$ rpki-client -vvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft File: hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json) Hash identifier: 99r0ZMZadJBZVzQI8wftY1l2mK/NLhI/V2qXhC4vtzg= Subject key identifier: 6C:6F:71:5C:BF:CF:DD:C0:46:4D:78:F2:1D:81:53:05:2B:98:C8:CC Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D Certificate issuer: /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft Manifest number: 03B1 Signing time: Wed 05 Nov 2025 00:47:30 +0000 Manifest this update: Wed 05 Nov 2025 00:47:30 +0000 Manifest next update: Wed 12 Nov 2025 00:47:30 +0000 Files and hashes: 1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: vdnuXipS/RQytipbizo+xCraoKK1cAme+UCdh4WVTqo=) 2: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: fxFlUsOaGScQkl9QgTozAWohlmX4iM9s7uV5Ua++ETg=) 3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: u3mehOty6gVz9qRridn7xauePsp938KB+uM0lLKTBHU=) 4: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: OvtIBWIONkhrTQi/ko/Qtu38pVg+GOOY2iprHCNF2R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D Validity Not Before: Nov 5 00:47:30 2025 GMT Not After : Nov 12 00:47:30 2025 GMT Subject: CN=690a9ea2-d619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:a1:38:a5:55:9d:be:5e:c7:ac:e4:69:94: 38:38:ba:38:85:6b:73:40:7e:6f:a7:73:4f:5c:18: 35:51:de:88:98:0f:75:64:ab:5e:9a:4c:f7:ac:bd: e7:21:aa:58:6a:11:7b:17:55:e3:6a:9a:1b:b4:27: e5:b8:21:bb:db:e9:bc:7e:99:ad:3e:22:e3:21:b9: 24:31:f4:ad:0b:48:b2:e8:74:51:f7:a7:89:dd:b5: a8:66:1b:65:36:74:bd:be:7d:76:e1:78:dd:08:d7: a2:2e:ca:5a:c0:ac:8c:a0:34:6d:23:4e:0f:d3:47: 25:63:c9:bd:0f:f3:29:0e:7b:be:1b:c0:ea:18:e6: ec:ee:fc:63:66:81:38:d0:89:53:32:bd:52:be:25: c5:e0:f6:6c:41:fa:cb:87:ed:5b:25:c9:32:2f:60: c2:32:d4:6d:cb:d1:f1:94:a3:0d:ab:9a:aa:f4:3b: 7f:cd:11:66:4d:e6:ff:29:db:ab:db:2c:56:74:2a: a4:37:f8:3a:18:c5:45:e5:90:fa:df:58:27:28:f2: d0:66:f2:3a:ac:75:08:03:47:86:36:8e:86:f4:f7: 65:5b:7c:5a:b3:48:b2:26:01:7e:f8:80:d0:e5:c9: 67:3f:fe:99:63:8b:81:db:92:d8:3b:86:6f:12:96: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6F:71:5C:BF:CF:DD:C0:46:4D:78:F2:1D:81:53:05:2B:98:C8:CC X509v3 Authority Key Identifier: keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f2:f4:51:38:4b:1b:8e:d3:d6:b3:a8:db:2a:ee:04:88:34: 4f:31:b9:98:c6:20:f1:67:4f:fa:46:30:05:1d:51:70:d1:f7: c8:93:ef:00:7a:c8:3b:13:bb:23:74:b9:2a:75:38:8b:85:93: 82:45:11:63:df:ad:60:ca:87:8e:17:f3:c1:ab:cc:dc:7f:ae: 6a:37:93:4f:b9:a1:20:72:84:2d:0e:2f:44:c5:27:7a:33:b3: f7:02:ff:9a:b2:d3:92:30:16:51:30:91:58:dc:27:64:f5:83: b1:91:99:40:53:d0:0b:79:c7:12:11:13:5b:61:05:63:78:03: 84:96:df:b5:6f:57:d4:39:dd:3c:b8:d0:2f:f2:55:f0:8a:72: 71:80:04:f3:aa:11:21:ae:70:63:90:f4:02:74:a9:bf:fd:c9: 02:8f:c6:c6:ba:bd:d7:e3:3d:3e:73:dc:38:49:9b:97:0f:c4: fc:63:5a:0a:69:fb:e5:fe:81:12:ac:5d:c7:29:03:00:e9:b8: 1d:fc:90:b9:03:04:6a:5c:3b:57:61:b5:98:4a:63:19:00:34: de:03:81:8e:40:9a:93:2e:53:31:d4:91:49:fd:c6:87:8b:cd: c8:e1:a9:ba:17:66:2d:15:75:7c:bf:01:af:42:83:45:d1:95: d8:9a:2c:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzMzkxMTAvBgNVBAUTKDg3MkU1QUI1MzlCRTQzODU3NDAzRDRGNUQ0NUE1NDcy QkIyMDdBNkQwHhcNMjUxMTA1MDA0NzMwWhcNMjUxMTEyMDA0NzMwWjAYMRYwFAYD VQQDEw02OTBhOWVhMi1kNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsWhOKVVnb5ex6zkaZQ4OLo4hWtzQH5vp3NPXBg1Ud6ImA91ZKtemkz3rL3n IapYahF7F1XjapobtCfluCG72+m8fpmtPiLjIbkkMfStC0iy6HRR96eJ3bWoZhtl NnS9vn124XjdCNeiLspawKyMoDRtI04P00clY8m9D/MpDnu+G8DqGObs7vxjZoE4 0IlTMr1SviXF4PZsQfrLh+1bJckyL2DCMtRty9HxlKMNq5qq9Dt/zRFmTeb/Kdur 2yxWdCqkN/g6GMVF5ZD631gnKPLQZvI6rHUIA0eGNo6G9PdlW3xas0iyJgF++IDQ 5clnP/6ZY4uB25LYO4ZvEpau/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxvcVy/ z93ARk148h2BUwUrmMjMMB8GA1UdIwQYMBaAFIcuWrU5vkOFdAPU9dRaVHK7IHpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzMzOS80NTI2Nzk3MEIy RkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0VjBBOVQxMUZwVWNyc2dl bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h5NWF0VG0tUTRWMEE5VDExRnBVY3JzZ2VtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzMzOS80NTI2Nzk3MEIyRkExMUVDQjU3NENFN0ZDNEY5QUUwMi9oeTVhdFRtLVE0 VjBBOVQxMUZwVWNyc2dlbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD8vRROEsbjtPWs6jbKu4EiDRPMbmYxiDxZ0/6RjAFHVFw0ffIk+8A esg7E7sjdLkqdTiLhZOCRRFj361gyoeOF/PBq8zcf65qN5NPuaEgcoQtDi9ExSd6 M7P3Av+astOSMBZRMJFY3Cdk9YOxkZlAU9ALeccSERNbYQVjeAOElt+1b1fUOd08 uNAv8lXwinJxgATzqhEhrnBjkPQCdKm//ckCj8bGur3X4z0+c9w4SZuXD8T8Y1oK afvl/oESrF3HKQMA6bgd/JC5AwRqXDtXYbWYSmMZADTeA4GOQJqTLlMx1JFJ/caH i83I4am6F2YtFXV8vwGvQoNF0ZXYmiy3 -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:45 2025 by rpki-client