$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: srGZLWLXFevmxY59eMomRaiYLeIMxF+0buHJ+7j9aC0= Subject key identifier: F1:CF:99:22:05:2A:BB:79:2D:50:60:07:21:08:06:D9:F9:87:A3:80 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 0805 Signing time: Tue 04 Nov 2025 21:11:59 +0000 Manifest this update: Tue 04 Nov 2025 21:11:59 +0000 Manifest next update: Tue 11 Nov 2025 21:11:59 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: LB/ZfBfxVG+DWp3riK++hK2k5RlE82OvpDk66Qx2VRc=) 2: D19E7784AAF811EE8D8CCD25C4F9AE02.roa (hash: +XIvNmYB/5EgcsxvZK5ch01j/uNHHViQProaEC6+kLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Nov 4 21:11:59 2025 GMT Not After : Nov 11 21:11:59 2025 GMT Subject: CN=690a6c1f-6720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:21:7d:f3:44:a3:c6:2e:86:37:0a:ec:24: bc:b9:68:44:c7:a9:4a:56:a3:0f:07:1f:57:35:46: ee:bf:6c:e6:3d:64:3c:f6:3b:42:9a:5d:eb:b5:4d: d6:39:69:be:9e:5e:e1:84:93:53:c2:a4:bf:9e:c8: 46:df:bf:d1:6f:69:86:56:43:7a:65:62:68:a4:f5: e1:75:65:9e:c7:07:06:fc:03:d2:64:3a:98:a1:7f: ec:5e:8c:72:63:02:77:42:c7:b2:44:f5:fb:8b:d8: c5:e6:af:dd:3a:34:3c:71:7a:88:28:fe:b0:7b:8d: c4:1b:bc:c8:14:1f:e0:64:fa:38:a2:fc:ab:55:d6: 77:cc:46:26:52:a8:9a:24:46:d8:62:60:3c:db:cf: 62:9b:41:03:e2:1e:0b:70:8a:fb:f0:50:62:f0:5e: 32:1c:6c:e5:9d:b9:c0:8a:53:e6:2c:9b:8e:66:71: ea:1b:7e:3c:79:83:11:06:db:93:b9:9b:b2:32:0f: 99:0f:ce:0a:8f:28:b0:be:76:41:51:32:f2:10:bc: a8:61:47:f6:f7:31:0f:97:21:25:34:82:89:d0:9a: 3d:ae:68:ee:3d:a7:e6:21:2b:0d:e1:aa:a0:ca:52: d3:a6:9e:90:11:4a:d5:03:cc:2b:55:fe:c3:ef:e6: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CF:99:22:05:2A:BB:79:2D:50:60:07:21:08:06:D9:F9:87:A3:80 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:5b:a2:f4:f9:15:86:94:34:45:a1:13:71:4b:cd:9b:ba:40: 22:f5:d0:99:1e:b8:bf:4d:2b:08:2f:bb:b1:4c:85:ef:35:56: 88:87:83:8b:ad:d5:94:e8:40:09:46:63:77:26:e5:97:20:00: d9:34:a3:c1:bb:40:8b:d0:2b:e2:3c:41:40:6a:ac:2c:ca:29: 91:40:f8:bc:be:3d:66:d4:a0:5a:49:0b:31:b5:0a:d8:87:3a: 47:f0:9e:6f:b9:be:97:c8:a5:af:d6:6b:27:d7:9b:74:c5:0a: ff:5a:5d:f4:5a:a5:eb:db:bb:cc:9b:2a:9e:52:1c:af:28:6d: 9d:cb:2f:f6:93:8d:98:1b:81:0e:7c:fb:cd:c2:86:06:4d:ee: 91:d5:b4:e5:98:06:a7:45:1a:bd:93:b6:b5:4b:5a:ec:9d:de: 7c:17:62:ee:0b:18:a0:d9:02:0f:e0:a1:9a:ce:cf:aa:e9:9c: 64:53:13:5c:69:1d:05:65:89:ed:86:f0:c0:79:0a:a4:be:29: 4f:30:96:f7:cc:9a:6c:15:12:ab:17:9e:d3:96:2d:ba:0d:dc: d0:44:13:de:b3:c2:ca:76:7b:fe:ac:cc:a0:4d:b4:3e:01:14: 04:40:cf:5a:9d:8c:0c:57:c4:19:ee:4b:84:aa:44:43:ec:46: e2:fc:ab:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjUxMTA0MjExMTU5WhcNMjUxMTExMjExMTU5WjAYMRYwFAYD VQQDEw02OTBhNmMxZi02NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA8hffNEo8YuhjcK7CS8uWhEx6lKVqMPBx9XNUbuv2zmPWQ89jtCml3rtU3W OWm+nl7hhJNTwqS/nshG37/Rb2mGVkN6ZWJopPXhdWWexwcG/APSZDqYoX/sXoxy YwJ3QseyRPX7i9jF5q/dOjQ8cXqIKP6we43EG7zIFB/gZPo4ovyrVdZ3zEYmUqia JEbYYmA8289im0ED4h4LcIr78FBi8F4yHGzlnbnAilPmLJuOZnHqG348eYMRBtuT uZuyMg+ZD84KjyiwvnZBUTLyELyoYUf29zEPlyElNIKJ0Jo9rmjuPafmISsN4aqg ylLTpp6QEUrVA8wrVf7D7+a3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHPmSIF Krt5LVBgByEIBtn5h6OAMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEW6L0+RWGlDRFoRNxS82bukAi9dCZHri/TSsIL7uxTIXvNVaIh4OL rdWU6EAJRmN3JuWXIADZNKPBu0CL0CviPEFAaqwsyimRQPi8vj1m1KBaSQsxtQrY hzpH8J5vub6XyKWv1msn15t0xQr/Wl30WqXr27vMmyqeUhyvKG2dyy/2k42YG4EO fPvNwoYGTe6R1bTlmAanRRq9k7a1S1rsnd58F2LuCxig2QIP4KGazs+q6ZxkUxNc aR0FZYnthvDAeQqkvilPMJb3zJpsFRKrF57Tli26DdzQRBPes8LKdnv+rMygTbQ+ ARQEQM9anYwMV8QZ7kuEqkRD7Ebi/Kti -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:15 2025 by rpki-client