$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: PYWDIQEsDYdG8r11paHgUSX5kOWTtt6/G/Y6dgs+ddU= Subject key identifier: A2:E1:56:4F:20:92:6E:BC:E7:5C:2F:6C:16:40:40:47:85:2A:5E:55 Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0B8C Signing time: Tue 04 Nov 2025 19:18:17 +0000 Manifest this update: Tue 04 Nov 2025 19:18:16 +0000 Manifest next update: Tue 11 Nov 2025 19:18:16 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: 5uCd2Avdhmi5E/C+2932YqQs5CYc+FjnMjuUpZwRBNI=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Nov 4 19:18:16 2025 GMT Not After : Nov 11 19:18:16 2025 GMT Subject: CN=690a5178-43df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:52:25:11:df:8d:4b:e9:b5:5d:bb:67:d8: 51:41:3c:d5:fb:68:e7:e4:33:44:4c:d3:b4:d0:e6: b1:1a:fc:61:00:9b:4d:02:e5:c7:e2:57:d3:6d:fb: 96:be:fa:95:da:e5:f8:70:fb:bf:fc:d3:73:05:a9: 1d:d1:55:f9:36:e3:7d:29:bf:7b:71:c5:6f:0b:5f: 97:b1:63:d5:e7:10:3f:79:43:1c:99:a9:00:41:8b: d8:36:a1:18:91:bb:76:f4:81:56:8e:de:55:02:5b: 07:ed:83:f0:3f:d8:8b:e5:41:96:62:82:81:3a:a0: 4a:6e:72:9a:b4:30:ad:37:19:8f:c1:f9:45:8d:83: bf:76:42:c0:76:f3:7e:d2:a8:bd:0a:d4:de:b5:53: ff:f0:1d:d8:1d:dc:0b:ee:c1:d6:ca:0a:f2:2b:41: 5b:8c:0f:a2:01:42:e9:91:bf:dd:1d:71:02:d5:16: ab:19:9e:ae:26:3d:70:e2:3a:a2:f3:56:d2:56:94: fe:a3:7b:fd:aa:00:64:a5:5a:33:d9:59:91:4e:52: 92:8a:d9:08:a3:6f:dd:45:6b:b5:0a:d7:e7:8c:de: 95:d7:1d:c0:90:6a:73:8d:0e:0f:50:de:7d:b3:5e: 8a:5e:76:07:23:d3:8a:a3:c7:e4:ec:03:50:c0:de: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:56:4F:20:92:6E:BC:E7:5C:2F:6C:16:40:40:47:85:2A:5E:55 X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:0b:41:32:25:ba:81:f7:2e:72:8d:e9:8c:d3:27:9e:fc:6c: 33:7d:67:60:65:1d:8c:91:99:32:86:31:20:62:7a:cc:93:26: a7:c8:7c:82:32:bf:74:f4:fc:aa:7a:c0:91:37:3a:18:a7:5a: 0d:46:c9:8f:d2:af:73:9b:42:72:64:b5:4c:e2:80:91:8a:36: 08:67:ed:93:b6:c6:f8:06:1f:3c:ca:c0:b0:04:00:78:fd:bb: 7b:1b:60:0d:68:03:44:64:3b:19:bf:08:3d:c6:47:df:99:ba: 60:ee:0c:4f:76:5f:d3:98:bc:c4:8b:97:6a:68:3d:25:67:5d: 51:e2:40:7a:91:40:42:70:4f:6a:0b:9c:77:e9:6d:85:eb:76: 47:41:f9:48:62:33:2e:71:8a:f7:2b:41:57:37:36:ac:55:32: 8b:21:61:57:65:86:93:98:66:f3:04:6b:e5:e6:bb:95:5e:7a: ae:86:74:fe:05:90:b6:e6:bc:11:27:8b:fe:b2:91:91:e3:d6: ec:5a:48:e9:0c:fb:4f:d4:83:d7:a7:53:cf:49:8c:fb:e1:c1: 7b:c5:a6:14:bd:46:55:e7:5b:9a:f7:a2:67:3f:aa:81:b1:87: 53:1c:54:bf:f9:5a:89:df:24:1e:01:45:24:08:82:2c:73:f7: 3c:a8:17:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNTExMDQxOTE4MTZaFw0yNTExMTExOTE4MTZaMBgxFjAUBgNV BAMTDTY5MGE1MTc4LTQzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgfVIlEd+NS+m1Xbtn2FFBPNX7aOfkM0RM07TQ5rEa/GEAm00C5cfiV9Nt+5a+ +pXa5fhw+7/803MFqR3RVfk2430pv3txxW8LX5exY9XnED95QxyZqQBBi9g2oRiR u3b0gVaO3lUCWwftg/A/2IvlQZZigoE6oEpucpq0MK03GY/B+UWNg792QsB2837S qL0K1N61U//wHdgd3AvuwdbKCvIrQVuMD6IBQumRv90dcQLVFqsZnq4mPXDiOqLz VtJWlP6je/2qAGSlWjPZWZFOUpKK2Qijb91Fa7UK1+eM3pXXHcCQanONDg9Q3n2z Xopedgcj04qjx+TsA1DA3mkfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUouFWTyCS brznXC9sFkBAR4UqXlUwHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEILQTIluoH3LnKN6YzTJ578bDN9Z2BlHYyRmTKGMSBiesyTJqfIfIIy v3T0/Kp6wJE3OhinWg1GyY/Sr3ObQnJktUzigJGKNghn7ZO2xvgGHzzKwLAEAHj9 u3sbYA1oA0RkOxm/CD3GR9+ZumDuDE92X9OYvMSLl2poPSVnXVHiQHqRQEJwT2oL nHfpbYXrdkdB+UhiMy5xivcrQVc3NqxVMoshYVdlhpOYZvMEa+Xmu5Veeq6GdP4F kLbmvBEni/6ykZHj1uxaSOkM+0/Ug9enU89JjPvhwXvFphS9RlXnW5r3omc/qoGx h1McVL/5WonfJB4BRSQIgixz9zyoF60= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:32 2025 by rpki-client