$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: YRVAcNc/cwiz9z/9Dll8jveaJBR4FOezyUj3ZN1+5ik= Subject key identifier: 82:3C:2F:BD:BF:30:6D:A9:66:80:6B:99:15:1F:C3:76:FE:0B:DD:A0 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0BD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0BD2 Signing time: Tue 04 Nov 2025 18:59:28 +0000 Manifest this update: Tue 04 Nov 2025 18:59:27 +0000 Manifest next update: Tue 11 Nov 2025 18:59:27 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: nRY6hoEmVt2xde18pJqg6g4/o7QHj7qS6eQUVUkbFmM=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3032 (0xbd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Nov 4 18:59:27 2025 GMT Not After : Nov 11 18:59:27 2025 GMT Subject: CN=690a4d10-6b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:6a:39:8f:d8:07:23:e2:18:a8:57:81:66: 83:a1:0e:37:c0:66:9d:23:02:77:c9:17:80:0e:83: f1:60:a6:f9:e8:ac:8e:a3:1b:cd:7b:d1:a8:d4:3d: f2:3e:ab:a1:35:f4:ff:0b:35:79:26:7d:c1:e3:2b: 4f:d5:fe:76:75:a0:f1:94:d3:13:e5:42:d0:f8:43: a7:b0:eb:34:11:5a:e3:f0:0f:98:52:ba:04:0b:f6: e4:04:b3:aa:c2:f6:da:e2:bf:18:09:34:73:22:de: 36:cb:f4:16:60:0e:e8:52:d9:e3:09:de:44:64:90: 50:67:8b:fc:02:34:e1:b6:a3:d9:53:23:91:fa:f5: 8c:7b:51:6b:5a:56:65:b4:34:dc:da:a7:b8:07:c1: ad:50:90:8c:f1:b3:f8:04:ae:74:b7:7b:d5:1e:5c: 0e:de:03:98:4b:87:41:41:6b:6a:1e:06:35:29:4b: 15:29:da:40:78:80:bb:bc:30:cc:46:b1:14:79:44: 4f:0b:77:66:e0:7e:b3:a7:48:2b:cb:ab:78:d3:8f: 18:7f:ed:0f:aa:49:be:a0:19:a2:a1:37:f1:f5:f5: 10:60:20:16:4f:8d:6f:32:60:f4:74:ac:87:a8:25: e8:58:d5:dd:32:52:a8:2e:80:c6:1f:37:72:4d:87: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:2F:BD:BF:30:6D:A9:66:80:6B:99:15:1F:C3:76:FE:0B:DD:A0 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0a:c8:6d:3a:39:76:e0:a6:fb:84:fe:86:81:94:f1:a0:02: 61:fb:c6:74:a2:54:9b:ef:80:39:24:36:7b:bc:58:cb:a2:ea: 47:c3:d0:2c:c8:58:c9:26:da:e4:c4:fb:b1:3a:d2:68:ca:a9: d9:54:da:b5:a3:54:a8:d3:94:dc:4b:29:6e:89:72:4e:73:ca: d6:61:04:e1:a1:bc:cc:12:6d:a0:1c:e3:6e:2d:87:08:57:0c: 13:dd:58:4b:fb:e2:cf:60:78:50:1d:02:22:7f:1b:0b:2a:df: 84:e5:fc:50:91:72:4f:42:92:52:7e:82:cb:f7:e1:86:7a:22: 89:38:36:96:24:85:01:5f:27:fc:b2:f8:cb:e3:5b:dd:52:92: 0b:34:0a:6b:d1:da:ab:c4:72:0d:85:bd:2d:9c:d5:86:e3:05: cd:1b:9a:47:bb:d0:01:7a:ab:25:16:61:ed:d7:3b:11:74:99: 07:5e:d1:58:80:eb:76:c3:4e:1d:b8:a2:3a:85:6f:b9:3a:e7: 85:2d:19:e0:34:cf:c5:35:d6:5a:c4:ed:7b:5b:80:4f:b6:d0: d0:63:80:65:d9:e3:23:f8:c0:4c:1e:31:47:98:01:12:e6:b5: 90:f1:d7:7a:64:2c:c2:84:12:63:70:5b:a3:21:01:a4:fc:ba: d4:69:50:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUxMTA0MTg1OTI3WhcNMjUxMTExMTg1OTI3WjAYMRYwFAYD VQQDEw02OTBhNGQxMC02YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzktqOY/YByPiGKhXgWaDoQ43wGadIwJ3yReADoPxYKb56KyOoxvNe9Go1D3y PquhNfT/CzV5Jn3B4ytP1f52daDxlNMT5ULQ+EOnsOs0EVrj8A+YUroEC/bkBLOq wvba4r8YCTRzIt42y/QWYA7oUtnjCd5EZJBQZ4v8AjThtqPZUyOR+vWMe1FrWlZl tDTc2qe4B8GtUJCM8bP4BK50t3vVHlwO3gOYS4dBQWtqHgY1KUsVKdpAeIC7vDDM RrEUeURPC3dm4H6zp0gry6t4048Yf+0Pqkm+oBmioTfx9fUQYCAWT41vMmD0dKyH qCXoWNXdMlKoLoDGHzdyTYf1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFII8L72/ MG2pZoBrmRUfw3b+C92gMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOCshtOjl24Kb7hP6GgZTxoAJh+8Z0olSb74A5JDZ7vFjLoupHw9As yFjJJtrkxPuxOtJoyqnZVNq1o1So05TcSyluiXJOc8rWYQThobzMEm2gHONuLYcI VwwT3VhL++LPYHhQHQIifxsLKt+E5fxQkXJPQpJSfoLL9+GGeiKJODaWJIUBXyf8 svjL41vdUpILNApr0dqrxHINhb0tnNWG4wXNG5pHu9ABeqslFmHt1zsRdJkHXtFY gOt2w04duKI6hW+5OueFLRngNM/FNdZaxO17W4BPttDQY4Bl2eMj+MBMHjFHmAES 5rWQ8dd6ZCzChBJjcFujIQGk/LrUaVBf -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:19 2025 by rpki-client