$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft File: taHQH3ui3UVMy-zTGGzhR6_-G64.mft (raw, json) Hash identifier: uWYEFBt0iWYO/6kFYTZvz2Cg2hKeEkcP1jAO2w05YKA= Subject key identifier: 7B:7A:11:67:35:E7:56:44:53:46:CC:B1:90:5B:A3:FF:77:C9:A7:7F Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft Manifest number: 34DB Signing time: Sun 02 Nov 2025 15:08:01 +0000 Manifest this update: Sun 02 Nov 2025 15:08:01 +0000 Manifest next update: Sun 09 Nov 2025 15:08:01 +0000 Files and hashes: 1: taHQH3ui3UVMy-zTGGzhR6_-G64.crl (hash: hfaeVt4/piLFGvWTjiWp8kzPwjauwvrOVxRBWVnhS54=) 2: 2C49CD02723D11EB8F298B41C4F9AE02.roa (hash: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0, serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Nov 2 15:08:01 2025 GMT Not After : Nov 9 15:08:01 2025 GMT Subject: CN=690773d1-711f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:da:8b:37:5e:19:78:78:36:96:68:aa:a5:f3: fb:27:0a:e4:3a:c7:ac:c9:38:50:68:bf:0b:4c:90: 44:e4:d7:fa:89:08:d7:b4:f8:b0:26:c0:63:69:6c: 4c:40:b2:19:35:2d:20:99:e6:40:66:61:37:9e:90: 7d:d9:e7:1c:cc:f4:43:63:4f:17:b3:bf:c7:ea:ed: 21:bf:1a:bc:74:f8:3c:b8:dc:48:12:db:44:fa:1b: 10:85:10:bd:90:59:25:59:ca:ec:29:1a:43:00:36: 41:6f:1d:91:c0:bf:29:06:d8:3b:ef:9d:e5:05:bd: d1:bc:20:c8:fe:ad:26:4c:f8:36:bc:6a:cf:9e:f1: c5:fb:4a:7e:38:cd:e4:87:08:92:f8:11:49:0b:87: a1:e0:de:c9:cc:33:66:a8:e5:d2:11:cb:78:b4:da: 77:27:b0:96:b4:49:f8:52:ac:0b:f3:ef:fb:7f:c6: 67:c2:0c:fe:bd:7d:ba:6b:f6:56:b0:0e:e0:4e:fe: ba:78:70:b7:bc:6c:2e:f0:e0:47:0f:64:3c:7f:c7: 0f:8a:5a:38:d0:d0:e3:91:da:6e:9f:0e:7f:ef:d8: 4b:75:64:b6:0b:4d:24:31:2b:14:63:53:6b:f6:d1: 61:b7:90:f8:da:84:19:d3:08:c6:8a:7e:6f:9f:3a: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:11:67:35:E7:56:44:53:46:CC:B1:90:5B:A3:FF:77:C9:A7:7F X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:b3:d8:62:56:7d:9f:4b:b5:46:da:bd:f3:fa:7f:d9:e0:6a: 3a:46:cf:84:48:eb:7b:c8:eb:99:97:b1:25:41:a0:eb:a0:d6: 29:33:7e:a2:95:2f:ed:cb:f9:fc:e6:c3:53:4e:7d:a2:52:d0: cc:f1:8e:9e:3b:2a:35:dd:7b:61:3b:cd:ba:ab:a2:b0:cc:65: b4:51:19:38:2c:56:a2:79:be:15:5d:e6:d4:e1:b7:2b:8e:53: ff:5b:a5:23:ff:84:4e:e4:09:cc:c0:78:07:28:a7:f9:ca:98: 70:d5:97:95:57:bf:92:00:48:c7:9f:fa:b5:df:56:d5:e7:8a: dd:3e:4b:7c:42:5e:d5:e9:1e:6b:35:f0:33:ca:17:08:69:81: c0:71:b0:70:a4:95:58:6c:63:70:05:75:e4:1f:41:ad:56:8c: a6:a2:e4:8e:67:28:f5:87:85:cd:bf:8b:4f:72:ee:ca:04:a8: 7f:77:eb:03:3f:c3:8c:1e:1a:d8:2c:87:f3:2a:8c:8e:68:84: ee:c6:b0:3a:2f:d2:3b:d2:26:ea:c5:5d:08:2f:2b:7f:a7:78: 0d:74:8f:44:f7:ae:c4:ba:77:f2:5b:f3:3d:1c:98:83:9b:08: 43:ac:29:7c:12:ff:0a:27:c5:08:0c:88:e6:d7:d2:c4:ba:c8: 09:5c:7c:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjUxMTAyMTUwODAxWhcNMjUxMTA5MTUwODAxWjAYMRYwFAYD VQQDEw02OTA3NzNkMS03MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdqLN14ZeHg2lmiqpfP7JwrkOsesyThQaL8LTJBE5Nf6iQjXtPiwJsBjaWxM QLIZNS0gmeZAZmE3npB92ecczPRDY08Xs7/H6u0hvxq8dPg8uNxIEttE+hsQhRC9 kFklWcrsKRpDADZBbx2RwL8pBtg7753lBb3RvCDI/q0mTPg2vGrPnvHF+0p+OM3k hwiS+BFJC4eh4N7JzDNmqOXSEct4tNp3J7CWtEn4UqwL8+/7f8Znwgz+vX26a/ZW sA7gTv66eHC3vGwu8OBHD2Q8f8cPilo40NDjkdpunw5/79hLdWS2C00kMSsUY1Nr 9tFht5D42oQZ0wjGin5vnzoYSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt6EWc1 51ZEU0bMsZBbo/93yad/MB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 N0VGMC9DMEJFRjNDMDFEQTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNV Vk15LXpUR0d6aFI2Xy1HNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAis9hiVn2fS7VG2r3z+n/Z4Go6Rs+ESOt7yOuZl7ElQaDroNYpM36i lS/ty/n85sNTTn2iUtDM8Y6eOyo13XthO826q6KwzGW0URk4LFaieb4VXebU4bcr jlP/W6Uj/4RO5AnMwHgHKKf5yphw1ZeVV7+SAEjHn/q131bV54rdPkt8Ql7V6R5r NfAzyhcIaYHAcbBwpJVYbGNwBXXkH0GtVoymouSOZyj1h4XNv4tPcu7KBKh/d+sD P8OMHhrYLIfzKoyOaITuxrA6L9I70ibqxV0ILyt/p3gNdI9E967EunfyW/M9HJiD mwhDrCl8Ev8KJ8UIDIjm19LEusgJXHwd -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:40 2025 by rpki-client