$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft File: hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json) Hash identifier: fpstr3GxTadBl/J0PBBAY0wuB2x94AWIQJyN6/vHOWs= Subject key identifier: 7A:15:B1:A6:82:CB:16:3E:2F:7D:AE:33:3C:D7:28:41:7A:6C:E0:38 Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft Manifest number: 06BB Signing time: Tue 04 Nov 2025 22:16:04 +0000 Manifest this update: Tue 04 Nov 2025 22:16:04 +0000 Manifest next update: Tue 11 Nov 2025 22:16:04 +0000 Files and hashes: 1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: HTIw2YFqUjqTWu60NlWoIVmU1L6rXC421o5KxcCCaRE=) 2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: nQ2JLGKaP47ih5m9qTo7j8aG05in8F4XWfknPmuOpgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Nov 4 22:16:04 2025 GMT Not After : Nov 11 22:16:04 2025 GMT Subject: CN=690a7b24-a398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:25:39:62:d7:fa:1c:1b:c3:90:36:9e:73: 7c:4d:5f:2e:3f:92:3c:d4:92:57:f6:88:4a:af:53: 69:91:b5:7e:05:cd:e1:9c:7d:c8:0e:71:43:e1:a0: 69:19:df:fa:d9:a8:da:b8:5a:c2:0e:31:59:65:74: 08:48:3c:11:0a:ae:9d:08:79:f8:b3:51:fc:33:4f: 6f:3e:1e:10:7e:43:4c:90:32:8e:e6:94:2d:77:d6: 4e:89:2e:50:2b:7f:b1:a7:a8:98:79:ec:c2:b4:c2: bb:84:a9:ad:7d:6e:ba:18:0a:3a:4a:64:ac:39:66: a9:a2:f6:07:1c:98:a5:08:d0:11:15:cf:68:d1:81: 69:e9:3c:74:23:e1:78:10:e8:83:0e:62:4a:f5:85: f6:60:f4:ca:01:4c:48:a2:40:15:5f:ba:53:47:a0: 2d:cf:31:8f:bb:81:59:16:dc:d2:9a:4d:c2:f7:14: e0:04:c9:d5:e4:8e:e0:c1:84:4d:46:e5:37:6b:23: 1a:f1:49:84:9c:72:37:cc:e1:06:d2:1c:59:1a:81: 60:fd:76:5b:fa:de:78:a1:4b:81:d5:a8:68:2e:dd: 92:1d:46:8c:62:23:d3:be:9a:1d:d5:d5:33:a7:2c: ce:5e:d3:0c:59:18:0a:08:a1:70:06:07:51:7a:59: 8f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:B1:A6:82:CB:16:3E:2F:7D:AE:33:3C:D7:28:41:7A:6C:E0:38 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9f:0d:1b:f0:1c:1e:db:e5:eb:9a:99:f5:5a:4d:c0:25:db: c4:92:bc:9a:7d:aa:0d:f6:3c:5d:16:37:1b:ad:97:8c:aa:0a: 29:33:cf:28:c3:a3:15:a7:78:aa:89:c0:4a:91:25:c3:19:8d: 86:e8:a1:ca:2f:e8:bc:5c:3b:2d:fe:52:93:d4:c2:11:44:64: ea:c8:95:4e:6d:73:de:f3:07:be:f4:4b:17:c3:d6:a7:2e:de: 02:bf:07:86:e9:52:2b:66:2f:99:79:c5:82:3c:ed:7d:00:36: ab:db:ad:aa:01:82:08:0e:8b:4e:43:8a:a3:a0:9f:b0:39:15: ec:7f:35:19:cf:ee:2b:24:b5:42:56:2f:08:ba:a2:b3:49:0e: 3d:77:47:b1:79:dc:9f:50:39:6a:5f:20:63:a9:1a:da:e7:c9: bf:3e:87:54:5e:ea:3e:cc:f0:f2:8b:07:ca:03:7a:6d:37:cf: 5c:ba:c2:f7:fb:8f:c9:a4:c9:94:31:5e:09:4b:39:d4:1d:99: 91:a7:53:04:f4:7e:b3:d1:79:4f:bf:e3:78:67:c1:66:2a:e0: c1:15:32:a1:02:f2:ee:3f:93:15:5e:5a:cc:e6:d5:34:0a:22: 6d:d0:c1:74:76:02:c0:37:02:e8:df:9c:7a:51:58:6b:67:6f: ef:1f:22:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjUxMTA0MjIxNjA0WhcNMjUxMTExMjIxNjA0WjAYMRYwFAYD VQQDEw02OTBhN2IyNC1hMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupAlOWLX+hwbw5A2nnN8TV8uP5I81JJX9ohKr1NpkbV+Bc3hnH3IDnFD4aBp Gd/62ajauFrCDjFZZXQISDwRCq6dCHn4s1H8M09vPh4QfkNMkDKO5pQtd9ZOiS5Q K3+xp6iYeezCtMK7hKmtfW66GAo6SmSsOWapovYHHJilCNARFc9o0YFp6Tx0I+F4 EOiDDmJK9YX2YPTKAUxIokAVX7pTR6AtzzGPu4FZFtzSmk3C9xTgBMnV5I7gwYRN RuU3ayMa8UmEnHI3zOEG0hxZGoFg/XZb+t54oUuB1ahoLt2SHUaMYiPTvpod1dUz pyzOXtMMWRgKCKFwBgdRelmP8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoVsaaC yxY+L32uMzzXKEF6bOA4MB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAnw0b8Bwe2+Xrmpn1Wk3AJdvEkryafaoN9jxdFjcbrZeMqgopM88o w6MVp3iqicBKkSXDGY2G6KHKL+i8XDst/lKT1MIRRGTqyJVObXPe8we+9EsXw9an Lt4CvweG6VIrZi+ZecWCPO19ADar262qAYIIDotOQ4qjoJ+wORXsfzUZz+4rJLVC Vi8IuqKzSQ49d0exedyfUDlqXyBjqRra58m/PodUXuo+zPDyiwfKA3ptN89cusL3 +4/JpMmUMV4JSznUHZmRp1ME9H6z0XlPv+N4Z8FmKuDBFTKhAvLuP5MVXlrM5tU0 CiJt0MF0dgLANwLo35x6UVhrZ2/vHyLq -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:41 2025 by rpki-client