$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft File: hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json) Hash identifier: sWq5p6dnCTXr26S0yeG5hu8ryl5Nz1SmT5ZYojMuFpU= Subject key identifier: 72:45:54:7E:79:87:B6:D8:E4:1C:3F:2B:C7:8E:9E:DA:CF:50:D0:54 Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF Certificate issuer: /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Certificate serial: 0545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft Manifest number: 0532 Signing time: Tue 04 Nov 2025 23:37:28 +0000 Manifest this update: Tue 04 Nov 2025 23:37:28 +0000 Manifest next update: Tue 11 Nov 2025 23:37:28 +0000 Files and hashes: 1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: Koj5l+CK71n3zl5QCrtSakrTPyDtUMgSDgKWuuSSpOc=) 2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: ia2pqx31V4MwmguUfrEguAwy/z3aXZqah5kSHzEHlrE=) 3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: 9W/HjzYGLuVHz3M6psfGPjI/8SrB5a0T/iVdc7KS6JA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF Validity Not Before: Nov 4 23:37:28 2025 GMT Not After : Nov 11 23:37:28 2025 GMT Subject: CN=690a8e38-9742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:d1:67:95:dd:f1:15:ce:47:60:d1:34:f6: 2c:5d:4f:eb:b4:48:b8:b7:76:1c:58:80:18:16:f6: c1:4d:a7:0e:59:85:6d:93:8d:0e:db:64:eb:89:a5: 39:3d:a6:86:d9:5f:06:65:5b:d0:2f:22:06:32:72: 77:cc:5d:9b:fd:d8:b4:fe:75:6f:e4:bd:8c:47:f9: 02:ff:db:ef:e6:71:3c:4a:d0:7e:83:65:03:57:4b: bb:85:e4:6b:15:2f:be:de:af:12:3e:7b:91:40:dd: 7e:49:9b:5b:3e:fe:b3:7a:b5:70:71:3e:85:0b:c9: dc:e5:e2:15:c4:72:6a:7c:a1:ba:a3:84:92:1f:9e: 7f:f9:2d:16:39:d7:9d:87:b0:22:ca:a9:a9:9a:6b: 97:cd:9c:6d:0c:8f:c6:9d:1b:82:33:fe:27:c2:9d: e7:93:fd:ec:c8:54:26:9a:db:ce:bc:2f:9c:df:65: 8b:71:00:6b:b0:ee:fc:c9:a5:ce:af:92:1f:8a:89: 32:06:56:23:81:6e:fa:7b:37:a7:ca:4c:93:f8:4f: 13:05:b5:a1:ca:d8:41:06:6c:25:f4:35:42:f5:bb: c4:f0:be:ba:3c:0e:78:5b:ec:2e:db:92:70:18:5e: 84:8c:59:57:98:92:7e:0a:3d:6f:c7:0e:ac:b6:bb: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:45:54:7E:79:87:B6:D8:E4:1C:3F:2B:C7:8E:9E:DA:CF:50:D0:54 X509v3 Authority Key Identifier: keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:fe:35:a2:58:22:25:73:3f:30:05:c4:4a:13:bb:d4:0a: 27:81:7a:2e:d5:5f:0d:ae:cd:0c:83:56:04:a7:c3:aa:d6:2f: fb:29:3f:80:0f:d5:fb:18:b3:6e:33:05:96:40:aa:52:27:78: c0:a3:79:9d:f9:80:33:46:19:f2:00:d8:1c:1c:48:d1:af:70: d5:ff:e2:00:45:25:37:0f:0b:68:58:0f:a0:0c:12:7d:24:52: b7:84:dc:63:34:c3:57:fe:e4:83:fa:57:ba:9e:5d:21:cf:00: 4e:80:2d:a4:77:4c:2e:59:44:d1:27:5f:46:23:b2:c3:aa:e7: 1c:ad:4d:17:e7:7d:81:aa:96:c8:ef:03:c5:d4:7d:e5:ee:dc: 23:65:33:60:66:1a:64:97:5d:91:84:ba:fe:b2:32:44:52:b1: ef:cb:57:f2:13:5c:ee:99:8a:96:60:4f:d0:3c:75:bf:59:a8: 86:2e:99:54:b8:ec:a0:ed:cd:c4:9a:74:8f:47:85:65:84:c8: 61:25:18:22:1d:3b:a5:89:8c:91:9d:b4:46:c1:69:12:9b:1b: 39:64:17:8e:16:13:bf:b1:c9:7f:9e:57:d4:70:73:0f:0e:cf: 61:8c:2c:f8:24:da:1f:98:17:ab:ee:56:55:06:a2:1f:52:28: 29:23:19:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD RjJBMTU4REYwHhcNMjUxMTA0MjMzNzI4WhcNMjUxMTExMjMzNzI4WjAYMRYwFAYD VQQDEw02OTBhOGUzOC05NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMLRZ5Xd8RXOR2DRNPYsXU/rtEi4t3YcWIAYFvbBTacOWYVtk40O22TriaU5 PaaG2V8GZVvQLyIGMnJ3zF2b/di0/nVv5L2MR/kC/9vv5nE8StB+g2UDV0u7heRr FS++3q8SPnuRQN1+SZtbPv6zerVwcT6FC8nc5eIVxHJqfKG6o4SSH55/+S0WOded h7AiyqmpmmuXzZxtDI/GnRuCM/4nwp3nk/3syFQmmtvOvC+c32WLcQBrsO78yaXO r5IfiokyBlYjgW76ezenykyT+E8TBbWhythBBmwl9DVC9bvE8L66PA54W+wu25Jw GF6EjFlXmJJ+Cj1vxw6strvX5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJFVH55 h7bY5Bw/K8eOntrPUNBUMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTUwNS80QTg5RDU2MjIwRTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3 eThoVTRfUU1oOHZQS2hXTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIa/41olgiJXM/MAXEShO71AongXou1V8Nrs0Mg1YEp8Oq1i/7KT+A D9X7GLNuMwWWQKpSJ3jAo3md+YAzRhnyANgcHEjRr3DV/+IARSU3DwtoWA+gDBJ9 JFK3hNxjNMNX/uSD+le6nl0hzwBOgC2kd0wuWUTRJ19GI7LDquccrU0X532BqpbI 7wPF1H3l7twjZTNgZhpkl12RhLr+sjJEUrHvy1fyE1zumYqWYE/QPHW/WaiGLplU uOyg7c3EmnSPR4VlhMhhJRgiHTuliYyRnbRGwWkSmxs5ZBeOFhO/scl/nlfUcHMP Ds9hjCz4JNofmBer7lZVBqIfUigpIxmF -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:16 2025 by rpki-client