$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: cvbS7P3OD3E2F6WKiAY1y0p1JJqGzjIcvQPqn9hCoqw= Subject key identifier: A8:83:97:BB:CC:81:31:76:6D:E8:C1:78:1F:5D:28:12:45:B0:FE:29 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 01C1 Signing time: Mon 03 Nov 2025 03:03:05 +0000 Manifest this update: Mon 03 Nov 2025 03:03:04 +0000 Manifest next update: Mon 10 Nov 2025 03:03:04 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: igesn7JEB4HLI9oxLA7NnwPx1dXbgsgntyG2af3Dn1U=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Nov 3 03:03:04 2025 GMT Not After : Nov 10 03:03:04 2025 GMT Subject: CN=69081b68-32e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:41:a7:48:74:2c:22:ce:fe:65:6b:68:9e: 8f:f0:c3:95:d0:48:5f:19:2a:0c:3b:10:81:f1:80: 20:32:14:7d:24:f2:42:8c:9e:bb:49:84:29:a8:40: 56:26:c6:7e:e3:29:1d:77:e0:5f:ee:37:9e:6c:46: fe:8b:05:c0:fa:d5:7e:9b:af:8d:b5:28:57:eb:cf: cd:a8:fa:3d:c1:4c:ab:b5:38:97:50:f5:3b:27:cd: a1:e0:f9:96:fd:d3:c8:c0:7e:29:54:15:f9:78:27: 99:34:ed:93:50:6d:3c:3d:5c:4b:e9:14:9c:9d:9b: 61:05:73:ea:0c:1c:b6:a5:66:ec:c2:c8:b5:f9:e2: 4d:9c:e0:07:ad:25:76:6a:d9:b1:84:a2:71:d3:e1: 26:35:27:e0:85:57:05:a2:64:4e:7b:b7:57:58:11: e7:b1:77:ca:62:13:bc:95:c2:81:e4:c4:59:95:c9: 76:14:1a:04:e7:6f:4d:3b:a6:91:b8:43:2c:61:f7: 54:51:c1:2d:37:4b:29:b7:74:fd:8f:d3:a3:0a:68: 8e:cb:b0:14:60:43:3f:b0:af:f1:1f:4e:ef:c5:11: d9:16:10:4b:9a:fa:d9:21:c3:fb:d5:e5:62:d4:45: ff:90:44:46:06:a6:64:75:cd:d5:02:de:1e:5b:59: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:97:BB:CC:81:31:76:6D:E8:C1:78:1F:5D:28:12:45:B0:FE:29 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:29:7c:7c:00:7b:da:eb:b4:e5:73:e8:05:74:52:e8:b0:42: 44:1a:93:c6:f4:30:13:23:61:67:67:58:38:59:f6:b2:ea:26: 5d:37:d1:77:5e:ec:5b:23:98:af:66:6d:10:26:ad:30:5d:f2: 0d:f3:36:4b:2f:3f:e8:1c:ae:ac:27:e2:32:b3:40:4e:66:11: 7c:24:04:c9:38:2d:6b:36:2f:76:5d:16:17:ec:50:d9:d2:ed: 56:02:ba:bf:eb:60:b3:80:6e:01:4b:58:08:85:cd:22:b9:e6: 39:46:06:fa:00:eb:d0:61:f3:61:9e:2b:df:41:16:c2:79:04: c1:4f:78:7d:dd:1e:4e:72:90:41:63:7c:2f:50:30:fd:03:58: 36:84:21:ca:f9:ef:30:25:12:2d:58:fc:e4:c1:fd:14:8e:5b: 23:e6:87:3c:01:d9:03:8a:90:4b:4f:16:ef:f7:fa:fa:d2:95: 1b:74:f6:52:3c:d0:18:95:e3:32:f1:f5:fe:e4:36:56:03:4e: f3:a6:b7:93:a3:e1:88:73:24:40:db:25:a1:63:10:86:d1:60: c7:1f:a0:94:8d:f3:c0:49:6a:16:f1:9b:37:3b:6e:5d:fd:2a: ad:21:88:89:85:3b:7e:16:62:ea:c3:e4:2f:e7:e6:c9:49:8d: 79:8f:d1:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUxMTAzMDMwMzA0WhcNMjUxMTEwMDMwMzA0WjAYMRYwFAYD VQQDEw02OTA4MWI2OC0zMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW9Bp0h0LCLO/mVraJ6P8MOV0EhfGSoMOxCB8YAgMhR9JPJCjJ67SYQpqEBW JsZ+4ykdd+Bf7jeebEb+iwXA+tV+m6+NtShX68/NqPo9wUyrtTiXUPU7J82h4PmW /dPIwH4pVBX5eCeZNO2TUG08PVxL6RScnZthBXPqDBy2pWbswsi1+eJNnOAHrSV2 atmxhKJx0+EmNSfghVcFomROe7dXWBHnsXfKYhO8lcKB5MRZlcl2FBoE529NO6aR uEMsYfdUUcEtN0spt3T9j9OjCmiOy7AUYEM/sK/xH07vxRHZFhBLmvrZIcP71eVi 1EX/kERGBqZkdc3VAt4eW1l2UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiDl7vM gTF2bejBeB9dKBJFsP4pMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAKXx8AHva67Tlc+gFdFLosEJEGpPG9DATI2FnZ1g4Wfay6iZdN9F3 XuxbI5ivZm0QJq0wXfIN8zZLLz/oHK6sJ+Iys0BOZhF8JATJOC1rNi92XRYX7FDZ 0u1WArq/62CzgG4BS1gIhc0iueY5Rgb6AOvQYfNhnivfQRbCeQTBT3h93R5OcpBB Y3wvUDD9A1g2hCHK+e8wJRItWPzkwf0Ujlsj5oc8AdkDipBLTxbv9/r60pUbdPZS PNAYleMy8fX+5DZWA07zpreTo+GIcyRA2yWhYxCG0WDHH6CUjfPASWoW8Zs3O25d /SqtIYiJhTt+FmLqw+Qv5+bJSY15j9Ex -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:41 2025 by rpki-client