$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json) Hash identifier: yos4LBVHt+V9xCU77eZfFZVgFGD94+HLJfl729trhFk= Subject key identifier: 41:00:C7:49:29:98:17:96:03:32:8C:AF:08:3E:A7:8F:0F:51:D5:09 Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:43:38 +0000 Manifest this update: Wed 05 Nov 2025 07:43:37 +0000 Manifest next update: Wed 12 Nov 2025 07:43:37 +0000 Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: DjTxfN3LX70O+imvvT5kMRs9ews+YXMrBXqGeiHoT3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Validity Not Before: Nov 5 07:43:37 2025 GMT Not After : Nov 12 07:43:37 2025 GMT Subject: CN=690b0029-285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:6c:de:7d:80:6f:2c:c6:7f:0e:3d:a3:e4: 2b:5d:13:e4:12:d4:5d:10:70:56:d4:a4:07:1a:1d: 3a:14:1d:f4:c7:b5:dc:0b:61:35:50:bc:18:aa:0a: e2:59:8c:3a:76:3c:1d:03:c1:40:a0:ef:a6:88:cd: ab:dc:0c:8e:07:53:d2:45:ea:27:68:27:c2:03:01: 98:c6:88:d6:de:40:c6:57:cf:10:80:67:d4:68:8f: b4:d9:23:a8:d4:d7:62:79:1d:c4:ef:2f:e5:eb:c0: 85:fe:bc:6f:bd:f6:bb:8b:6f:e5:ac:93:f8:c5:07: 62:e6:0e:04:99:b5:6f:61:a3:a7:18:7c:31:ac:b1: 75:b6:6e:b7:6d:b0:f8:58:2e:70:84:76:6e:57:27: 32:2d:ef:b2:8c:27:c5:d1:3d:ac:d3:81:9d:2c:8e: cc:4a:5b:6a:e2:1b:ac:e4:5c:22:9d:0b:7d:7e:49: f9:86:1b:03:7d:d7:93:9e:7b:27:d7:12:3a:7a:68: 33:2b:c7:50:f2:d8:36:ad:55:3e:9b:b1:99:f4:f1: fe:f0:e7:9f:4c:e3:24:4a:bc:d9:8d:43:05:33:47: 9a:27:64:10:59:18:0a:0d:fa:0b:35:cb:63:c9:ec: 09:79:3b:57:c8:67:01:87:3d:53:15:98:ab:03:12: 7b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:00:C7:49:29:98:17:96:03:32:8C:AF:08:3E:A7:8F:0F:51:D5:09 X509v3 Authority Key Identifier: keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:f5:6d:68:46:be:1a:71:5f:59:34:26:5f:90:8f:d4:4f: e5:74:dc:d4:f6:4d:c8:30:d6:e2:fa:aa:39:da:1e:58:01:90: 7d:21:29:a6:c8:75:f3:9a:56:b1:d7:48:37:1b:73:c5:ad:b9: ad:48:74:fe:57:3b:d6:a5:4a:d3:da:61:9f:09:d2:be:75:99: 3f:56:06:e4:76:9b:ee:be:1b:c8:e5:00:59:09:d5:ba:42:42: 1a:6b:65:03:ca:6b:39:f4:cc:ec:1e:2e:88:62:4c:bd:6e:4f: a6:9e:ca:c0:60:15:a1:2f:1d:41:b0:6d:28:f8:1d:58:57:37: 82:52:1d:d9:61:04:e9:57:6c:8f:d8:9f:b7:cf:82:6d:89:1b: 82:a4:89:6f:3c:0d:1c:94:ed:b0:0e:3b:d5:78:cd:6a:a5:85: 46:27:f8:c7:66:91:b3:d9:70:af:3c:53:f4:42:a6:3d:f4:69: c4:e9:a2:6a:56:ed:44:9f:ad:bf:07:15:80:ef:2c:7c:7a:7f: 0d:e5:0c:b3:e8:92:e5:5e:8a:bb:02:4d:18:c5:24:cb:d9:a9: c4:04:2b:a5:9d:d5:8c:4e:9a:fc:fb:e8:e8:97:f2:33:a7:7e: 3c:51:47:f5:84:b8:36:ed:e3:62:44:87:97:44:54:50:34:2f: 36:cf:39:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoMUZEMjM4QTcwRUFDN0E2RkZDNkI5MEFCMzBDRUZCNzcz OTIxNkY0QTAeFw0yNTExMDUwNzQzMzdaFw0yNTExMTIwNzQzMzdaMBgxFjAUBgNV BAMTDTY5MGIwMDI5LTI4NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6r2zefYBvLMZ/Dj2j5CtdE+QS1F0QcFbUpAcaHToUHfTHtdwLYTVQvBiqCuJZ jDp2PB0DwUCg76aIzavcDI4HU9JF6idoJ8IDAZjGiNbeQMZXzxCAZ9Roj7TZI6jU 12J5HcTvL+XrwIX+vG+99ruLb+Wsk/jFB2LmDgSZtW9ho6cYfDGssXW2brdtsPhY LnCEdm5XJzIt77KMJ8XRPazTgZ0sjsxKW2riG6zkXCKdC31+SfmGGwN915OeeyfX Ejp6aDMrx1Dy2DatVT6bsZn08f7w559M4yRKvNmNQwUzR5onZBBZGAoN+gs1y2PJ 7Al5O1fIZwGHPVMVmKsDEnttAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQQDHSSmY F5YDMoyvCD6njw9R1QkwHwYDVR0jBBgwFoAUH9I4pw6sem/8a5CrMM77dzkhb0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzcwQzEwNzYwNjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1fOGE1Q3JNTTc3ZHpraGIw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDlJNHB3NnNlbV84YTVDck1NNzdkemtoYjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzcwQzEwNzYwNjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1f OGE1Q3JNTTc3ZHpraGIwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbF9W1oRr4acV9ZNCZfkI/UT+V03NT2Tcgw1uL6qjnaHlgBkH0hKabI dfOaVrHXSDcbc8Wtua1IdP5XO9alStPaYZ8J0r51mT9WBuR2m+6+G8jlAFkJ1bpC QhprZQPKazn0zOweLohiTL1uT6aeysBgFaEvHUGwbSj4HVhXN4JSHdlhBOlXbI/Y n7fPgm2JG4KkiW88DRyU7bAOO9V4zWqlhUYn+MdmkbPZcK88U/RCpj30acTpompW 7USfrb8HFYDvLHx6fw3lDLPokuVeirsCTRjFJMvZqcQEK6Wd1YxOmvz76OiX8jOn fjxRR/WEuDbt42JEh5dEVFA0LzbPOa0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:55 2025 by rpki-client