$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: KfKuUPXe0JC5I+Lt93sij/urJxYDzukljw/1rUNI/do= Subject key identifier: FD:59:75:5D:A0:56:EA:B5:9C:47:90:E6:AA:82:A7:96:B4:C3:68:E6 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 039B Signing time: Wed 05 Nov 2025 00:53:57 +0000 Manifest this update: Wed 05 Nov 2025 00:53:56 +0000 Manifest next update: Wed 12 Nov 2025 00:53:56 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: 2Z7Q1oTRKlEWxbPhyGXjYisgDzPyUBleXVdfYhwJXoA=) 2: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: TGtBMLjAQZMZJ1khWN0b0rXwvGwxupeZB+kuz4CTJXg=) 3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: L2Pd8jB/i+ABeqpyLFwMSDyc47P9cj5jXqAEMCEAC1Q=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: 7hic6UONO0B455KhpL0YJRnN6Tw5oyNjErH5A+IJRxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Nov 5 00:53:56 2025 GMT Not After : Nov 12 00:53:56 2025 GMT Subject: CN=690aa024-f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:b5:5a:c3:38:8c:82:1c:4a:b8:78:7e:e3: c5:34:d7:aa:91:a5:b0:bc:2e:12:8c:7f:31:b5:5c: 2e:31:26:36:fd:23:10:a2:df:f9:08:43:e0:1a:d5: 36:c3:ee:a6:d7:2d:e8:5a:7e:14:f6:94:71:74:60: 78:bf:d5:90:e6:94:fd:85:db:b6:e4:33:7e:74:25: d5:33:f7:93:25:33:7a:c2:c8:3a:85:b5:43:03:90: 7b:76:c3:fe:fb:a8:39:d1:00:fc:6e:23:d7:8a:bc: d1:db:cc:5d:68:52:f9:85:79:37:55:5c:95:de:40: 53:98:c9:49:4f:2d:3b:ec:10:f1:b4:38:4d:fe:97: fc:2c:52:51:12:5d:cc:8c:b1:63:e4:d3:41:e7:da: 6d:d5:b6:4e:06:da:fd:c4:23:04:70:f4:30:20:b0: 09:60:d3:6b:87:71:ff:e8:89:27:41:76:0a:a5:44: 47:3c:33:8f:15:c0:59:2c:fd:bf:35:d6:3e:06:f0: 0f:e3:6e:53:b5:78:f2:c1:26:80:7a:30:53:82:f7: b7:aa:c5:30:e4:fb:45:74:bc:67:46:32:6a:9d:b8: e5:8f:9a:10:f5:0f:6a:00:17:ba:3f:d9:38:fd:39: 88:cd:d6:4d:81:92:28:a3:4b:db:46:f8:28:92:ee: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:75:5D:A0:56:EA:B5:9C:47:90:E6:AA:82:A7:96:B4:C3:68:E6 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2b:10:d0:84:96:bd:f9:72:02:0f:ca:c4:d3:31:35:04:dc: 46:9c:cd:29:a7:03:9d:35:fb:46:80:35:b7:ce:61:1a:04:2c: c0:51:51:f2:99:36:52:38:e0:75:fd:e2:d0:19:89:74:0a:5b: 89:18:f8:68:a4:40:e3:c1:54:f8:e1:10:57:2d:9f:12:3f:b6: de:9b:10:1e:1e:fe:64:bb:4c:c7:83:7c:aa:ef:d7:30:99:a9: 4f:1f:c0:07:8e:4d:1c:af:84:51:cc:d3:68:b9:05:54:db:c1: b3:bd:01:aa:84:b2:48:cf:82:0a:e2:cb:46:0b:dd:c2:1e:26: eb:ed:d5:05:75:d0:af:2d:b5:ed:3f:9a:9b:5b:22:29:f4:b5: da:09:32:7f:51:7d:a0:21:72:e3:fa:86:e1:69:f6:c7:8f:6d: 7c:c9:64:14:ba:ba:51:87:b0:b3:a7:eb:7a:6b:fb:07:5b:a8: 7a:82:4e:3b:9e:5d:93:84:95:17:c9:0f:f2:3c:84:85:f0:d7: 17:34:42:92:2b:af:36:2c:91:71:83:6d:a5:2a:f4:39:4f:1b: 5b:d7:a6:a9:17:f0:5c:61:a9:00:03:2d:b2:b1:16:ee:fc:5b: 9b:b2:b0:9e:74:30:9f:8d:70:2b:ad:81:85:24:98:94:fb:da: c0:7f:01:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjUxMTA1MDA1MzU2WhcNMjUxMTEyMDA1MzU2WjAYMRYwFAYD VQQDEw02OTBhYTAyNC1mM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2se1WsM4jIIcSrh4fuPFNNeqkaWwvC4SjH8xtVwuMSY2/SMQot/5CEPgGtU2 w+6m1y3oWn4U9pRxdGB4v9WQ5pT9hdu25DN+dCXVM/eTJTN6wsg6hbVDA5B7dsP+ +6g50QD8biPXirzR28xdaFL5hXk3VVyV3kBTmMlJTy077BDxtDhN/pf8LFJREl3M jLFj5NNB59pt1bZOBtr9xCMEcPQwILAJYNNrh3H/6IknQXYKpURHPDOPFcBZLP2/ NdY+BvAP425TtXjywSaAejBTgve3qsUw5PtFdLxnRjJqnbjlj5oQ9Q9qABe6P9k4 /TmIzdZNgZIoo0vbRvgoku5Y7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1ZdV2g Vuq1nEeQ5qqCp5a0w2jmMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfKxDQhJa9+XICD8rE0zE1BNxGnM0ppwOdNftGgDW3zmEaBCzAUVHy mTZSOOB1/eLQGYl0CluJGPhopEDjwVT44RBXLZ8SP7bemxAeHv5ku0zHg3yq79cw malPH8AHjk0cr4RRzNNouQVU28GzvQGqhLJIz4IK4stGC93CHibr7dUFddCvLbXt P5qbWyIp9LXaCTJ/UX2gIXLj+obhafbHj218yWQUurpRh7Czp+t6a/sHW6h6gk47 nl2ThJUXyQ/yPISF8NcXNEKSK682LJFxg22lKvQ5Txtb16apF/BcYakAAy2ysRbu /FubsrCedDCfjXArrYGFJJiU+9rAfwFz -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:13 2025 by rpki-client