$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: 4Q8ZOJxRhGsltqW5NMOif/Nj6O9BNJi/mRp+otC6ewY= Subject key identifier: 9B:A2:12:71:FF:96:5E:C7:A9:11:4B:99:EF:96:B4:7E:9E:47:68:20 Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 014A Signing time: Mon 03 Nov 2025 04:26:22 +0000 Manifest this update: Mon 03 Nov 2025 04:26:21 +0000 Manifest next update: Mon 10 Nov 2025 04:26:21 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: +iSpYVV7GaKnbHFX16clQ+KnNKVQIeYV+FcNnbeIn1Q=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: Kq0ugwH9OuTBQBxfFQ8ElxHtYYyZ1NmJOiuKPPFe80I=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Nov 3 04:26:21 2025 GMT Not After : Nov 10 04:26:21 2025 GMT Subject: CN=69082eed-c2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:5a:6c:18:27:f0:be:12:66:31:e9:b3:95: 9b:41:f2:1f:7f:8b:87:16:2d:81:ae:6e:cd:39:2e: 38:63:a8:c3:e9:dc:23:3f:e3:0a:31:ce:d3:77:d5: 5a:80:49:67:e6:be:c0:6e:09:9e:af:62:e4:9b:df: 26:92:dd:5a:ef:2e:fd:f1:8a:ec:69:28:79:5d:8d: 53:de:91:95:f7:ec:dd:7c:35:5b:1e:2a:3f:89:28: 9a:2a:42:e5:68:82:a9:b3:9e:ce:66:22:a6:08:b5: c3:ac:f4:b1:12:2f:c1:02:1c:9e:53:54:31:17:1d: 58:1d:8b:8b:d2:30:72:90:4f:8d:03:e6:88:e2:3d: 9d:33:fe:fb:e6:72:fb:78:88:fb:f2:61:2b:61:ad: 3e:da:3b:76:f7:fc:df:b2:78:cc:fc:a1:71:62:ed: 64:8a:7e:50:ec:1a:69:77:f4:a1:1f:e0:1b:fa:23: 5b:1b:88:53:05:2f:e6:ce:31:33:de:6e:58:d5:bc: 26:6f:50:ba:89:bb:37:8a:1d:06:2b:1b:73:74:27: 86:e9:38:40:c0:0c:69:54:eb:64:5a:21:50:c4:74: 2b:7f:92:f9:d4:05:29:05:60:a2:52:21:46:e1:56: 82:4c:2b:37:cd:a9:c7:8d:8f:f4:5f:db:90:5c:57: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:12:71:FF:96:5E:C7:A9:11:4B:99:EF:96:B4:7E:9E:47:68:20 X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:35:59:d5:5a:ed:c6:45:57:7b:b0:a9:ba:97:0c:ed:48:bb: 6f:ce:fe:fe:40:64:a0:cf:38:dd:6b:93:39:b4:f2:fd:e9:54: 15:eb:0b:f0:7f:d2:8b:7d:fa:d3:3d:9c:dc:68:da:c8:24:db: 41:22:09:de:e2:57:fa:07:94:ca:8d:51:9f:da:82:39:fd:a6: 45:84:b7:3a:94:a3:17:95:07:3f:59:a4:d9:08:1e:58:6e:e4: 8a:70:ba:b1:f5:a0:11:4c:88:cd:38:77:a9:90:fe:3a:a3:10: fe:9b:f0:d7:8a:a7:94:cf:1f:42:79:50:8e:ee:f7:94:fc:18: 6b:1f:df:69:05:42:75:51:2f:e3:23:5a:b4:3b:57:43:20:7a: 41:4c:b2:c1:52:40:cf:0e:68:d6:ac:ad:37:61:8d:9b:77:fe: 39:0c:42:55:9e:73:07:5a:2a:b5:ec:f7:46:0b:5e:08:15:70: ad:52:f2:8b:53:2c:3b:bb:3c:9b:40:ec:21:89:cc:1e:0a:8f: 34:fb:23:86:48:81:20:aa:97:7b:ee:85:68:fc:c5:fe:f3:ca: f0:a2:17:0e:0c:2f:aa:ad:08:e5:ae:6a:37:dc:46:f9:93:63: 31:aa:41:49:3f:53:13:4b:2b:9e:3d:89:c2:e3:b7:e7:f3:32: 39:64:21:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUxMTAzMDQyNjIxWhcNMjUxMTEwMDQyNjIxWjAYMRYwFAYD VQQDEw02OTA4MmVlZC1jMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr01abBgn8L4SZjHps5WbQfIff4uHFi2Brm7NOS44Y6jD6dwjP+MKMc7Td9Va gEln5r7Abgmer2Lkm98mkt1a7y798YrsaSh5XY1T3pGV9+zdfDVbHio/iSiaKkLl aIKps57OZiKmCLXDrPSxEi/BAhyeU1QxFx1YHYuL0jBykE+NA+aI4j2dM/775nL7 eIj78mErYa0+2jt29/zfsnjM/KFxYu1kin5Q7Bppd/ShH+Ab+iNbG4hTBS/mzjEz 3m5Y1bwmb1C6ibs3ih0GKxtzdCeG6ThAwAxpVOtkWiFQxHQrf5L51AUpBWCiUiFG 4VaCTCs3zanHjY/0X9uQXFct8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuiEnH/ ll7HqRFLme+WtH6eR2ggMB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoNVnVWu3GRVd7sKm6lwztSLtvzv7+QGSgzzjda5M5tPL96VQV6wvw f9KLffrTPZzcaNrIJNtBIgne4lf6B5TKjVGf2oI5/aZFhLc6lKMXlQc/WaTZCB5Y buSKcLqx9aARTIjNOHepkP46oxD+m/DXiqeUzx9CeVCO7veU/BhrH99pBUJ1US/j I1q0O1dDIHpBTLLBUkDPDmjWrK03YY2bd/45DEJVnnMHWiq17PdGC14IFXCtUvKL Uyw7uzybQOwhicweCo80+yOGSIEgqpd77oVo/MX+88rwohcODC+qrQjlrmo33Eb5 k2MxqkFJP1MTSyuePYnC47fn8zI5ZCG2 -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:18 2025 by rpki-client