$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: srEUxyYn/n1TG5lQue8Tatfint58un/9/hpyMG0IGr8= Subject key identifier: D3:58:4C:C7:07:AB:8C:C6:7B:63:7B:D1:3D:1D:C8:45:AF:7F:17:6E Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 0153 Signing time: Wed 05 Nov 2025 04:17:57 +0000 Manifest this update: Wed 05 Nov 2025 04:17:57 +0000 Manifest next update: Wed 12 Nov 2025 04:17:57 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: xiQX8PNJdA6R97u5q9ZFond3XAhac1zYWyMjW277S50=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Nov 5 04:17:57 2025 GMT Not After : Nov 12 04:17:57 2025 GMT Subject: CN=690acff5-7a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:2c:b0:43:14:64:01:f6:a6:be:ed:1a:42: 4f:d2:23:46:20:40:e7:26:db:a2:06:9c:d0:2a:d9: 11:18:b3:a0:7b:46:2f:a4:96:2a:ed:69:f7:cf:c0: 27:02:d3:0d:0f:51:38:83:a0:41:bd:16:a8:7e:b6: 9f:0d:04:ca:92:15:e5:24:f4:b8:84:cb:83:64:91: 6d:7e:a0:04:85:9e:a0:e5:f1:eb:20:ce:29:87:e4: ea:b6:f6:f7:af:45:f9:b5:e1:78:3e:24:bf:2b:3b: 92:6c:fb:12:dc:fe:d2:15:17:d0:72:10:18:a4:86: 1b:17:7c:5c:ac:07:49:f3:91:f1:90:2e:c3:3a:32: 4a:2b:c5:52:67:48:98:09:9a:cf:b9:7a:93:d8:83: 02:e1:20:99:29:58:92:db:e4:4e:1c:3a:5d:6c:ab: 0c:bb:4f:5a:c3:3b:7f:3b:ba:48:92:83:53:18:06: 3b:41:c6:28:ee:b3:2e:e4:66:c2:2b:48:4d:3c:59: 71:be:6a:b9:b0:4d:c9:5b:1b:0e:2e:ca:b4:6d:4a: fa:c8:49:96:a6:6d:a1:66:23:65:d5:49:08:53:23: fd:8e:22:1f:fd:61:d8:0a:92:10:16:91:9d:93:3a: 7d:b5:5f:59:61:d6:c3:7c:f3:ff:d3:2e:da:4f:73: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:4C:C7:07:AB:8C:C6:7B:63:7B:D1:3D:1D:C8:45:AF:7F:17:6E X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:dc:bb:d1:83:8f:c7:a8:52:df:b8:d6:9d:29:ff:d8:b4:f2: 3c:9d:3c:fa:27:57:40:d3:85:83:ca:78:1e:fa:b8:f8:ab:c0: 20:29:cb:a5:6d:3f:a0:15:65:32:06:77:84:3c:d0:db:7b:53: 40:dc:56:2f:65:e5:c6:f3:53:18:61:8a:a5:dd:f1:b2:e2:96: bf:c6:17:03:10:3c:ea:b9:84:6c:97:97:1a:4e:1b:b3:f4:b0: f6:fb:63:e2:f8:04:37:c8:16:09:ff:b1:c5:e3:e4:8e:14:82: 12:43:3b:22:7d:51:f1:d4:51:60:a3:c0:f3:e8:fd:e9:ed:61: 77:a8:f2:b2:5d:d2:a7:84:84:7a:8e:ec:d6:c9:04:0d:c5:c3: 6e:1a:57:99:59:34:3d:f0:24:14:9e:77:b9:f4:16:ce:2e:7b: c9:97:71:ae:5d:1f:d1:63:fd:bd:1b:f4:a1:8e:93:56:0f:35: 66:6c:8b:c5:77:2c:2b:5d:b5:e1:0d:fe:46:a9:14:4d:ea:71: b2:b6:bc:6a:c9:b6:ed:bf:92:15:df:47:2c:2d:b6:c4:37:d7: 97:a7:40:15:83:8f:b2:14:30:02:c4:b5:ec:b0:50:50:b3:9e: 3a:bd:3f:d0:66:51:e2:da:bf:bd:44:14:9e:6d:98:72:6f:38: 30:fb:ee:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUxMTA1MDQxNzU3WhcNMjUxMTEyMDQxNzU3WjAYMRYwFAYD VQQDEw02OTBhY2ZmNS03YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHYssEMUZAH2pr7tGkJP0iNGIEDnJtuiBpzQKtkRGLOge0YvpJYq7Wn3z8An AtMND1E4g6BBvRaofrafDQTKkhXlJPS4hMuDZJFtfqAEhZ6g5fHrIM4ph+Tqtvb3 r0X5teF4PiS/KzuSbPsS3P7SFRfQchAYpIYbF3xcrAdJ85HxkC7DOjJKK8VSZ0iY CZrPuXqT2IMC4SCZKViS2+ROHDpdbKsMu09awzt/O7pIkoNTGAY7QcYo7rMu5GbC K0hNPFlxvmq5sE3JWxsOLsq0bUr6yEmWpm2hZiNl1UkIUyP9jiIf/WHYCpIQFpGd kzp9tV9ZYdbDfPP/0y7aT3NNIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNYTMcH q4zGe2N70T0dyEWvfxduMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDb3LvRg4/HqFLfuNadKf/YtPI8nTz6J1dA04WDynge+rj4q8AgKcul bT+gFWUyBneEPNDbe1NA3FYvZeXG81MYYYql3fGy4pa/xhcDEDzquYRsl5caThuz 9LD2+2Pi+AQ3yBYJ/7HF4+SOFIISQzsifVHx1FFgo8Dz6P3p7WF3qPKyXdKnhIR6 juzWyQQNxcNuGleZWTQ98CQUnne59BbOLnvJl3GuXR/RY/29G/ShjpNWDzVmbIvF dywrXbXhDf5GqRRN6nGytrxqybbtv5IV30csLbbEN9eXp0AVg4+yFDACxLXssFBQ s546vT/QZlHi2r+9RBSebZhybzgw++5z -----END CERTIFICATE-----Generated at Wed Nov 5 06:27:18 2025 by rpki-client