$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft File: 1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json) Hash identifier: pJ4mtq3gf9eolPhDqSO1FnZQpVzrntyCtzzVeCGoKXU= Subject key identifier: 82:AD:9F:2D:DB:72:99:FA:51:9E:03:9D:0A:3E:55:A0:B1:A7:08:BF Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 Certificate issuer: /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft Manifest number: 0B60 Signing time: Tue 04 Nov 2025 19:12:18 +0000 Manifest this update: Tue 04 Nov 2025 19:12:17 +0000 Manifest next update: Tue 11 Nov 2025 19:12:17 +0000 Files and hashes: 1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: VNvRaAQKgg1sBIn1J3GQQsJzzc1hVCGI3qDbaMvA7w8=) 2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: m3vliiEgyQOK9cLamk8Seg9r2MS0Thb0iCeLTBZTTaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Validity Not Before: Nov 4 19:12:17 2025 GMT Not After : Nov 11 19:12:17 2025 GMT Subject: CN=690a5011-5f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:47:0a:90:0a:50:06:4c:7b:99:f8:bf:b5: db:00:8d:22:7d:4c:a9:5c:08:eb:63:31:ca:70:ca: 0c:30:0b:2d:d8:98:46:1d:a0:89:d9:a2:4c:f8:3f: 59:5b:37:82:d6:d4:60:9f:5f:a5:01:6e:d8:a8:74: 7f:3f:f7:8e:0f:23:e4:70:08:a3:15:eb:08:08:fa: 5f:76:e6:2a:bc:36:49:31:32:e8:2f:d0:81:d0:ea: 16:ba:17:31:af:45:71:bd:76:8e:56:c8:f0:78:f7: fb:4f:cd:12:ec:b1:6e:64:ca:e2:0d:3f:47:44:3b: 7f:0e:ad:97:b6:92:b0:36:2a:19:30:43:a7:66:06: 20:b0:ef:bc:00:da:91:d6:6f:6b:e7:fc:ae:d8:e3: 2d:de:72:7b:5f:79:8f:97:de:b0:a0:55:e2:9f:bf: d7:68:d7:33:96:ba:06:66:bf:f6:88:2d:b0:7f:75: d4:c5:93:24:4f:20:31:a5:4f:d8:19:fc:6f:3b:b3: e0:ce:ed:ba:ab:15:35:64:19:20:ae:11:de:2c:02: fa:c5:94:af:aa:07:43:55:c2:9e:59:e2:bf:b2:f9: 75:7f:b6:6f:f6:0c:18:51:9f:a4:cb:06:a2:c0:2b: 38:92:e0:d1:e1:35:67:5f:84:7d:0d:7e:78:af:54: 0d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AD:9F:2D:DB:72:99:FA:51:9E:03:9D:0A:3E:55:A0:B1:A7:08:BF X509v3 Authority Key Identifier: keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d8:10:19:e9:33:2d:52:a0:7b:20:70:48:a6:1c:53:6d:13: 94:9b:dc:e6:d9:3b:89:40:65:7b:c8:88:6f:0a:ae:ed:87:25: da:37:97:09:91:45:94:70:84:20:fd:10:69:62:a9:42:e9:2c: 47:12:70:8f:f4:d5:d6:c3:db:ad:9b:15:18:c1:96:94:d3:4e: 1b:67:81:53:7f:b4:55:b4:2f:d1:e1:a7:e8:3f:85:7c:44:81: 40:5f:1b:5d:95:1d:06:17:e5:4a:95:78:89:b0:ba:78:ef:8c: d9:b9:3e:8c:e9:ef:b9:33:4c:bd:b7:60:2a:56:92:76:1a:65: 2e:6d:6d:6e:79:02:2e:37:c0:18:83:39:ff:61:a9:47:d0:de: 94:b1:d0:5f:f9:1d:21:fd:86:59:1d:21:49:43:57:1b:61:eb: a7:ed:43:55:37:22:50:16:a1:e4:ac:b4:43:17:47:36:b0:45: e2:24:79:5a:94:68:ab:eb:63:e2:a2:4a:52:e2:b5:93:b9:9f: c3:f0:a4:1e:2f:fb:fb:75:ea:02:af:06:83:03:e1:d6:98:22: 52:25:16:ae:e3:4e:9b:be:df:16:b2:b6:71:bd:8e:33:b1:7a: 3e:c1:4f:f9:56:a6:3c:39:f8:8f:33:59:3d:84:f8:d3:7d:64: 3e:9f:73:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MDUxMTAvBgNVBAUTKEQ2MTgzQTYxNjdFQzJFNEE3MjQ3MDcwRjFGMEIzOUI2 QjlDOTUzRTEwHhcNMjUxMTA0MTkxMjE3WhcNMjUxMTExMTkxMjE3WjAYMRYwFAYD VQQDEw02OTBhNTAxMS01Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3u9HCpAKUAZMe5n4v7XbAI0ifUypXAjrYzHKcMoMMAst2JhGHaCJ2aJM+D9Z WzeC1tRgn1+lAW7YqHR/P/eODyPkcAijFesICPpfduYqvDZJMTLoL9CB0OoWuhcx r0VxvXaOVsjwePf7T80S7LFuZMriDT9HRDt/Dq2XtpKwNioZMEOnZgYgsO+8ANqR 1m9r5/yu2OMt3nJ7X3mPl96woFXin7/XaNczlroGZr/2iC2wf3XUxZMkTyAxpU/Y GfxvO7Pgzu26qxU1ZBkgrhHeLAL6xZSvqgdDVcKeWeK/svl1f7Zv9gwYUZ+kywai wCs4kuDR4TVnX4R9DX54r1QNOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKtny3b cpn6UZ4DnQo+VaCxpwi/MB8GA1UdIwQYMBaAFNYYOmFn7C5KckcHDx8LOba5yVPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcwNS8zM0ZBRTZGNDQw Q0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xrcHlSd2NQSHdzNXRybkpV LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZzZZV2ZzTGtweVJ3Y1BId3M1dHJuSlUtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcwNS8zM0ZBRTZGNDQwQ0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xr cHlSd2NQSHdzNXRybkpVLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC32BAZ6TMtUqB7IHBIphxTbROUm9zm2TuJQGV7yIhvCq7thyXaN5cJ kUWUcIQg/RBpYqlC6SxHEnCP9NXWw9utmxUYwZaU004bZ4FTf7RVtC/R4afoP4V8 RIFAXxtdlR0GF+VKlXiJsLp474zZuT6M6e+5M0y9t2AqVpJ2GmUubW1ueQIuN8AY gzn/YalH0N6UsdBf+R0h/YZZHSFJQ1cbYeun7UNVNyJQFqHkrLRDF0c2sEXiJHla lGir62PiokpS4rWTuZ/D8KQeL/v7deoCrwaDA+HWmCJSJRau406bvt8WsrZxvY4z sXo+wU/5VqY8OfiPM1k9hPjTfWQ+n3PD -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:04 2025 by rpki-client