$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: lGxfXWAKxoYxklVbAvoCOOg/5zRKkm/Phkj7436JMWo= Subject key identifier: 53:7A:13:93:74:75:EA:C6:F0:68:BF:9B:F7:40:EC:A7:35:D4:C7:57 Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 34D7 Signing time: Tue 04 Nov 2025 15:11:29 +0000 Manifest this update: Tue 04 Nov 2025 15:11:28 +0000 Manifest next update: Tue 11 Nov 2025 15:11:28 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: qTITkG73faw89ihXJYgQyt6f9WHOrzr/ioVGVl8Rgks=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Nov 4 15:11:28 2025 GMT Not After : Nov 11 15:11:28 2025 GMT Subject: CN=690a17a1-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:06:e1:b5:25:a7:0c:9a:04:fd:c1:df:87: 74:33:a4:a6:c1:fa:22:51:90:4c:bc:3d:23:a3:4e: a1:06:e1:2b:f2:98:9f:96:61:80:f3:56:af:30:c6: a3:56:b6:34:5d:dc:f6:6b:89:a9:80:cb:ea:2a:f4: 67:96:e1:f4:2c:36:e2:7a:96:d6:1a:0f:8e:99:fa: d8:b0:1c:d4:e0:8b:a7:45:6a:ab:30:65:90:1d:41: 4d:30:fa:6c:18:02:89:b0:9f:b9:b4:4f:e0:83:29: b2:09:86:dd:29:35:28:a1:39:27:0c:c5:20:26:f0: b1:bb:b3:6a:5d:1e:a6:48:0e:de:15:a0:8f:b8:71: c0:56:81:ee:76:4c:2e:2d:2b:a9:af:d6:d3:9b:56: 00:24:2b:df:9c:96:a7:d7:7f:2c:10:34:06:3c:27: bd:17:0c:64:56:f0:11:9a:f3:e7:09:e4:b5:15:f5: b8:fc:0e:80:ed:a6:13:5b:17:a2:aa:b2:db:f1:f9: 7f:bb:24:ad:e9:c6:f0:90:bd:fa:d0:e1:c8:f0:79: 02:20:d3:f9:c3:21:f0:03:a1:06:18:66:78:4d:5a: a3:90:31:ee:40:c4:03:45:3d:70:f6:da:6b:ab:46: 04:67:55:21:74:36:57:80:8e:3a:94:29:5c:4c:75: 12:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7A:13:93:74:75:EA:C6:F0:68:BF:9B:F7:40:EC:A7:35:D4:C7:57 X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:36:93:a9:e6:d6:91:f4:78:9e:84:25:97:9c:c3:d5:6b:46: 4b:2b:18:b9:eb:e5:a9:5d:b2:83:72:e9:57:b1:e1:f4:fd:13: 16:96:1a:49:8b:38:60:2e:c0:d3:ef:fe:5b:03:79:97:d0:60: 69:5b:31:c8:09:34:9f:31:22:17:c8:b4:69:21:ff:27:81:aa: c4:44:d3:1b:54:af:66:29:99:7b:d7:22:2d:d3:2c:5a:98:e2: 6c:59:b6:d4:85:4f:51:40:dd:bd:ba:26:7e:7d:85:9a:8f:90: 75:7f:79:4f:fe:e8:a9:cc:5b:4e:3d:c0:b7:71:c2:73:ff:6b: 5f:03:80:a5:ce:38:f5:34:45:d1:e1:4f:31:96:d3:4c:a3:de: 34:cf:49:89:a8:09:20:6d:c9:3f:60:0c:ce:2a:67:d0:ed:d1: f3:85:90:ed:27:92:cd:a6:a2:c6:7e:94:67:a7:c6:ea:e9:05: 49:22:86:18:b9:3c:ae:57:89:cb:eb:20:2e:bb:33:88:6c:88: 5d:25:c8:cb:f8:51:8d:54:95:d3:21:d9:cf:72:f5:49:09:58: 6d:80:d2:e3:50:98:a1:3e:1f:56:4d:76:e1:3e:b2:aa:1e:7a: 52:42:b9:ed:fa:ea:82:2f:3d:0c:79:36:83:79:38:b5:03:57: 93:8b:67:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUxMTA0MTUxMTI4WhcNMjUxMTExMTUxMTI4WjAYMRYwFAYD VQQDEw02OTBhMTdhMS1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+4G4bUlpwyaBP3B34d0M6SmwfoiUZBMvD0jo06hBuEr8piflmGA81avMMaj VrY0Xdz2a4mpgMvqKvRnluH0LDbiepbWGg+OmfrYsBzU4IunRWqrMGWQHUFNMPps GAKJsJ+5tE/ggymyCYbdKTUooTknDMUgJvCxu7NqXR6mSA7eFaCPuHHAVoHudkwu LSupr9bTm1YAJCvfnJan138sEDQGPCe9FwxkVvARmvPnCeS1FfW4/A6A7aYTWxei qrLb8fl/uySt6cbwkL360OHI8HkCINP5wyHwA6EGGGZ4TVqjkDHuQMQDRT1w9tpr q0YEZ1UhdDZXgI46lClcTHUScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN6E5N0 derG8Gi/m/dA7Kc11MdXMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNpOp5taR9HiehCWXnMPVa0ZLKxi56+WpXbKDculXseH0/RMWlhpJ izhgLsDT7/5bA3mX0GBpWzHICTSfMSIXyLRpIf8ngarERNMbVK9mKZl71yIt0yxa mOJsWbbUhU9RQN29uiZ+fYWaj5B1f3lP/uipzFtOPcC3ccJz/2tfA4Clzjj1NEXR 4U8xltNMo940z0mJqAkgbck/YAzOKmfQ7dHzhZDtJ5LNpqLGfpRnp8bq6QVJIoYY uTyuV4nL6yAuuzOIbIhdJcjL+FGNVJXTIdnPcvVJCVhtgNLjUJihPh9WTXbhPrKq HnpSQrnt+uqCLz0MeTaDeTi1A1eTi2cR -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:33 2025 by rpki-client