$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft File: fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json) Hash identifier: q2PjFBhoHi9p4dG7JdKhtC0/yrVw5ylZUw8Iq7tCvZI= Subject key identifier: E4:6E:C6:CA:8F:1A:5D:E9:BC:D5:41:09:6E:72:0C:B2:06:CB:F7:1D Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 10E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft Manifest number: 10C1 Signing time: Tue 04 Nov 2025 17:27:02 +0000 Manifest this update: Tue 04 Nov 2025 17:27:01 +0000 Manifest next update: Tue 11 Nov 2025 17:27:01 +0000 Files and hashes: 1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: pQC95i6wvA9a7OU1MihW09Ak2sgTssljJNpmKIYoUQQ=) 2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: sps6OZoL5QmmM3ZpPmWyZ0iMnHwS3c4js0f2ItWVO3c=) 3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4329 (0x10e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Nov 4 17:27:01 2025 GMT Not After : Nov 11 17:27:01 2025 GMT Subject: CN=690a3766-c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:a2:85:4a:a9:58:20:29:49:8b:3f:82:21: b2:e4:f7:2a:0e:8a:36:21:64:32:57:93:c7:1c:01: d2:28:96:be:17:d9:73:15:24:fc:2d:67:6c:b8:c9: c7:f4:ab:09:4e:cb:87:48:10:4c:42:0d:12:ec:5c: 17:fb:5f:64:58:0c:da:f6:ac:ee:3f:17:13:65:c6: ab:9b:28:59:ba:54:c6:28:78:2b:fc:2f:01:07:e1: f4:f2:3d:86:0d:27:86:d5:b0:33:0d:27:a0:ad:fb: 46:ec:17:49:fa:5f:ee:d2:8d:56:f4:e6:10:79:2f: 4d:15:e4:e2:7e:f8:53:6c:8d:81:4b:58:bb:0b:2b: 42:48:01:3e:35:3f:66:d2:50:6c:6c:b7:1f:d5:03: 07:88:c9:dc:d5:53:e8:d6:fd:61:63:cf:e5:ff:c0: 25:15:c0:28:0c:ed:7e:30:2d:79:ba:2a:24:56:66: 66:5c:07:72:a7:27:f0:54:2c:5c:32:2a:fd:5a:64: a1:09:25:96:4a:6e:a2:24:4f:b3:e6:2f:16:1b:4e: 13:d3:fa:e2:99:56:8c:18:0c:49:94:20:76:64:dd: 6d:bb:32:d9:bf:c4:f1:79:ec:95:56:8b:b2:d4:4b: 09:f0:ac:d7:43:ae:0b:43:a5:3c:28:ec:ea:08:50: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6E:C6:CA:8F:1A:5D:E9:BC:D5:41:09:6E:72:0C:B2:06:CB:F7:1D X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:5a:b2:3c:6a:f8:81:74:d8:c6:9c:53:2f:a6:cc:33:13:15: 42:5b:3b:70:09:1a:b9:89:fa:d4:d1:0a:30:f9:dc:04:ff:e6: e1:5b:c3:6c:0a:a4:40:7d:f0:45:f3:46:df:22:a2:16:30:2f: 74:b9:d7:ca:27:15:02:2e:7d:50:79:a1:31:49:a3:b7:2c:68: ff:b8:f7:86:2f:ff:c7:fc:d3:62:af:97:18:e1:d0:d1:84:5b: 99:8e:05:0f:44:b6:5b:2e:76:2f:53:5c:ed:e1:1d:bb:85:52: 6f:3b:fc:a3:5e:90:a5:7d:1b:b2:64:cf:7e:71:9c:0f:ba:ec: b5:02:b4:12:4d:d3:55:f3:e0:8d:ba:50:33:79:09:14:88:d8: 0a:ce:55:3a:f7:2c:68:d7:9a:17:b1:2d:1f:69:dc:9f:0a:f3: b7:fc:fc:96:6a:4d:65:c2:54:e1:92:15:3a:a0:1a:22:25:7c: 1c:c2:d4:f8:ed:27:c5:31:71:6c:bc:ea:18:4d:53:40:29:09: 10:1c:4c:5c:ed:5e:42:74:6b:77:5e:f2:9b:6e:05:33:3e:3d: 27:a4:ec:0b:6e:1e:67:2b:ed:ac:82:ce:76:20:bb:aa:f6:11: 1a:4f:03:3e:09:a7:a9:bc:02:bc:16:e8:0f:d7:fc:e5:12:9a: 53:c6:6e:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjUxMTA0MTcyNzAxWhcNMjUxMTExMTcyNzAxWjAYMRYwFAYD VQQDEw02OTBhMzc2Ni1jNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cOihUqpWCApSYs/giGy5PcqDoo2IWQyV5PHHAHSKJa+F9lzFST8LWdsuMnH 9KsJTsuHSBBMQg0S7FwX+19kWAza9qzuPxcTZcarmyhZulTGKHgr/C8BB+H08j2G DSeG1bAzDSegrftG7BdJ+l/u0o1W9OYQeS9NFeTifvhTbI2BS1i7CytCSAE+NT9m 0lBsbLcf1QMHiMnc1VPo1v1hY8/l/8AlFcAoDO1+MC15uiokVmZmXAdypyfwVCxc Mir9WmShCSWWSm6iJE+z5i8WG04T0/rimVaMGAxJlCB2ZN1tuzLZv8TxeeyVVouy 1EsJ8KzXQ64LQ6U8KOzqCFDahQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORuxsqP Gl3pvNVBCW5yDLIGy/cdMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkRENi9EMzYyQTFDQTNCMzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2 eDhWTGpFUnBpMGpvMThhYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWrI8aviBdNjGnFMvpswzExVCWztwCRq5ifrU0Qow+dwE/+bhW8Ns CqRAffBF80bfIqIWMC90udfKJxUCLn1QeaExSaO3LGj/uPeGL//H/NNir5cY4dDR hFuZjgUPRLZbLnYvU1zt4R27hVJvO/yjXpClfRuyZM9+cZwPuuy1ArQSTdNV8+CN ulAzeQkUiNgKzlU69yxo15oXsS0fadyfCvO3/PyWak1lwlThkhU6oBoiJXwcwtT4 7SfFMXFsvOoYTVNAKQkQHExc7V5CdGt3XvKbbgUzPj0npOwLbh5nK+2sgs52ILuq 9hEaTwM+CaepvAK8FugP1/zlEppTxm5+ -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:22 2025 by rpki-client