$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: TqkmEHJF9DWrMaRafltbpfMLNyEC0n83t3WzuHpqyKU= Subject key identifier: 1F:4C:FF:EC:E2:0E:F6:69:F9:55:69:DA:C1:72:F9:0F:94:DF:75:99 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: 3B Signing time: Wed 05 Nov 2025 07:44:29 +0000 Manifest this update: Wed 05 Nov 2025 07:44:28 +0000 Manifest next update: Wed 12 Nov 2025 07:44:28 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: yicPFZi/X2YnSLh+l2qr6ZXRr6WG+HYkiifWsJqPUgE=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Nov 5 07:44:28 2025 GMT Not After : Nov 12 07:44:28 2025 GMT Subject: CN=690b005c-c888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:80:c8:3d:64:47:8c:f3:c5:af:56:0b:56:2b: f7:d6:ba:e8:c4:0e:91:78:f5:31:05:ea:87:b4:3a: b2:27:5f:2a:89:1e:aa:c7:aa:0d:a5:3a:7d:7e:e1: ef:97:21:8a:18:ab:0f:df:04:f7:0a:29:af:3c:31: 64:c5:4b:1b:87:3d:9d:18:e9:51:a0:69:bb:ca:85: 9d:59:c8:b9:27:dc:aa:5b:b6:ee:fb:70:8d:b6:35: e7:ec:28:a2:8d:05:f7:43:1b:f5:eb:56:29:8e:b1: 46:c3:87:a7:ad:b5:b9:ea:db:ff:26:7a:b2:bc:03: 74:06:6b:a4:ff:6f:6b:29:fc:be:38:fa:96:ce:89: d5:09:96:09:7d:b8:3a:fa:d5:2e:51:2f:fc:27:66: 90:e1:4b:68:87:09:95:70:ec:b8:30:eb:99:a3:ec: 01:70:b2:10:90:4b:eb:39:fc:02:ae:fd:c5:7a:01: aa:c2:df:9e:36:83:9a:1d:8c:3f:cc:49:7e:73:2d: e6:31:d8:e0:f0:32:12:2d:6f:ae:dc:4d:56:e0:4c: 19:73:d1:5c:27:a2:d2:70:30:61:92:1b:e6:6e:44: 8c:a1:90:b3:09:df:f8:2c:1a:86:e9:f4:b3:47:a5: 8d:74:21:35:c8:a9:09:57:b7:41:35:5a:37:ea:5a: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:FF:EC:E2:0E:F6:69:F9:55:69:DA:C1:72:F9:0F:94:DF:75:99 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:99:a4:c9:7c:79:80:b9:90:d3:d3:c6:7d:6f:db:7b:6b:6e: ba:72:9f:c3:98:ac:d8:4c:a1:0c:e1:d9:ec:d5:f4:47:87:b1: 76:61:83:04:73:9f:62:48:78:69:1e:c3:96:fd:00:6a:78:00: 85:0b:20:08:a4:bd:fc:38:22:62:b0:78:76:c2:99:c9:53:a3: b9:8a:78:e8:65:7a:2c:30:c7:32:fb:a8:6c:8c:9d:b9:0f:f7: 52:ca:b1:c7:93:76:82:4b:2e:65:38:14:1a:b1:83:8f:cf:e3: 87:de:6d:cc:8b:81:e9:c7:f7:0f:77:2a:6b:78:b1:20:d2:f4: 31:95:69:e9:af:e7:61:c1:b6:c6:cc:dd:c9:d1:a3:f5:4d:bc: 44:f5:f1:38:59:4d:ff:43:63:66:fa:f7:1d:ce:50:87:58:c3: 4b:9a:9c:ab:11:d1:ff:50:99:49:73:d1:22:ca:a2:40:e0:4b: 25:a6:b0:c7:79:0a:39:7d:1d:fb:fe:43:c8:0f:1b:39:3e:62: 21:e3:6d:f6:18:a1:61:ac:9d:df:1c:9b:0a:39:82:8a:73:9d: 21:21:86:e7:5a:6d:06:83:80:ca:53:5a:0d:f2:97:58:dd:7a: eb:d1:52:75:4e:d5:05:3a:5b:29:5b:a9:c4:b2:cd:f8:26:a8: d0:d9:79:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNTExMDUwNzQ0MjhaFw0yNTExMTIwNzQ0MjhaMBgxFjAUBgNV BAMTDTY5MGIwMDVjLWM4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD9gMg9ZEeM88WvVgtWK/fWuujEDpF49TEF6oe0OrInXyqJHqrHqg2lOn1+4e+X IYoYqw/fBPcKKa88MWTFSxuHPZ0Y6VGgabvKhZ1ZyLkn3Kpbtu77cI22NefsKKKN BfdDG/XrVimOsUbDh6ettbnq2/8merK8A3QGa6T/b2sp/L44+pbOidUJlgl9uDr6 1S5RL/wnZpDhS2iHCZVw7Lgw65mj7AFwshCQS+s5/AKu/cV6AarC3542g5odjD/M SX5zLeYx2ODwMhItb67cTVbgTBlz0VwnotJwMGGSG+ZuRIyhkLMJ3/gsGobp9LNH pY10ITXIqQlXt0E1WjfqWvqPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH0z/7OIO 9mn5VWnawXL5D5TfdZkwHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RUE0LzI2NERDRjFDNjNBRjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNO LVJVRkZhckFKaXp0WFBQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeZpMl8eYC5kNPTxn1v23trbrpyn8OYrNhMoQzh2ezV9EeHsXZhgwRz n2JIeGkew5b9AGp4AIULIAikvfw4ImKweHbCmclTo7mKeOhleiwwxzL7qGyMnbkP 91LKsceTdoJLLmU4FBqxg4/P44febcyLgenH9w93Kmt4sSDS9DGVaemv52HBtsbM 3cnRo/VNvET18ThZTf9DY2b69x3OUIdYw0uanKsR0f9QmUlz0SLKokDgSyWmsMd5 Cjl9Hfv+Q8gPGzk+YiHjbfYYoWGsnd8cmwo5gopznSEhhudabQaDgMpTWg3yl1jd euvRUnVO1QU6WylbqcSyzfgmqNDZebk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:06 2025 by rpki-client