$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: 3Oj+md4e0dm7Wl1k7prP7ssW+G3AAuOXUJmtVX1udl0= Subject key identifier: 40:52:90:36:E7:1C:A4:5B:FB:19:A0:21:FD:4F:A1:C6:E9:CC:5A:FE Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 34E7 Signing time: Tue 04 Nov 2025 14:22:22 +0000 Manifest this update: Tue 04 Nov 2025 14:22:21 +0000 Manifest next update: Tue 11 Nov 2025 14:22:21 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: OevwsSZPUYzM+p6v9xiiG4se8YG/o+0bDHGdzC6ma0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Validity Not Before: Nov 4 14:22:21 2025 GMT Not After : Nov 11 14:22:21 2025 GMT Subject: CN=690a0c1e-d609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:d8:42:07:a3:66:00:8b:00:6b:42:9e:14: 6a:97:29:14:3c:a6:19:a3:ad:bf:a3:80:cd:61:a8: 53:ee:10:a1:66:de:10:4b:7e:9b:17:65:b9:0a:a6: 9e:96:c5:4e:cd:fd:b2:29:9d:71:c7:44:95:4d:51: 1b:6e:1b:d0:d8:fc:97:50:24:de:61:5e:d5:cb:8d: e4:d4:41:ce:2a:98:f9:b6:45:32:67:9e:39:cf:65: 8b:1b:f9:49:3b:d7:c6:db:74:d8:7c:0d:98:9b:c8: 6c:0e:34:b0:06:ea:09:e8:c8:26:09:b1:7d:b4:59: 20:d0:08:90:02:1f:19:3f:6c:84:19:57:11:76:e6: 41:3a:4b:78:61:91:99:d1:12:07:1c:ef:f2:9b:91: 3b:6b:64:00:f5:36:86:da:6a:cb:2c:bd:3f:f6:d6: 13:47:46:21:9f:40:34:db:65:ef:1e:97:9f:99:99: 55:0c:fb:8e:bb:39:a7:25:d3:3d:34:91:f0:75:9c: 96:65:8d:26:97:0a:bf:d4:02:84:16:58:1d:28:70: 30:ca:8d:be:e0:7d:ba:fc:30:ef:ac:6b:62:96:5c: 3c:fe:80:af:42:d2:42:8a:6a:62:b6:73:cb:d1:f5: c1:f7:96:3a:1f:a0:0c:4c:ab:b3:1b:47:59:bf:7f: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:90:36:E7:1C:A4:5B:FB:19:A0:21:FD:4F:A1:C6:E9:CC:5A:FE X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f3:1b:15:11:d3:c2:ba:4f:e8:0e:a8:70:b1:a4:d9:6b:a2: 5f:a7:03:cc:86:53:9a:25:7b:10:d2:f2:2e:09:78:7d:70:48: 9c:69:85:bf:b2:e9:21:ed:3c:f4:74:55:d1:33:19:da:1c:8f: 7e:52:93:db:8b:9f:54:05:ca:00:44:d7:6a:78:73:87:45:a8: 6e:74:7b:a7:1f:71:31:89:04:18:70:e5:65:eb:51:2e:bf:1a: 0f:17:ba:bd:94:83:1c:ed:87:fe:d0:93:1e:04:15:9c:db:c2: 72:45:93:84:f5:16:66:19:43:b0:98:17:4e:84:ac:c4:03:2a: d6:00:67:30:c1:5e:f2:89:b1:73:18:61:d9:9d:e3:30:25:50: 06:2f:65:31:0c:2e:d2:85:e2:eb:fd:cf:46:f4:82:8a:ac:75: 9b:d3:46:b3:60:61:68:c1:3a:29:8f:98:6e:1d:fb:cd:40:1b: 71:a4:a9:91:e8:be:df:68:01:58:9c:85:93:38:4f:67:03:41: e4:8d:b7:e7:04:07:37:8f:81:92:4c:f0:b0:22:8d:00:c3:12: 0a:0e:e0:3d:38:b8:4e:25:88:a0:8b:c6:78:8f:d8:b7:59:43: b3:4f:a5:fc:01:ca:9a:d0:46:7f:84:89:8d:15:10:46:77:1b: f6:93:b3:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjUxMTA0MTQyMjIxWhcNMjUxMTExMTQyMjIxWjAYMRYwFAYD VQQDEw02OTBhMGMxZS1kNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNfYQgejZgCLAGtCnhRqlykUPKYZo62/o4DNYahT7hChZt4QS36bF2W5Cqae lsVOzf2yKZ1xx0SVTVEbbhvQ2PyXUCTeYV7Vy43k1EHOKpj5tkUyZ545z2WLG/lJ O9fG23TYfA2Ym8hsDjSwBuoJ6MgmCbF9tFkg0AiQAh8ZP2yEGVcRduZBOkt4YZGZ 0RIHHO/ym5E7a2QA9TaG2mrLLL0/9tYTR0Yhn0A022XvHpefmZlVDPuOuzmnJdM9 NJHwdZyWZY0mlwq/1AKEFlgdKHAwyo2+4H26/DDvrGtillw8/oCvQtJCimpitnPL 0fXB95Y6H6AMTKuzG0dZv3/SowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBSkDbn HKRb+xmgIf1PocbpzFr+MB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr8xsVEdPCuk/oDqhwsaTZa6JfpwPMhlOaJXsQ0vIuCXh9cEicaYW/ sukh7Tz0dFXRMxnaHI9+UpPbi59UBcoARNdqeHOHRahudHunH3ExiQQYcOVl61Eu vxoPF7q9lIMc7Yf+0JMeBBWc28JyRZOE9RZmGUOwmBdOhKzEAyrWAGcwwV7yibFz GGHZneMwJVAGL2UxDC7SheLr/c9G9IKKrHWb00azYGFowTopj5huHfvNQBtxpKmR 6L7faAFYnIWTOE9nA0HkjbfnBAc3j4GSTPCwIo0AwxIKDuA9OLhOJYigi8Z4j9i3 WUOzT6X8Acqa0EZ/hImNFRBGdxv2k7Nl -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:50 2025 by rpki-client