$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft File: hwGGtlfRGymKhLAkIO504fu1woI.mft (raw, json) Hash identifier: l2VctMQA5Xz/vWo3dBgKDj7fWrZ/lK05edEKiO3YkfQ= Subject key identifier: 8F:86:93:8D:11:B9:EC:34:3B:77:62:AF:BF:42:DD:92:59:75:E3:A6 Authority key identifier: 87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82 Certificate issuer: /CN=A9191885/serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft Manifest number: 0143 Signing time: Wed 05 Nov 2025 04:31:04 +0000 Manifest this update: Wed 05 Nov 2025 04:31:03 +0000 Manifest next update: Wed 12 Nov 2025 04:31:03 +0000 Files and hashes: 1: hwGGtlfRGymKhLAkIO504fu1woI.crl (hash: 3I3uLwrnnYsfFVSwX8YtLlxB1BWnGpmi70xx2JW9mzY=) 2: 8E31656CC9FF11EEA53CA25CC4F9AE02.roa (hash: WWVsNPRylFl9Oj5E0+wxXjfLrjfPmxjiDu6REzUJaLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=870186B657D11B298A84B02420EE74E1FBB5C282 Validity Not Before: Nov 5 04:31:03 2025 GMT Not After : Nov 12 04:31:03 2025 GMT Subject: CN=690ad308-c0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:bd:6c:c8:bd:3a:c4:76:3c:37:ca:9e:00: 5d:3c:6a:37:c0:ed:5f:b7:9b:ff:0f:f0:99:2d:f5: 22:bf:f2:67:91:4c:04:41:b7:21:45:2c:d7:01:0d: 44:8a:c6:da:08:51:88:13:e2:5b:e1:58:db:f8:a4: 04:64:b2:ed:64:01:0a:d7:49:c5:4c:fa:1a:7e:b3: 1c:bf:4d:27:06:9c:67:92:9b:7e:ee:6f:c7:25:fa: c5:da:cb:17:9d:d3:94:41:3a:dc:94:8c:15:66:33: 41:ed:1f:17:5f:45:12:59:4f:97:b1:1d:65:aa:60: 54:5f:b9:e8:2b:7b:f4:a4:34:cd:f0:fa:5c:18:f8: f4:73:96:5d:ae:9f:ed:90:1c:5d:55:3c:c2:7b:ff: 8a:fe:53:10:99:4b:c0:9d:5d:cf:9a:37:0f:34:f8: 0a:7c:ad:54:eb:63:57:b4:44:92:dc:d4:d6:dc:46: 92:07:85:07:5c:3d:3e:db:c9:12:2b:52:f9:91:4d: 5b:e8:58:59:26:27:79:e2:85:4a:65:7f:f6:ab:d4: 3f:6a:60:1b:0f:2a:a6:0e:99:f8:ae:da:db:f7:90: 19:87:ea:29:a3:0e:2b:a3:bf:c3:28:1d:61:12:dd: 58:d5:a6:63:42:52:0f:be:1b:42:b0:be:21:90:aa: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:93:8D:11:B9:EC:34:3B:77:62:AF:BF:42:DD:92:59:75:E3:A6 X509v3 Authority Key Identifier: keyid:87:01:86:B6:57:D1:1B:29:8A:84:B0:24:20:EE:74:E1:FB:B5:C2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hwGGtlfRGymKhLAkIO504fu1woI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/D5FEA3DEC9FD11EEA677793BC4F9AE02/hwGGtlfRGymKhLAkIO504fu1woI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:3a:06:99:75:53:50:a9:a1:8b:f6:a4:78:19:fc:8e:df:c0: 93:30:e1:13:fb:21:32:23:5e:46:18:e9:ab:4b:08:dd:63:59: d6:d6:b6:b6:9a:75:0e:88:a8:7d:04:aa:1d:de:6b:d9:3b:0e: b7:0e:0d:0e:46:d3:10:96:41:6d:f1:4f:f9:c3:7e:eb:3d:d8: bf:b2:bf:14:eb:2c:ef:1f:f7:71:2e:de:53:96:5b:ca:cb:96: 1a:04:1a:c1:0b:f5:dc:2d:a4:14:e7:5c:3f:3a:b8:b5:4c:d8: 0f:ec:07:58:52:60:b5:08:f3:bf:ec:26:45:46:c4:10:fb:4a: 7e:c2:f2:cf:6f:c6:1a:96:30:a3:73:22:79:bc:40:ce:89:40: 82:08:cf:e6:81:6b:d7:3f:4b:93:46:2f:a3:68:73:f6:dd:cc: 24:d3:2a:a5:c0:11:e4:e2:f8:58:f2:36:e7:1c:d7:7a:b4:53: 40:44:ae:c9:7c:11:08:b0:fc:1d:c1:2c:8e:3a:84:72:d4:bc: a2:d6:87:e6:46:3b:a0:0b:df:f5:d9:30:a3:d2:d5:26:22:25: f0:79:1a:9c:e8:62:e3:19:47:b9:b7:3c:6c:14:f3:5d:a5:29: ef:b6:fd:1c:03:ad:a9:5a:4c:96:b5:99:a6:ac:2a:8a:7a:1d: 8f:0a:64:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKDg3MDE4NkI2NTdEMTFCMjk4QTg0QjAyNDIwRUU3NEUx RkJCNUMyODIwHhcNMjUxMTA1MDQzMTAzWhcNMjUxMTEyMDQzMTAzWjAYMRYwFAYD VQQDEw02OTBhZDMwOC1jMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJq9bMi9OsR2PDfKngBdPGo3wO1ft5v/D/CZLfUiv/JnkUwEQbchRSzXAQ1E isbaCFGIE+Jb4Vjb+KQEZLLtZAEK10nFTPoafrMcv00nBpxnkpt+7m/HJfrF2ssX ndOUQTrclIwVZjNB7R8XX0USWU+XsR1lqmBUX7noK3v0pDTN8PpcGPj0c5Zdrp/t kBxdVTzCe/+K/lMQmUvAnV3PmjcPNPgKfK1U62NXtESS3NTW3EaSB4UHXD0+28kS K1L5kU1b6FhZJid54oVKZX/2q9Q/amAbDyqmDpn4rtrb95AZh+opow4ro7/DKB1h Et1Y1aZjQlIPvhtCsL4hkKpl5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+Gk40R uew0O3dir79C3ZJZdeOmMB8GA1UdIwQYMBaAFIcBhrZX0RspioSwJCDudOH7tcKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ENUZFQTNERUM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5bUtoTEFrSU81MDRmdTF3 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h3R0d0bGZSR3ltS2hMQWtJTzUwNGZ1MXdvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ENUZFQTNERUM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9od0dHdGxmUkd5 bUtoTEFrSU81MDRmdTF3b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4OgaZdVNQqaGL9qR4GfyO38CTMOET+yEyI15GGOmrSwjdY1nW1ra2 mnUOiKh9BKod3mvZOw63Dg0ORtMQlkFt8U/5w37rPdi/sr8U6yzvH/dxLt5TllvK y5YaBBrBC/XcLaQU51w/Ori1TNgP7AdYUmC1CPO/7CZFRsQQ+0p+wvLPb8YaljCj cyJ5vEDOiUCCCM/mgWvXP0uTRi+jaHP23cwk0yqlwBHk4vhY8jbnHNd6tFNARK7J fBEIsPwdwSyOOoRy1Lyi1ofmRjugC9/12TCj0tUmIiXweRqc6GLjGUe5tzxsFPNd pSnvtv0cA62pWkyWtZmmrCqKeh2PCmTF -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:59 2025 by rpki-client