$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft File: HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json) Hash identifier: fPm9Fjzj8bm8iyw4Cqxba2qqitq7VTsb2LLfsDfALKA= Subject key identifier: 0D:2B:86:7C:C0:0F:45:79:D3:4C:E3:21:CF:6B:E4:14:E5:4E:1F:0C Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 18D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft Manifest number: 18B8 Signing time: Tue 04 Nov 2025 16:34:05 +0000 Manifest this update: Tue 04 Nov 2025 16:34:04 +0000 Manifest next update: Tue 11 Nov 2025 16:34:04 +0000 Files and hashes: 1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: JDno6ypC7u2q29V6XSTo43bSN6NAkRTSZWe5mmIGOlg=) 2: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A=) 3: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: KFzJJioj1JdEaM7mj8QrDhe5X+FxHdHyz1gyMqXEJCI=) 4: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: /Xd8kuiaq1Q5eF4PAbm/NjtYZtrHCHK1WvQKBeYKntw=) 5: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: Frk606k9XfomHW0x/AMLebHr43yDTcWmfdXiLloTTiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6356 (0x18d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: Nov 4 16:34:04 2025 GMT Not After : Nov 11 16:34:04 2025 GMT Subject: CN=690a2afc-1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:6a:ac:c0:59:5c:08:25:49:9f:ae:ce:a7: fa:84:11:6b:59:33:b0:48:c5:10:f0:23:ed:0b:e8: 8c:c1:91:d7:2d:5b:1a:f1:2a:f6:af:45:d3:f2:00: 7f:4f:49:08:f7:75:40:87:1e:bd:e5:ee:fb:2b:24: e1:97:ee:5c:2e:10:7f:0a:2a:47:38:f3:d0:86:7d: ad:c1:a9:b4:49:99:4f:29:b4:c7:ac:c0:5e:91:df: 8a:ec:e1:e6:3b:cf:8e:47:46:3f:76:5d:66:ce:4e: 96:1f:05:40:a2:06:22:ca:cc:49:df:26:39:7a:6d: f9:ab:0d:1c:81:00:bb:9e:2f:1a:7f:72:2a:3c:61: e4:3e:5a:dd:98:a3:bb:49:a1:31:e5:6e:bb:fb:7b: 8a:2a:64:0f:88:ab:29:40:76:63:ee:be:48:92:77: 57:77:0d:4f:7f:3b:b0:0b:b8:a2:25:77:f4:6b:b2: 8c:51:7f:cb:e0:17:92:2c:1a:40:06:4f:82:0f:d9: 02:99:03:8c:77:65:86:b8:70:2c:4c:f3:53:82:b8: 30:05:48:45:f6:aa:04:61:71:31:c2:87:3d:d7:1a: 0d:45:12:1f:3d:f5:2b:0e:83:0d:99:9f:43:75:42: 66:cc:9f:50:6b:94:7b:0f:cc:11:cb:51:4e:0e:2d: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:86:7C:C0:0F:45:79:D3:4C:E3:21:CF:6B:E4:14:E5:4E:1F:0C X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:f9:5a:08:73:f3:4d:0a:6b:c5:90:df:07:d4:af:3e:2f: 0f:ac:6e:b6:05:e4:dc:ed:25:b8:d2:af:08:96:c4:89:65:08: 76:61:d0:3c:aa:f6:a3:01:43:bc:37:2c:05:7f:37:a5:ab:86: 45:21:84:d0:b4:64:d5:48:92:7d:13:31:2d:c6:5b:c2:6e:99: 99:b1:68:18:ec:be:8e:ce:c3:24:3b:72:af:a9:99:0b:71:25: 36:38:49:08:ce:0e:3a:3d:30:bf:92:ff:54:80:e8:9f:bd:80: 95:bc:85:06:74:bc:91:6e:68:a0:d8:b4:d3:3a:f9:5c:81:5c: 6f:67:45:88:96:47:7f:79:58:21:7d:57:5a:a7:bf:0d:0d:d1: 31:96:b8:dd:06:7e:01:b5:18:35:70:19:43:ac:08:6f:a0:84: 18:62:ba:e6:55:55:09:12:85:b1:98:3a:c4:3d:37:5e:bb:10: 84:78:6b:a6:06:50:be:72:21:0d:81:23:b6:a1:53:8f:17:8b: c8:ab:90:8a:1a:52:11:a1:60:e1:e4:c4:22:ab:be:8f:fd:76: 58:fe:7f:d5:67:31:c1:4a:d2:7a:5f:5b:73:15:cf:e1:39:30: 06:7e:f8:82:d8:33:a8:8d:09:78:9b:39:7d:fa:7e:42:fd:cd: 72:82:c6:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUxMTA0MTYzNDA0WhcNMjUxMTExMTYzNDA0WjAYMRYwFAYD VQQDEw02OTBhMmFmYy0xODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s5qrMBZXAglSZ+uzqf6hBFrWTOwSMUQ8CPtC+iMwZHXLVsa8Sr2r0XT8gB/ T0kI93VAhx695e77KyThl+5cLhB/CipHOPPQhn2twam0SZlPKbTHrMBekd+K7OHm O8+OR0Y/dl1mzk6WHwVAogYiysxJ3yY5em35qw0cgQC7ni8af3IqPGHkPlrdmKO7 SaEx5W67+3uKKmQPiKspQHZj7r5IkndXdw1PfzuwC7iiJXf0a7KMUX/L4BeSLBpA Bk+CD9kCmQOMd2WGuHAsTPNTgrgwBUhF9qoEYXExwoc91xoNRRIfPfUrDoMNmZ9D dUJmzJ9Qa5R7D8wRy1FODi2hPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0rhnzA D0V500zjIc9r5BTlTh8MMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Mzk1My8xMjJEOEQyOEE0OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNW c3cyY3NpMWZpRTBYeFdtYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkEvlaCHPzTQprxZDfB9SvPi8PrG62BeTc7SW40q8IlsSJZQh2YdA8 qvajAUO8NywFfzelq4ZFIYTQtGTVSJJ9EzEtxlvCbpmZsWgY7L6OzsMkO3KvqZkL cSU2OEkIzg46PTC/kv9UgOifvYCVvIUGdLyRbmig2LTTOvlcgVxvZ0WIlkd/eVgh fVdap78NDdExlrjdBn4BtRg1cBlDrAhvoIQYYrrmVVUJEoWxmDrEPTdeuxCEeGum BlC+ciENgSO2oVOPF4vIq5CKGlIRoWDh5MQiq76P/XZY/n/VZzHBStJ6X1tzFc/h OTAGfviC2DOojQl4mzl9+n5C/c1ygsbg -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:38 2025 by rpki-client