$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: 3BR+bivWau4+0c0OHFt8ietpj1dge554b5b/teTONKA= Subject key identifier: 0E:0A:87:2D:57:43:C8:16:59:96:6F:05:B6:2F:E7:80:F1:55:B6:0A Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 17A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 17A8 Signing time: Tue 04 Nov 2025 16:39:47 +0000 Manifest this update: Tue 04 Nov 2025 16:39:47 +0000 Manifest next update: Tue 11 Nov 2025 16:39:47 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: GVDnorSn9TFQkPHp/8c3YTF0kImMOtFBhNCfJQ2VAkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6056 (0x17a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Nov 4 16:39:47 2025 GMT Not After : Nov 11 16:39:47 2025 GMT Subject: CN=690a2c53-ccbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:d5:fc:a2:1d:d2:77:1b:f7:7d:9d:db:dd: b8:73:c3:a2:6b:1a:b7:d1:07:7f:ff:6d:59:df:91: c1:e8:6b:48:0b:bc:68:6f:9f:a0:c0:1a:00:71:71: 2a:45:e3:99:c8:49:92:09:5e:23:e1:f1:9b:cb:e6: f6:15:fb:f0:ed:f4:ad:ae:03:22:65:d5:c1:1c:22: b8:1f:cd:92:ca:37:fb:cf:71:93:1b:aa:cb:ca:a0: a6:d3:2f:a1:17:8b:6c:cf:82:50:df:b0:86:a1:c1: e7:3d:2b:31:7d:2c:7f:c5:13:93:d0:b8:66:26:ae: 72:68:ac:f3:f2:cc:24:79:c1:56:80:7c:72:1f:1f: d8:2e:88:b6:29:c0:47:41:c7:f2:e8:3e:5f:d6:66: 69:e7:b9:e6:f1:72:c6:42:e5:e4:bd:d5:2d:b5:0b: 60:11:e9:a5:22:ef:ed:f1:f0:bb:88:d2:e9:85:db: 7a:0c:67:16:56:e3:bf:c6:cd:0a:ae:ff:41:bd:6a: 76:3c:cb:1c:cb:8b:e1:ed:b9:6e:03:24:25:8f:03: 12:eb:94:12:0f:d2:b4:71:49:df:26:86:94:0f:eb: 67:d7:b3:e6:51:12:e8:ba:a5:3b:8b:dc:aa:54:c7: 61:cd:7e:71:cc:06:f3:fd:79:a7:80:bb:e0:ef:a2: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:87:2D:57:43:C8:16:59:96:6F:05:B6:2F:E7:80:F1:55:B6:0A X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:52:e9:96:0c:48:73:6e:0f:50:89:7c:c9:39:ae:7d:72:f5: dd:6c:bf:a5:c5:3c:49:92:89:c3:f8:1d:1d:0e:c1:1e:4c:9a: 5c:35:41:d4:54:30:22:cb:70:51:3d:eb:40:34:85:22:24:65: f4:81:3a:95:38:81:8c:de:6d:52:00:0d:78:51:6b:c8:91:e0: 08:5e:b2:5c:a7:13:9a:c4:19:58:76:e2:26:80:05:0a:4e:3e: f3:ee:e9:ff:5a:ae:c2:22:ab:dd:ff:b2:5b:8a:e6:ed:ba:88: 5a:4b:4f:5d:3e:f2:90:d4:d0:14:15:e6:2c:fa:1c:65:ab:0c: eb:c8:a7:b4:d1:d6:3b:72:83:68:9f:3c:d6:aa:a6:d3:f7:4d: 65:3a:a8:79:06:c3:b7:d0:a8:73:d1:c6:67:8c:10:71:62:e4: c3:7c:64:92:19:eb:6d:f9:6f:30:72:14:fd:4d:e0:b7:a8:59: 65:e5:24:09:f9:98:fe:f1:e9:bc:37:05:28:5d:4e:db:2d:15: 3c:34:fb:94:c9:e4:67:75:46:9c:cd:11:a1:f0:cc:9e:3d:7e: dd:17:73:b3:15:4c:51:dc:70:e7:a1:58:ff:9c:6a:54:32:0a: 04:45:2d:e2:7e:0e:14:d7:c3:4a:ec:b4:5e:8f:5d:56:ce:48: 91:a4:63:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjUxMTA0MTYzOTQ3WhcNMjUxMTExMTYzOTQ3WjAYMRYwFAYD VQQDEw02OTBhMmM1My1jY2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IfV/KId0ncb932d2924c8Oiaxq30Qd//21Z35HB6GtIC7xob5+gwBoAcXEq ReOZyEmSCV4j4fGby+b2Ffvw7fStrgMiZdXBHCK4H82Syjf7z3GTG6rLyqCm0y+h F4tsz4JQ37CGocHnPSsxfSx/xROT0LhmJq5yaKzz8swkecFWgHxyHx/YLoi2KcBH Qcfy6D5f1mZp57nm8XLGQuXkvdUttQtgEemlIu/t8fC7iNLphdt6DGcWVuO/xs0K rv9BvWp2PMscy4vh7bluAyQljwMS65QSD9K0cUnfJoaUD+tn17PmURLouqU7i9yq VMdhzX5xzAbz/XmngLvg76I4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4Khy1X Q8gWWZZvBbYv54DxVbYKMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoUumWDEhzbg9QiXzJOa59cvXdbL+lxTxJkonD+B0dDsEeTJpcNUHU VDAiy3BRPetANIUiJGX0gTqVOIGM3m1SAA14UWvIkeAIXrJcpxOaxBlYduImgAUK Tj7z7un/Wq7CIqvd/7JbiubtuohaS09dPvKQ1NAUFeYs+hxlqwzryKe00dY7coNo nzzWqqbT901lOqh5BsO30Khz0cZnjBBxYuTDfGSSGett+W8wchT9TeC3qFll5SQJ +Zj+8em8NwUoXU7bLRU8NPuUyeRndUaczRGh8MyePX7dF3OzFUxR3HDnoVj/nGpU MgoERS3ifg4U18NK7LRej11WzkiRpGPS -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:18 2025 by rpki-client