$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json) Hash identifier: kFy68b7himJuK3DClrrJvSSWOV5RCQxvPejaci8pKag= Subject key identifier: D7:3B:95:ED:9F:23:07:49:53:6D:B4:07:99:B1:13:46:B8:2C:05:B0 Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft Manifest number: 07E2 Signing time: Tue 04 Nov 2025 21:14:05 +0000 Manifest this update: Tue 04 Nov 2025 21:14:04 +0000 Manifest next update: Tue 11 Nov 2025 21:14:04 +0000 Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: Wwqor1GenVAMVwEkT1M+3KGlgSxs38z+c36RrZEQWg0=) 2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Validity Not Before: Nov 4 21:14:04 2025 GMT Not After : Nov 11 21:14:04 2025 GMT Subject: CN=690a6c9c-75d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:76:32:f0:60:43:e7:40:d0:52:b8:47:8b: 52:8f:f4:91:58:b1:f3:0e:55:83:00:1a:30:79:1e: bb:77:f4:0c:27:4f:ae:d9:3e:e3:51:8b:55:f1:b1: 91:86:12:18:3d:72:82:64:26:30:15:13:dd:d3:a2: d8:a5:9a:46:cf:7f:e6:40:2a:ed:c2:d6:ab:4b:c8: ff:bf:ee:ac:d8:10:7b:9b:8c:16:f9:13:72:be:4d: d9:38:cb:55:93:e4:3b:ac:f1:5b:f1:5d:d4:06:b8: 54:e8:7e:cd:74:51:07:b4:db:e4:d1:99:ac:c5:67: ec:1c:86:64:66:24:53:fa:82:1f:9c:7a:18:75:68: 7d:68:f0:81:34:71:8b:eb:f5:8c:a7:4d:9d:26:1c: 46:d2:c8:a4:6f:ce:60:bf:a1:19:a2:d6:da:2c:3b: ef:8a:74:72:10:5f:32:68:14:a5:79:af:39:a6:28: 16:14:99:1f:94:a3:39:b8:fc:d2:31:0e:05:89:b0: 26:c7:b3:4d:fc:3c:6f:9d:bc:ac:d9:81:a3:7a:d1: 6c:a8:6b:4a:ab:20:0e:20:02:03:da:85:7c:63:63: 20:25:95:9b:7c:1c:4e:86:b0:ad:59:b7:56:da:21: 0b:79:25:8c:e1:1b:e8:82:b7:39:d1:8d:4d:75:a9: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:95:ED:9F:23:07:49:53:6D:B4:07:99:B1:13:46:B8:2C:05:B0 X509v3 Authority Key Identifier: keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:de:1f:a3:3a:13:6f:bf:d3:9f:11:52:1f:74:ed:35:6a:75: ee:ca:ec:9f:3f:cc:9a:13:eb:08:46:16:70:fc:fb:11:70:c1: a1:dd:84:b9:cd:a5:1b:85:9d:60:af:d5:3c:e5:a6:c5:d6:c8: e6:87:fb:b7:00:17:3e:b6:a5:3f:04:88:ee:8b:cd:56:0f:bd: cb:bc:49:b5:b8:8f:f3:e2:1a:99:02:bb:cc:ed:f6:ab:d8:13: 89:39:f4:25:8e:18:11:0f:34:33:2a:8e:6a:f9:d7:5d:c1:11: 9a:db:df:c2:eb:07:68:e9:95:44:5d:2f:11:8c:b9:3c:32:f1: f8:b1:d1:c8:63:d6:18:c2:1e:97:56:54:d7:08:08:7f:0a:72: 14:46:d9:de:0e:4a:ce:6d:7c:56:f2:09:98:52:88:d5:44:3b: 68:df:4e:2f:37:ac:f3:cf:4a:22:90:9a:83:1c:6b:1b:2f:39: f6:d0:5d:10:4d:c1:d1:7a:fd:36:59:d3:55:91:4d:21:8e:48: f2:b7:c4:e9:5d:c0:d3:be:25:4e:2d:58:9e:ab:d5:d6:64:9d: 3e:df:8d:52:7c:89:8a:07:5d:20:d1:5b:1e:1b:bb:fe:5b:75: 07:96:5a:7c:bd:8e:ad:3a:16:78:38:c4:6a:35:98:56:d2:ea: e1:b4:5c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5 MDM4NTU4NkUwHhcNMjUxMTA0MjExNDA0WhcNMjUxMTExMjExNDA0WjAYMRYwFAYD VQQDEw02OTBhNmM5Yy03NWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlB2MvBgQ+dA0FK4R4tSj/SRWLHzDlWDABoweR67d/QMJ0+u2T7jUYtV8bGR hhIYPXKCZCYwFRPd06LYpZpGz3/mQCrtwtarS8j/v+6s2BB7m4wW+RNyvk3ZOMtV k+Q7rPFb8V3UBrhU6H7NdFEHtNvk0ZmsxWfsHIZkZiRT+oIfnHoYdWh9aPCBNHGL 6/WMp02dJhxG0sikb85gv6EZotbaLDvvinRyEF8yaBSlea85pigWFJkflKM5uPzS MQ4FibAmx7NN/Dxvnbys2YGjetFsqGtKqyAOIAID2oV8Y2MgJZWbfBxOhrCtWbdW 2iELeSWM4Rvogrc50Y1NdaldpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNc7le2f IwdJU220B5mxE0a4LAWwMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2 UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+3h+jOhNvv9OfEVIfdO01anXuyuyfP8yaE+sIRhZw/PsRcMGh3YS5 zaUbhZ1gr9U85abF1sjmh/u3ABc+tqU/BIjui81WD73LvEm1uI/z4hqZArvM7far 2BOJOfQljhgRDzQzKo5q+dddwRGa29/C6wdo6ZVEXS8RjLk8MvH4sdHIY9YYwh6X VlTXCAh/CnIURtneDkrObXxW8gmYUojVRDto304vN6zzz0oikJqDHGsbLzn20F0Q TcHRev02WdNVkU0hjkjyt8TpXcDTviVOLVieq9XWZJ0+341SfImKB10g0VseG7v+ W3UHllp8vY6tOhZ4OMRqNZhW0urhtFw9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:11 2025 by rpki-client