$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: dk/p1gRbzeOjYMGAR9meDstkreMSyqaSlLYh0H1sG80= Subject key identifier: 3A:AC:85:3E:18:28:5D:46:28:EC:34:45:05:D2:C8:19:67:66:6D:13 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 0444 Signing time: Wed 05 Nov 2025 00:20:25 +0000 Manifest this update: Wed 05 Nov 2025 00:20:24 +0000 Manifest next update: Wed 12 Nov 2025 00:20:24 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: kicAVMq0UlhOG54wmu+qQ+j+8h7+gcQTWJlOTLJCgvI=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: m7bVPzA+H6T0BPfqPAwWK53E3FJsQccTswfglW7TmvM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: Da11y9sKk3+3GED3RWDHgx+o3Zp2BSYGO+0sW2aJMEM=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: zk2dr+AUUcgcseaus5ZI0MyjJIW4D1il57/7c0zzcK4=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: rChmwH90SUuXyk+7yFwvc60l13VLAAHmVFzSZ22IXbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Nov 5 00:20:24 2025 GMT Not After : Nov 12 00:20:24 2025 GMT Subject: CN=690a9849-b040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:37:6b:e7:62:3b:83:dc:54:7c:f8:50:b1: 2e:10:32:95:53:bf:ec:27:4e:86:8a:d2:11:8f:8e: 76:ea:ff:76:1c:42:9c:65:66:62:28:20:32:b3:ef: d6:80:34:99:0d:87:a9:3e:b7:a2:e1:6d:a4:72:e2: d6:4e:a1:80:ff:cf:6d:ff:58:61:83:f8:26:4a:d5: bd:13:a3:b4:a2:cd:5a:f4:5f:e5:6a:37:ea:9c:57: ed:bc:1e:ea:aa:c2:b1:79:e7:42:7d:3e:2c:cb:ee: c7:44:d0:f9:09:a8:b4:ea:10:fc:4a:13:d9:15:cd: f9:59:24:36:fe:54:a3:f2:7e:a9:64:9e:a6:8c:cd: d4:bf:e0:de:1a:50:98:11:fa:68:1d:7d:ec:7c:d3: 51:45:27:99:16:85:f7:42:d6:c5:77:f3:c6:36:9f: 35:ac:04:14:23:91:53:54:be:4f:ce:91:38:aa:13: a9:98:43:d2:b3:4e:f9:1d:cb:5f:7c:8b:06:d1:b1: a6:1c:9c:a0:30:67:2a:7e:9c:04:45:8f:ab:63:6b: d0:d0:2a:0a:61:ac:8a:04:9c:cf:2d:44:29:43:b2: d0:7f:1e:23:07:7c:63:dd:d4:92:73:79:62:30:5d: 40:c1:80:e7:18:be:d6:6c:e1:40:42:21:3e:6a:9e: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:85:3E:18:28:5D:46:28:EC:34:45:05:D2:C8:19:67:66:6D:13 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:c2:c6:da:ae:40:72:b4:90:02:82:12:d9:83:a5:10:66: db:36:44:cf:73:65:00:13:03:8c:d2:0d:d6:77:09:bf:e3:d6: db:f6:95:54:cd:1f:b2:f5:44:36:7d:46:5a:8c:04:dd:6b:73: b5:42:08:51:c9:30:8b:44:a7:13:1a:d2:99:54:72:ff:9a:61: d6:cf:e0:e1:94:ff:d5:ab:bc:e4:fc:87:1e:87:e2:ed:2d:1e: 0d:f0:dc:7f:0f:05:8a:da:47:fa:42:13:38:0a:e3:7c:ab:30: ed:49:75:77:58:a3:14:e8:ff:0d:e0:8a:44:68:e5:af:97:f1: bd:16:48:40:ae:db:53:bf:5c:c5:a8:9c:4a:d1:6d:87:46:08: 14:54:b8:7e:84:68:eb:66:d7:db:cc:d7:4e:b1:94:3c:7b:8d: d8:45:ed:57:13:5a:4b:c1:72:a2:03:d6:10:a5:99:02:57:c5: c6:6a:e9:7d:f4:26:52:01:cb:b2:c6:ec:ab:64:37:bb:98:56: b9:45:93:44:85:f8:36:ba:b2:91:2e:b9:27:95:d6:70:21:b2: 95:b3:66:49:46:78:a5:de:d1:74:d8:42:fa:21:8a:1e:8a:a0: bd:41:5a:42:af:d9:23:40:bd:f1:ca:ad:28:0f:3a:1a:45:c9: 0b:4e:e8:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUxMTA1MDAyMDI0WhcNMjUxMTEyMDAyMDI0WjAYMRYwFAYD VQQDEw02OTBhOTg0OS1iMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzo3a+diO4PcVHz4ULEuEDKVU7/sJ06GitIRj4526v92HEKcZWZiKCAys+/W gDSZDYepPrei4W2kcuLWTqGA/89t/1hhg/gmStW9E6O0os1a9F/lajfqnFftvB7q qsKxeedCfT4sy+7HRND5Cai06hD8ShPZFc35WSQ2/lSj8n6pZJ6mjM3Uv+DeGlCY EfpoHX3sfNNRRSeZFoX3QtbFd/PGNp81rAQUI5FTVL5PzpE4qhOpmEPSs075Hctf fIsG0bGmHJygMGcqfpwERY+rY2vQ0CoKYayKBJzPLUQpQ7LQfx4jB3xj3dSSc3li MF1AwYDnGL7WbOFAQiE+ap6mDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqshT4Y KF1GKOw0RQXSyBlnZm0TMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd3MLG2q5AcrSQAoIS2YOlEGbbNkTPc2UAEwOM0g3Wdwm/49bb9pVU zR+y9UQ2fUZajATda3O1QghRyTCLRKcTGtKZVHL/mmHWz+DhlP/Vq7zk/Iceh+Lt LR4N8Nx/DwWK2kf6QhM4CuN8qzDtSXV3WKMU6P8N4IpEaOWvl/G9FkhArttTv1zF qJxK0W2HRggUVLh+hGjrZtfbzNdOsZQ8e43YRe1XE1pLwXKiA9YQpZkCV8XGaul9 9CZSAcuyxuyrZDe7mFa5RZNEhfg2urKRLrknldZwIbKVs2ZJRnil3tF02EL6IYoe iqC9QVpCr9kjQL3xyq0oDzoaRckLTuiP -----END CERTIFICATE-----Generated at Wed Nov 5 08:03:10 2025 by rpki-client