$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json) Hash identifier: 8J2TpLDnuSbvKNGfxUeQUWLwgfZh/b65XCdvwxW0LyQ= Subject key identifier: 14:00:7F:8C:4E:A7:AD:FC:0F:57:EE:8D:2C:48:10:17:0E:D5:FC:F1 Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 356B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft Manifest number: 3524 Signing time: Sun 02 Nov 2025 14:46:14 +0000 Manifest this update: Sun 02 Nov 2025 14:46:13 +0000 Manifest next update: Sun 09 Nov 2025 14:46:13 +0000 Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: qvutTpVN5/ZZnHF8zswmaMLXF8k0nYvdJmNeUpoC0mE=) 2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8=) 3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: sZVhikXu0+BgylCyd4weUDz3omEWpmI+GLV51J/cwuU=) 4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: q2ExykZAmfzp0xfcMOWOgSv2/3eS55YeYtvtqyJjJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13675 (0x356b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Nov 2 14:46:13 2025 GMT Not After : Nov 9 14:46:13 2025 GMT Subject: CN=69076eb6-e73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:71:10:a5:b6:06:97:2c:28:dd:e4:1d:a1: e3:1c:c8:71:3f:81:2c:74:05:b2:c7:08:b9:7c:22: 64:df:10:52:dc:5c:1a:08:55:47:1e:45:6e:dc:2f: 3b:6a:1a:96:99:c7:45:2b:16:cb:5f:f3:a6:e2:d2: 5a:ca:85:0c:95:81:61:9b:fc:7f:0f:09:6b:a4:27: 01:8c:5e:62:36:45:2f:81:19:f5:8e:a9:54:ef:5e: 93:50:f8:8e:b4:ba:cd:e0:d3:f5:f6:06:97:9b:61: b2:49:52:d7:f9:55:9c:9f:7f:dc:98:51:3f:19:aa: 42:c9:ca:e4:20:cd:6a:05:95:95:92:4f:dc:a7:d6: fc:67:32:4d:75:64:cb:76:f5:44:a6:b7:6b:c2:5d: 30:ad:91:59:6a:2b:a3:4e:d9:9e:5c:ec:c2:3c:51: 9a:9c:9b:af:c0:22:c4:0f:bd:87:aa:95:7c:72:fd: 70:34:d3:71:c5:dd:9a:ef:3a:6e:72:19:8f:65:c8: 8e:54:f8:4a:c8:a1:58:ae:68:59:b3:5b:b3:f0:93: 4d:68:5d:7e:9c:d8:a2:43:2a:11:e9:d8:f6:87:99: a4:fb:60:a7:d3:cf:7d:98:03:a1:7a:04:62:f6:d3: 4e:f5:9e:09:f9:0b:49:46:5e:52:06:71:11:50:81: f2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:7F:8C:4E:A7:AD:FC:0F:57:EE:8D:2C:48:10:17:0E:D5:FC:F1 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:aa:c1:20:e0:62:5f:bd:da:7f:8e:65:c5:e7:19:67:14:e5: c7:6b:7b:ee:8b:e6:be:49:95:b5:31:f7:9b:11:89:e0:04:88: 76:7a:2e:92:be:95:fe:ad:9b:81:4b:2c:75:8a:d4:c5:21:c1: 01:db:a5:a7:ef:77:aa:71:af:6d:eb:0d:a3:34:e0:58:81:04: 52:23:00:f1:cb:23:ec:6d:52:2d:80:51:9a:e1:cf:4e:56:54: a6:28:6d:05:c5:c2:21:9b:4d:92:4c:a6:d2:83:99:2c:05:3d: de:3b:7c:56:28:0f:7c:9c:7d:21:cf:b7:b6:2c:4d:22:75:19: 39:09:2f:6e:d2:e9:04:30:2c:ee:36:7b:c5:3b:bd:f1:75:d5: 38:0a:20:be:00:18:58:27:66:85:06:96:58:87:e6:36:17:89: da:60:6b:78:ac:a6:6b:47:7a:15:66:c4:34:49:cb:01:d7:5c: ee:69:4b:2c:ed:13:d1:c8:1c:86:ab:2e:c0:39:be:e3:44:a1: e8:83:c8:18:47:8f:c7:a9:b2:08:31:70:7b:0b:47:4d:6b:fd: b3:20:1f:7c:4d:2f:20:ef:16:b0:1e:90:90:2c:b4:3f:8f:62: 59:ba:60:31:b1:de:c5:0f:c2:eb:b1:3c:a3:a3:75:4c:0f:3e: 4a:c8:24:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUxMTAyMTQ0NjEzWhcNMjUxMTA5MTQ0NjEzWjAYMRYwFAYD VQQDEw02OTA3NmViNi1lNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/1xEKW2BpcsKN3kHaHjHMhxP4EsdAWyxwi5fCJk3xBS3FwaCFVHHkVu3C87 ahqWmcdFKxbLX/Om4tJayoUMlYFhm/x/DwlrpCcBjF5iNkUvgRn1jqlU716TUPiO tLrN4NP19gaXm2GySVLX+VWcn3/cmFE/GapCycrkIM1qBZWVkk/cp9b8ZzJNdWTL dvVEprdrwl0wrZFZaiujTtmeXOzCPFGanJuvwCLED72HqpV8cv1wNNNxxd2a7zpu chmPZciOVPhKyKFYrmhZs1uz8JNNaF1+nNiiQyoR6dj2h5mk+2Cn0899mAOhegRi 9tNO9Z4J+QtJRl5SBnERUIHyVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQAf4xO p638D1fujSxIEBcO1fzxMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03 TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsqsEg4GJfvdp/jmXF5xlnFOXHa3vui+a+SZW1MfebEYngBIh2ei6S vpX+rZuBSyx1itTFIcEB26Wn73eqca9t6w2jNOBYgQRSIwDxyyPsbVItgFGa4c9O VlSmKG0FxcIhm02STKbSg5ksBT3eO3xWKA98nH0hz7e2LE0idRk5CS9u0ukEMCzu NnvFO73xddU4CiC+ABhYJ2aFBpZYh+Y2F4naYGt4rKZrR3oVZsQ0ScsB11zuaUss 7RPRyByGqy7AOb7jRKHog8gYR4/HqbIIMXB7C0dNa/2zIB98TS8g7xawHpCQLLQ/ j2JZumAxsd7FD8LrsTyjo3VMDz5KyCTE -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:29 2025 by rpki-client