$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft File: 276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json) Hash identifier: 7L/BJoWothlYZKGgqhdRggKML6yVzhb1e3IPrbsrwhc= Subject key identifier: CD:B1:CD:70:7A:9E:D4:F0:82:E3:AE:0D:78:88:59:71:18:9C:32:00 Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft Manifest number: 07B1 Signing time: Tue 04 Nov 2025 21:29:01 +0000 Manifest this update: Tue 04 Nov 2025 21:29:01 +0000 Manifest next update: Tue 11 Nov 2025 21:29:01 +0000 Files and hashes: 1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: 5yej/ABhTdek8ncbHlvFUBYUmnTNqA4RaN+mQxdBtBs=) 2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: Nov 4 21:29:01 2025 GMT Not After : Nov 11 21:29:01 2025 GMT Subject: CN=690a701d-424a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:82:d0:2d:0a:d9:2f:5f:fa:3f:aa:d0:04: e3:5d:44:36:34:0e:5d:c6:54:2f:a2:0f:38:77:65: bf:2a:8f:83:fb:39:d8:45:b0:4c:f4:a1:17:e0:94: 15:c8:ad:90:43:66:42:98:7d:2f:8e:a7:b0:22:86: e8:78:be:ef:9a:70:42:d5:f4:d3:bd:00:68:55:c9: 0b:31:08:c2:2b:4f:db:31:87:be:42:85:f4:f4:98: 15:09:3b:91:99:a5:d0:8a:1e:59:62:1d:df:6e:68: aa:4f:c2:70:cc:04:48:5a:cb:62:7c:98:98:0d:31: fb:79:55:40:a2:54:91:c0:33:33:f4:7b:77:74:cf: 93:1c:e4:49:a1:32:bb:c4:a5:f9:b6:e4:98:bc:e8: 1c:e8:2d:77:9d:4c:57:bb:73:84:69:1c:ef:27:32: 5b:36:3d:5a:4a:9b:ed:14:c5:66:40:fd:00:32:a5: 62:84:1c:3b:a1:5f:90:d1:55:fe:af:d5:0c:c1:43: 50:74:26:da:49:d5:6a:e0:c9:a1:a1:e5:07:59:33: c1:89:a4:fd:5c:97:95:30:dd:65:24:f0:93:50:18: 61:89:90:6a:52:59:5a:0e:f8:72:28:34:c3:41:a3: d7:f8:30:91:d1:7f:2e:80:d6:0a:48:29:f3:f4:25: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B1:CD:70:7A:9E:D4:F0:82:E3:AE:0D:78:88:59:71:18:9C:32:00 X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:b1:f5:15:0a:84:19:fd:c1:f3:7f:86:bf:65:da:2f:fa:a5: 16:c1:36:a3:1b:53:99:fb:1a:53:30:96:7d:a6:52:9c:01:2a: 6f:24:28:51:ce:5b:e4:da:0b:4d:ec:0a:79:e4:3b:a8:9e:a3: 07:01:9d:da:40:2d:33:1c:23:1e:c5:45:a0:94:bd:d7:43:82: 2b:6b:74:79:16:5e:8a:15:3a:e2:09:74:64:f2:52:24:b5:56: e4:5c:fe:88:c5:70:4c:08:fe:68:01:33:fa:9a:04:c7:1a:15: 4a:37:e2:53:29:57:e5:b3:1d:7f:51:8d:52:d7:60:06:a7:2b: 71:d0:93:50:be:7f:48:53:8d:fc:8d:3a:6f:94:81:8e:ef:d7: 00:b9:d5:97:3e:ac:d0:ce:3a:1c:5c:53:88:83:77:a2:71:60: 06:46:3a:4a:aa:90:eb:2c:c8:7e:10:1b:d8:f9:96:96:58:c5: a8:d8:05:1b:3c:d6:77:17:bf:71:0c:af:21:cf:eb:e9:b6:3b: e7:fb:19:5f:81:dd:05:f0:95:cd:0b:16:53:60:81:96:d4:79: b3:ee:0a:11:1d:4c:3b:c2:a2:5d:a1:98:93:c6:fa:37:a4:b0: 87:51:69:f1:66:dd:44:23:f2:22:ed:10:fb:dc:2e:d3:e1:28: 8f:cd:4c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjUxMTA0MjEyOTAxWhcNMjUxMTExMjEyOTAxWjAYMRYwFAYD VQQDEw02OTBhNzAxZC00MjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuiC0C0K2S9f+j+q0ATjXUQ2NA5dxlQvog84d2W/Ko+D+znYRbBM9KEX4JQV yK2QQ2ZCmH0vjqewIoboeL7vmnBC1fTTvQBoVckLMQjCK0/bMYe+QoX09JgVCTuR maXQih5ZYh3fbmiqT8JwzARIWstifJiYDTH7eVVAolSRwDMz9Ht3dM+THORJoTK7 xKX5tuSYvOgc6C13nUxXu3OEaRzvJzJbNj1aSpvtFMVmQP0AMqVihBw7oV+Q0VX+ r9UMwUNQdCbaSdVq4MmhoeUHWTPBiaT9XJeVMN1lJPCTUBhhiZBqUllaDvhyKDTD QaPX+DCR0X8ugNYKSCnz9CWEYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2xzXB6 ntTwguOuDXiIWXEYnDIAMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqsfUVCoQZ/cHzf4a/Zdov+qUWwTajG1OZ+xpTMJZ9plKcASpvJChR zlvk2gtN7Ap55DuonqMHAZ3aQC0zHCMexUWglL3XQ4Ira3R5Fl6KFTriCXRk8lIk tVbkXP6IxXBMCP5oATP6mgTHGhVKN+JTKVflsx1/UY1S12AGpytx0JNQvn9IU438 jTpvlIGO79cAudWXPqzQzjocXFOIg3eicWAGRjpKqpDrLMh+EBvY+ZaWWMWo2AUb PNZ3F79xDK8hz+vptjvn+xlfgd0F8JXNCxZTYIGW1Hmz7goRHUw7wqJdoZiTxvo3 pLCHUWnxZt1EI/Ii7RD73C7T4SiPzUyH -----END CERTIFICATE-----Generated at Wed Nov 5 11:47:25 2025 by rpki-client