$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft File: hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json) Hash identifier: nj4hXp+rw4V3oeimn6Ov9aBlOqCI2X6NG59wcIV7wzo= Subject key identifier: 53:30:49:8F:17:80:D7:35:80:FD:14:E8:59:A0:22:25:7C:52:F5:8B Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93 Certificate issuer: /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 07:29:12 +0000 Manifest this update: Mon 03 Nov 2025 07:29:12 +0000 Manifest next update: Mon 10 Nov 2025 07:29:12 +0000 Files and hashes: 1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: atRJxfXbIqntOP0TkI48fOWz5yZQ8kNWUuQIB3o+Opg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393 Validity Not Before: Nov 3 07:29:12 2025 GMT Not After : Nov 10 07:29:12 2025 GMT Subject: CN=690859c8-1c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8b:ab:dd:3c:54:ec:aa:d2:e9:60:9f:70:4e: d7:e1:5d:35:d2:74:52:f0:60:c6:40:b7:88:7e:7b: 7d:b3:74:65:f2:bf:95:1c:10:9a:e2:f0:8c:b9:f1: 8c:e8:f8:68:12:dd:fd:aa:b4:a9:b5:41:7f:06:3c: 63:a6:51:d8:05:42:d0:52:ad:97:65:a0:5c:65:a7: a3:bb:6d:06:16:3d:f4:27:36:61:43:f3:e0:89:9c: 21:38:b1:01:c7:aa:d0:74:9c:37:ff:73:af:62:c5: 8d:c9:27:ec:23:06:32:0f:18:0a:03:19:67:95:46: f3:09:9f:d0:b9:ab:6d:b6:c1:1a:c8:8f:d8:65:79: cf:25:41:07:24:24:97:5d:94:ba:a2:ca:45:a0:a5: dd:25:24:5a:d9:92:2b:d0:bc:bd:44:8f:69:c1:d9: 77:59:4b:7f:ec:6d:04:4a:4d:93:38:3b:ee:59:fb: a4:2c:d0:cf:61:3e:09:f5:5f:b2:4a:63:1f:df:05: 95:22:cc:43:a0:0f:e4:17:9f:fa:00:dd:9c:f7:60: dd:63:b4:dd:62:ff:d7:1e:78:67:46:4b:5f:37:7d: 94:52:46:6e:37:3c:1d:b7:b6:f0:0a:2f:e0:18:1f: d3:29:51:cd:f6:c1:16:a1:65:d0:04:4a:08:ad:2f: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:49:8F:17:80:D7:35:80:FD:14:E8:59:A0:22:25:7C:52:F5:8B X509v3 Authority Key Identifier: keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:15:a4:5f:aa:ef:7d:80:f1:34:85:3e:0c:11:a5:83:35:c3: ec:cd:d7:1c:77:7e:e3:83:01:02:68:4b:2b:8e:36:98:86:64: 63:d5:f1:81:17:fd:1c:da:0c:7a:d8:17:8a:37:73:0d:ee:5c: 45:7b:4e:57:92:7e:30:9f:19:6c:d5:a8:de:f1:60:5e:e8:f4: 4f:98:09:f0:90:cc:70:be:79:9a:60:53:5f:78:6a:4c:23:81: ca:aa:ed:ff:94:0f:9c:f0:85:2f:3d:a4:82:14:20:77:73:8c: 9f:82:88:91:36:e0:44:19:60:37:47:43:b9:fe:c0:7a:b9:fe: 0e:91:1f:ba:9e:fe:dc:1b:fb:e7:62:f7:b8:69:52:e5:84:8e: 1f:68:ec:26:67:c7:f5:4d:c3:3f:42:6b:8d:20:5b:3b:20:28: c7:91:f7:68:e6:6c:38:97:77:db:cd:5c:86:c4:85:a4:3a:20: 2e:1a:be:0c:1d:31:b6:ed:71:fd:f5:c3:d2:f9:7f:8c:bb:eb: a9:a7:b6:16:0d:63:e6:a1:17:1f:ec:9b:9e:11:9f:ba:e9:82: 46:a1:be:c0:1b:9a:e4:cb:6b:53:08:5b:5e:79:f5:58:c3:57: 3a:9e:c1:96:3a:18:46:59:08:f4:eb:dc:3d:38:70:cc:af:c2: 5b:18:fe:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjYzMjExMC8GA1UEBRMoODQzMThFODFCMkU1OUY2MTE0QjEwMkZBNDUwODMzN0RF OTE1QzM5MzAeFw0yNTExMDMwNzI5MTJaFw0yNTExMTAwNzI5MTJaMBgxFjAUBgNV BAMTDTY5MDg1OWM4LTFjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFi6vdPFTsqtLpYJ9wTtfhXTXSdFLwYMZAt4h+e32zdGXyv5UcEJri8Iy58Yzo +GgS3f2qtKm1QX8GPGOmUdgFQtBSrZdloFxlp6O7bQYWPfQnNmFD8+CJnCE4sQHH qtB0nDf/c69ixY3JJ+wjBjIPGAoDGWeVRvMJn9C5q222wRrIj9hlec8lQQckJJdd lLqiykWgpd0lJFrZkivQvL1Ej2nB2XdZS3/sbQRKTZM4O+5Z+6Qs0M9hPgn1X7JK Yx/fBZUizEOgD+QXn/oA3Zz3YN1jtN1i/9ceeGdGS183fZRSRm43PB23tvAKL+AY H9MpUc32wRahZdAESgitL25BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUzBJjxeA 1zWA/RToWaAiJXxS9YswHwYDVR0jBBgwFoAUhDGOgbLln2EUsQL6RQgzfekVw5Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NjMyL0FCNUE4NzA2NUUw RDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJFVXNRTDZSUWd6ZmVrVnc1 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaERHT2diTGxuMkVVc1FMNlJRZ3pmZWtWdzVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 NjMyL0FCNUE4NzA2NUUwRDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJF VXNRTDZSUWd6ZmVrVnc1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsVpF+q732A8TSFPgwRpYM1w+zN1xx3fuODAQJoSyuONpiGZGPV8YEX /RzaDHrYF4o3cw3uXEV7TleSfjCfGWzVqN7xYF7o9E+YCfCQzHC+eZpgU194akwj gcqq7f+UD5zwhS89pIIUIHdzjJ+CiJE24EQZYDdHQ7n+wHq5/g6RH7qe/twb++di 97hpUuWEjh9o7CZnx/VNwz9Ca40gWzsgKMeR92jmbDiXd9vNXIbEhaQ6IC4avgwd Mbbtcf31w9L5f4y766mnthYNY+ahFx/sm54Rn7rpgkahvsAbmuTLa1MIW1559VjD VzqewZY6GEZZCPTr3D04cMyvwlsY/kI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:25 2025 by rpki-client