$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft File: haOfEGRko23KJ0v8d_uvewMDh24.mft (raw, json) Hash identifier: z4w2MN8EUZRBk0yBzL61BPrFpkf5wAvqLOnbQ3Ta7ns= Subject key identifier: 10:A6:FF:FD:01:64:E9:BE:7D:08:8A:0B:95:A3:0F:D0:F2:FB:EB:91 Authority key identifier: 85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E Certificate issuer: /CN=A9131181/serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft Manifest number: 73 Signing time: Wed 05 Nov 2025 07:05:35 +0000 Manifest this update: Wed 05 Nov 2025 07:05:34 +0000 Manifest next update: Wed 12 Nov 2025 07:05:34 +0000 Files and hashes: 1: haOfEGRko23KJ0v8d_uvewMDh24.crl (hash: Gg1JMtYEPJAZalFvp6F+iDg3q+J9VH+y+CbwFELfZfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=85A39F106464A36DCA274BFC77FBAF7B0303876E Validity Not Before: Nov 5 07:05:34 2025 GMT Not After : Nov 12 07:05:34 2025 GMT Subject: CN=690af73e-d281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:2b:42:3a:23:01:c9:f5:33:26:5b:37:94: 87:0e:62:54:06:92:aa:55:34:c6:c4:58:69:9c:75: d4:d3:e1:2d:7a:12:92:22:7d:89:d9:37:9e:6b:d4: ce:0e:33:65:89:42:70:39:d1:b8:d1:46:37:dd:f8: df:c2:0c:40:de:c0:14:a1:29:16:bf:a2:9f:32:07: cf:d8:c0:f9:e7:87:17:0a:dd:3e:57:fd:4f:0c:b9: 60:9d:22:4f:51:92:08:e8:8b:e4:28:5b:d2:66:5e: a1:3c:fb:63:d1:5e:2f:a1:a6:92:41:e7:f5:44:0b: 1c:09:b0:e4:4b:b1:d1:4d:43:d6:f9:3c:d7:88:ad: 29:5d:e6:61:82:b8:15:89:37:91:79:83:f0:e9:e8: 78:31:ab:a6:c6:32:ec:76:64:ea:10:a3:b6:87:25: 64:77:bd:16:bc:cd:ad:9c:6c:6f:36:a6:83:ea:3d: ac:f4:5f:bd:68:ea:5a:13:04:fe:17:31:82:0f:6f: f0:7b:64:6d:4c:f4:8b:9c:32:3b:46:36:36:ff:c4: 40:03:21:d1:f6:77:15:57:d7:b0:fd:5d:19:0d:d8: e2:15:3a:be:a3:1f:cb:a9:7f:05:f0:8c:2a:8e:2c: a0:83:ba:76:c6:e0:3a:11:3e:d2:a9:12:d7:77:11: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:FF:FD:01:64:E9:BE:7D:08:8A:0B:95:A3:0F:D0:F2:FB:EB:91 X509v3 Authority Key Identifier: keyid:85:A3:9F:10:64:64:A3:6D:CA:27:4B:FC:77:FB:AF:7B:03:03:87:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/haOfEGRko23KJ0v8d_uvewMDh24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/B2E714620B7911F0BB99ED6AC4F9AE02/haOfEGRko23KJ0v8d_uvewMDh24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:d4:07:27:e5:8b:65:a5:07:3e:c7:f8:b1:e0:78:8e:fe: 39:c7:bd:41:27:f1:61:75:c5:6d:54:93:d2:b5:9e:2d:fd:8e: ca:d3:6f:b0:15:58:a3:e3:44:c5:98:86:7d:82:fc:ab:8a:d8: d1:ca:94:24:69:00:b0:b6:e4:76:55:6e:05:93:38:c2:c7:81: b9:13:17:ea:e8:5e:54:27:95:a3:cc:a7:0e:d5:13:63:7c:48: 3b:fa:e7:97:69:ae:45:97:30:d5:64:62:e3:75:42:03:f7:02: ac:98:7f:ba:cf:72:64:bd:c2:74:4c:0e:94:a9:78:ef:d4:50: 97:83:0f:f1:4e:3b:bd:d8:5f:69:c1:8f:29:87:35:dd:bd:18: eb:ba:30:97:d7:5f:e0:08:61:89:5b:e7:4f:ed:ef:19:46:0d: 44:28:da:b7:87:ab:a3:56:c8:eb:7a:7f:80:6d:df:76:5f:65: 26:40:49:b2:65:3f:92:a0:e0:69:47:87:90:69:c6:21:19:f5: 9e:d0:3f:62:c1:b2:c3:75:6d:0e:d3:1b:a3:c7:b2:ae:4a:47: d8:6e:95:5c:e1:fe:4a:37:1e:89:74:8d:bb:e6:09:20:0f:57: 51:54:7c:6f:93:4f:aa:0d:97:4c:15:9a:34:71:5a:55:5c:4a: 4f:0d:ff:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoODVBMzlGMTA2NDY0QTM2RENBMjc0QkZDNzdGQkFGN0Iw MzAzODc2RTAeFw0yNTExMDUwNzA1MzRaFw0yNTExMTIwNzA1MzRaMBgxFjAUBgNV BAMTDTY5MGFmNzNlLWQyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuhitCOiMByfUzJls3lIcOYlQGkqpVNMbEWGmcddTT4S16EpIifYnZN55r1M4O M2WJQnA50bjRRjfd+N/CDEDewBShKRa/op8yB8/YwPnnhxcK3T5X/U8MuWCdIk9R kgjoi+QoW9JmXqE8+2PRXi+hppJB5/VECxwJsORLsdFNQ9b5PNeIrSld5mGCuBWJ N5F5g/Dp6Hgxq6bGMux2ZOoQo7aHJWR3vRa8za2cbG82poPqPaz0X71o6loTBP4X MYIPb/B7ZG1M9IucMjtGNjb/xEADIdH2dxVX17D9XRkN2OIVOr6jH8upfwXwjCqO LKCDunbG4DoRPtKpEtd3Ee2RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEKb//QFk 6b59CIoLlaMP0PL765EwHwYDVR0jBBgwFoAUhaOfEGRko23KJ0v8d/uvewMDh24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0IyRTcxNDYyMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIzS0owdjhkX3V2ZXdNRGgy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGFPZkVHUmtvMjNLSjB2OGRfdXZld01EaDI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0IyRTcxNDYyMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL2hhT2ZFR1JrbzIz S0owdjhkX3V2ZXdNRGgyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQP1Acn5YtlpQc+x/ix4HiO/jnHvUEn8WF1xW1Uk9K1ni39jsrTb7AV WKPjRMWYhn2C/KuK2NHKlCRpALC25HZVbgWTOMLHgbkTF+roXlQnlaPMpw7VE2N8 SDv655dprkWXMNVkYuN1QgP3AqyYf7rPcmS9wnRMDpSpeO/UUJeDD/FOO73YX2nB jymHNd29GOu6MJfXX+AIYYlb50/t7xlGDUQo2reHq6NWyOt6f4Bt33ZfZSZASbJl P5Kg4GlHh5BpxiEZ9Z7QP2LBssN1bQ7TG6PHsq5KR9hulVzh/ko3Hol0jbvmCSAP V1FUfG+TT6oNl0wVmjRxWlVcSk8N/64= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:22 2025 by rpki-client