$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft File: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json) Hash identifier: yeETFkGcGDANTQbKxE1CjvUF2pwRy3zd0wm/sEo2DTI= Subject key identifier: C7:6F:CF:64:48:E1:BC:FF:BC:77:5B:A3:1C:FC:4A:70:63:AF:5B:96 Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft Manifest number: 03AD Signing time: Mon 03 Nov 2025 00:41:41 +0000 Manifest this update: Mon 03 Nov 2025 00:41:40 +0000 Manifest next update: Mon 10 Nov 2025 00:41:40 +0000 Files and hashes: 1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: 64PJZp/mCe/7E9CLB02i7ezGhD9Q4abvH3P0zMh8eYg=) 2: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=) 3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=) 4: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753 Validity Not Before: Nov 3 00:41:40 2025 GMT Not After : Nov 10 00:41:40 2025 GMT Subject: CN=6907fa44-d617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:c7:0a:04:e1:67:b4:3b:94:36:61:11:4e: 3c:73:d7:31:30:26:35:15:8c:92:47:14:db:89:d6: 0c:1f:ba:ac:13:4d:36:c3:cf:f9:60:72:be:f3:e5: 6e:c0:69:56:00:6d:34:0e:2f:3a:ba:13:76:be:f4: e3:e1:a9:c9:b7:7c:51:27:07:cd:41:97:b7:de:5c: e2:0a:bf:48:a0:f2:3d:23:87:f7:eb:97:4b:6c:56: 81:8f:b8:81:7c:c9:5b:6a:61:9b:b7:a1:31:31:0b: c1:82:90:87:1e:10:2f:88:f4:5d:7d:cb:cc:1d:d4: e9:2d:ee:1d:c1:51:0c:88:08:24:ec:3d:e2:be:a7: f5:65:75:3b:55:4d:ea:48:28:0d:69:23:7e:a5:59: f2:c7:4c:47:1e:a3:c3:6c:5e:84:84:63:de:d2:e9: 53:37:0b:04:d5:31:43:31:8f:10:ea:ab:14:66:d9: 3e:1d:8e:31:d1:17:71:0c:1b:38:5b:ff:ef:d8:c6: 1d:ed:d5:d9:3e:07:63:7c:9c:92:9a:c3:c4:6d:40: 4a:06:30:fc:3b:8f:a7:31:52:77:af:c3:94:01:ad: c5:c3:ae:bd:ef:b2:cf:8d:bb:d9:b9:ad:3a:39:72: 29:c0:08:f5:00:13:e1:ff:d9:cf:cd:bf:fa:b5:46: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6F:CF:64:48:E1:BC:FF:BC:77:5B:A3:1C:FC:4A:70:63:AF:5B:96 X509v3 Authority Key Identifier: keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0d:1c:a0:bb:0a:7b:32:17:91:b0:d5:7a:96:5d:1f:d5:61: 45:e9:d6:36:d0:13:51:dc:47:4f:51:03:2e:ba:c0:a3:96:97: 8c:2b:f4:86:f5:c4:31:b9:14:18:04:25:6c:9c:e4:9f:ed:22: 06:f7:12:07:68:09:47:69:d1:69:35:58:de:5c:02:8a:6b:de: 7f:ab:a8:7d:55:a1:3d:ea:91:cd:77:07:5d:b2:49:ef:0b:0d: dd:00:7b:db:b9:2a:0d:ff:e6:46:92:37:b3:93:1c:f2:1f:74: 69:96:4c:8e:7c:dd:73:4f:65:52:f9:ba:d9:74:1c:f8:bd:d9: 4b:9a:9b:64:8d:f6:d9:b5:87:2a:b8:fe:8d:e0:43:d5:b5:31: c5:4a:c8:38:71:b6:8e:b5:d1:51:f8:7e:35:f1:06:80:ec:ac: 3f:95:ee:36:22:70:0b:ec:8a:87:65:8d:e2:99:3b:35:e3:5a: 88:59:56:8a:0e:a4:5f:ad:6e:e9:3a:a8:c9:b4:74:22:75:98: 88:a0:ff:05:59:39:76:6e:a2:6b:98:31:06:11:76:7a:d4:3d: ab:75:f6:b9:14:cc:9a:21:4b:4b:5b:29:d9:05:46:cb:87:d2: 28:b7:4d:2c:1b:3f:a3:db:2d:3f:3e:05:4f:91:df:c9:08:f3: de:ac:0c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc3NDIxMTAvBgNVBAUTKDg2M0NEMDNDRDdCMEFDQjU4OTY1OUVENkE5MUNGMUVC MjA0MzY3NTMwHhcNMjUxMTAzMDA0MTQwWhcNMjUxMTEwMDA0MTQwWjAYMRYwFAYD VQQDEw02OTA3ZmE0NC1kNjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyynHCgThZ7Q7lDZhEU48c9cxMCY1FYySRxTbidYMH7qsE002w8/5YHK+8+Vu wGlWAG00Di86uhN2vvTj4anJt3xRJwfNQZe33lziCr9IoPI9I4f365dLbFaBj7iB fMlbamGbt6ExMQvBgpCHHhAviPRdfcvMHdTpLe4dwVEMiAgk7D3ivqf1ZXU7VU3q SCgNaSN+pVnyx0xHHqPDbF6EhGPe0ulTNwsE1TFDMY8Q6qsUZtk+HY4x0RdxDBs4 W//v2MYd7dXZPgdjfJySmsPEbUBKBjD8O4+nMVJ3r8OUAa3Fw66977LPjbvZua06 OXIpwAj1ABPh/9nPzb/6tUYbuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdvz2RI 4bz/vHdboxz8SnBjr1uWMB8GA1UdIwQYMBaAFIY80DzXsKy1iWWe1qkc8esgQ2dT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Nzc0Mi85NEU1MDgwMEI3 RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JMV0paWjdXcVJ6eDZ5QkRa MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hqelFQTmV3ckxXSlpaN1dxUnp4NnlCRFoxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Nzc0Mi85NEU1MDgwMEI3RDcxMUVDOUE4Mzc0NjJDNEY5QUUwMi9oanpRUE5ld3JM V0paWjdXcVJ6eDZ5QkRaMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsDRyguwp7MheRsNV6ll0f1WFF6dY20BNR3EdPUQMuusCjlpeMK/SG 9cQxuRQYBCVsnOSf7SIG9xIHaAlHadFpNVjeXAKKa95/q6h9VaE96pHNdwddsknv Cw3dAHvbuSoN/+ZGkjezkxzyH3RplkyOfN1zT2VS+brZdBz4vdlLmptkjfbZtYcq uP6N4EPVtTHFSsg4cbaOtdFR+H418QaA7Kw/le42InAL7IqHZY3imTs141qIWVaK DqRfrW7pOqjJtHQidZiIoP8FWTl2bqJrmDEGEXZ61D2rdfa5FMyaIUtLWynZBUbL h9Iot00sGz+j2y0/PgVPkd/JCPPerAyo -----END CERTIFICATE-----Generated at Tue Nov 4 20:03:43 2025 by rpki-client