$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: FEpdk5Dvqmy8JlAqf5G7FigjCIz3SIG4eH2vl8kYrDs= Subject key identifier: 8C:BD:4A:44:8A:02:B1:AD:01:8A:02:3F:A0:A3:BA:46:BF:99:52:2B Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 07E0 Signing time: Tue 04 Nov 2025 21:13:50 +0000 Manifest this update: Tue 04 Nov 2025 21:13:49 +0000 Manifest next update: Tue 11 Nov 2025 21:13:49 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: WNfW4XSSlcFN0boxNQAaKlU51t6o/U3kbpyy8SMIm90=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: 4H/7tRgY+9ShgVfnL2F79sUIJ0/ruS7tEGMDyU0Q41E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Nov 4 21:13:49 2025 GMT Not After : Nov 11 21:13:49 2025 GMT Subject: CN=690a6c8d-8c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:80:a6:0c:c2:28:10:3f:9b:90:c8:1d:1f: c5:bf:06:f8:8c:26:2a:f8:76:2d:91:ae:69:9e:b8: a3:2f:32:1b:1a:b1:5b:b2:07:33:ea:cb:67:40:b9: 37:a9:d1:07:d4:d4:f5:c5:2d:fe:4d:ac:19:92:67: a1:28:35:73:97:ec:f4:e1:32:d2:4b:d0:93:47:e7: 3d:d8:87:b9:60:9b:3c:1d:47:23:44:58:e8:ef:96: e0:15:a6:73:d1:8b:39:37:2e:89:45:ae:81:78:6f: ee:d8:47:29:d0:23:57:2e:75:4c:4e:72:d7:de:70: 14:46:ae:f4:51:2a:77:34:be:c7:1b:e9:ff:90:0f: 4d:04:0e:a7:8e:11:5c:d8:8a:21:27:1c:32:0d:b9: 0a:9c:26:c3:45:82:9d:bf:bd:66:11:e4:8b:3b:65: 48:16:7c:67:7b:48:3d:b9:71:ba:e4:a2:4d:c2:94: 10:23:91:d4:42:e5:85:94:cd:1f:d1:59:27:cc:75: 95:3f:64:78:a1:78:ec:3a:bb:02:a1:2d:6e:bb:77: 57:11:22:bc:56:2e:21:da:1c:71:a8:14:2b:fe:64: 76:25:e9:72:bc:22:cd:07:c8:8a:8d:f3:57:d2:80: bc:f2:06:2b:5d:9c:f5:b4:80:a6:fa:05:b8:7c:4f: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BD:4A:44:8A:02:B1:AD:01:8A:02:3F:A0:A3:BA:46:BF:99:52:2B X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:10:77:f5:97:3e:89:f3:cb:8a:36:d8:b8:2d:30:b3:64:d5: 1d:70:83:33:04:b9:12:ca:57:06:5d:6b:73:b7:c2:82:4f:f4: 37:ed:f3:05:b0:5e:8f:73:21:00:d5:d1:f7:3f:d0:62:36:96: f3:bd:19:c1:79:5b:0a:a2:0e:52:2f:c0:6a:fb:46:af:5a:46: 7e:e6:d6:91:79:99:f2:47:e5:23:65:96:2d:06:90:49:ca:26: 49:bf:a4:2a:ad:15:86:93:b9:b8:1a:f9:eb:a3:a9:b6:b8:e9: 27:ee:47:c9:ee:fd:77:bb:fd:30:bc:0c:3e:e2:9c:18:5c:86: d6:67:2b:d2:56:4e:66:0e:24:d3:7c:9c:09:c7:ea:9d:fc:8c: 46:df:63:70:b1:c0:25:bf:0b:9a:cb:74:76:f5:c8:c5:0a:b2: bc:0f:a0:79:1c:fe:b9:e4:25:bf:0e:f1:2b:81:23:7f:39:c9: 68:ba:f7:7e:dc:d9:78:8b:89:ab:51:f7:93:a2:d1:20:45:98: 19:91:dd:3a:40:01:f8:87:61:36:56:be:61:d1:6b:5b:1b:36: 52:4a:04:9a:e6:50:05:3c:f6:19:f5:e3:d0:09:46:80:3a:eb: 5e:4c:2c:30:e9:12:ff:94:fa:dc:63:2e:c8:b9:42:0b:96:f5: 1b:b1:07:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjUxMTA0MjExMzQ5WhcNMjUxMTExMjExMzQ5WjAYMRYwFAYD VQQDEw02OTBhNmM4ZC04YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUOApgzCKBA/m5DIHR/Fvwb4jCYq+HYtka5pnrijLzIbGrFbsgcz6stnQLk3 qdEH1NT1xS3+TawZkmehKDVzl+z04TLSS9CTR+c92Ie5YJs8HUcjRFjo75bgFaZz 0Ys5Ny6JRa6BeG/u2Ecp0CNXLnVMTnLX3nAURq70USp3NL7HG+n/kA9NBA6njhFc 2IohJxwyDbkKnCbDRYKdv71mEeSLO2VIFnxne0g9uXG65KJNwpQQI5HUQuWFlM0f 0VknzHWVP2R4oXjsOrsCoS1uu3dXESK8Vi4h2hxxqBQr/mR2JelyvCLNB8iKjfNX 0oC88gYrXZz1tICm+gW4fE8HzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy9SkSK ArGtAYoCP6Cjuka/mVIrMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnEHf1lz6J88uKNti4LTCzZNUdcIMzBLkSylcGXWtzt8KCT/Q37fMF sF6PcyEA1dH3P9BiNpbzvRnBeVsKog5SL8Bq+0avWkZ+5taReZnyR+UjZZYtBpBJ yiZJv6QqrRWGk7m4Gvnro6m2uOkn7kfJ7v13u/0wvAw+4pwYXIbWZyvSVk5mDiTT fJwJx+qd/IxG32NwscAlvwuay3R29cjFCrK8D6B5HP655CW/DvErgSN/Oclouvd+ 3Nl4i4mrUfeTotEgRZgZkd06QAH4h2E2Vr5h0WtbGzZSSgSa5lAFPPYZ9ePQCUaA OuteTCww6RL/lPrcYy7IuUILlvUbsQeY -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:58 2025 by rpki-client