:33:2f:21:77: 66:54:f1:ac:4a:7d:01:7c:be:3f:48:24:ab:c9:e4: 2a:c6:c0:8c:92:a4:af:8d:39:8e:0e:a1:f7:af:7c: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:84:41:BD:EB:F9:67:80:01:90:D2:AB:C0:E1:25:C4:67:8A:65 X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f2:37:3c:34:55:7a:d2:cd:b1:88:40:6d:ab:46:33:4f:bc: 6b:1c:73:40:62:a3:23:9a:99:c5:fa:8e:a0:c8:ec:ec:65:e9: 4a:19:08:9e:a3:6c:a1:d2:f2:8f:0d:8c:c2:78:42:ba:db:b1: bf:87:79:b8:fc:43:fc:b1:9f:35:3d:d2:aa:2d:1a:4a:80:b9: 45:14:e7:d3:bf:bc:73:a4:03:c3:13:f3:61:2c:bb:6c:44:31: 99:51:85:10:7d:cd:3a:c6:60:02:43:1d:1a:61:3f:3f:47:8b: 09:36:0d:f8:40:19:3c:c2:ec:d6:58:43:71:9d:8c:83:bb:06: 75:85:15:d8:0d:b1:f7:2a:d5:85:52:45:f0:d7:8f:78:29:78: 5f:0c:6b:d9:d3:37:ba:8c:f7:3a:0b:c1:a8:87:3d:73:1e:bb: ba:ef:ef:84:a4:20:9e:8a:e3:da:d6:04:c2:bf:cf:5e:15:a4: 8c:a2:ea:ab:d7:0d:42:bc:54:ab:38:04:f0:98:6f:e2:8a:2f: de:a8:04:45:c2:ff:ab:54:72:11:be:01:32:b0:0c:58:75:42: 0f:af:fa:7b:57:1a:d6:4d:e7:71:c6:62:3c:cc:0b:16:0c:eb: 34:be:d4:87:e4:86:00:f3:0b:cb:de:9f:c1:25:94:4f:3f:5d: 96:12:f6:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUxMTA0MjIyNDE4WhcNMjUxMTExMjIyNDE4WjAYMRYwFAYD VQQDEw02OTBhN2QxMy1jZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU+S3ZhdQjZwcHyg1BMYcPCj8hpxZjiHXRoinW0L2MsQjOS2kE3lBY+aJFYw i1sx1wAR+4pxVgvLLEi0OBC7CChceywg0Tp/0Z60GdGUIeTczJMH051TkXBhCDpB KPSdxdJgm8VzCTkI7kX77IWOkm4x9gNcyzghDBYXlY57FfjJiPhYRwNPZpz3K4+6 +vQi5qaB3VEuLkYxwXQnJXKSYtn36eAUSAL5JL4Ep0KfHrg3uDStibKn12lNDsy/ a9XnyPme2/NomjtOjGcZI7jaTHpV4B3TA35UdLE3dTMvIXdmVPGsSn0BfL4/SCSr yeQqxsCMkqSvjTmODqH3r3zzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrvhEG9 6/lngAGQ0qvA4SXEZ4plMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA88jc8NFV60s2xiEBtq0YzT7xrHHNAYqMjmpnF+o6gyOzsZelKGQie o2yh0vKPDYzCeEK627G/h3m4/EP8sZ81PdKqLRpKgLlFFOfTv7xzpAPDE/NhLLts RDGZUYUQfc06xmACQx0aYT8/R4sJNg34QBk8wuzWWENxnYyDuwZ1hRXYDbH3KtWF UkXw1494KXhfDGvZ0ze6jPc6C8Gohz1zHru67++EpCCeiuPa1gTCv89eFaSMouqr 1w1CvFSrOATwmG/iii/eqARFwv+rVHIRvgEysAxYdUIPr/p7VxrWTedxxmI8zAsW DOs0vtSH5IYA8wvL3p/BJZRPP12WEvbi -----END CERTIFICATE-----Generated at Wed Nov 5 21:43:54 2025 by rpki-client