$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft File: HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json) Hash identifier: 1UIKVJZwQWIXDEFjQGHXF+2GJsLcEaJAA0cGZHY4wuU= Subject key identifier: BF:90:43:AF:63:99:1E:39:46:31:6A:41:E1:98:78:04:FC:0D:1E:81 Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB Certificate issuer: /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft Manifest number: 09A1 Signing time: Tue 04 Nov 2025 20:08:35 +0000 Manifest this update: Tue 04 Nov 2025 20:08:35 +0000 Manifest next update: Tue 11 Nov 2025 20:08:35 +0000 Files and hashes: 1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: TS8zbmK8D2ppbrcZdFhBcoR+wPqcVJwoAs4z7RT0Arw=) 2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: W0ibhleTeTRf9SQxlBk7HfDKAYLQO1EEAaw2Uj8cqZ4=) 3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: QSi8XLx3OVsMnyA15sUJv5CABNiE2WZTW3Q/q6D7Y/8=) 4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: VxFJ2WxHqvcaRXlyN+j6s6uxQHhjavcFYpy6cqbLq00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB Validity Not Before: Nov 4 20:08:35 2025 GMT Not After : Nov 11 20:08:35 2025 GMT Subject: CN=690a5d43-b948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:0c:8b:7e:ab:12:db:6e:a0:2d:9c:1d:f5: a0:82:b2:ad:50:3c:49:c7:33:48:ee:fc:be:44:aa: ea:61:56:ad:ec:28:c0:cb:2c:97:58:05:88:8c:10: 65:30:17:f2:ee:fe:ad:62:40:fb:2a:60:87:2d:2c: 9a:6e:f3:92:3c:49:fd:30:39:46:99:c7:b9:c0:48: 21:a5:37:bb:da:0b:6f:3b:29:88:53:8a:43:e8:51: 5f:43:31:96:b6:d5:88:3a:cf:7a:41:a3:6b:4c:61: 81:31:a2:48:61:ba:47:eb:ab:e5:70:12:98:fb:69: 81:5b:01:46:c9:cc:b3:0e:70:12:bd:f3:c7:3e:40: a1:28:7e:0f:60:fd:68:84:bb:89:1e:aa:f0:87:54: 54:f5:c5:4d:57:0d:98:1d:a9:74:f0:2d:8f:92:5c: bb:21:10:48:c1:1f:04:9e:05:fe:e7:2b:3f:4a:d1: 93:80:7e:db:19:3a:d2:cc:41:4c:b4:19:aa:c3:3d: 4f:04:00:cc:bb:92:e9:2d:43:a7:76:3e:0d:8c:ce: 69:72:82:20:d7:f0:54:b7:4a:a5:9c:4b:16:20:17: e0:9a:52:e5:f2:32:b2:ee:fe:1f:ff:91:ad:21:32: 07:3c:b3:98:41:3d:d6:0c:35:a5:d7:9b:14:fb:4a: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:90:43:AF:63:99:1E:39:46:31:6A:41:E1:98:78:04:FC:0D:1E:81 X509v3 Authority Key Identifier: keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0d:04:3b:35:ac:8a:73:1c:68:c5:fb:30:7f:fb:0e:8e:b8: a7:b9:f3:0d:79:f9:8e:88:16:64:98:b3:09:73:5d:72:21:c5: 72:5b:67:d4:63:3f:8c:a2:06:6b:b8:8e:e4:6b:61:cf:f5:43: d6:8d:7e:4e:1d:e9:c8:f3:a5:e1:ea:7c:b5:c4:2c:73:d4:5b: 14:3f:8c:cb:aa:92:a5:bc:19:d4:b5:46:56:91:fd:1a:0a:29: 5b:bf:e6:95:4c:fd:d4:d9:72:fb:0d:20:a8:0f:0c:9c:18:48: 89:9e:2a:97:83:6a:23:83:fb:a2:e9:0b:28:39:57:7b:a1:36: fc:2c:46:19:da:dd:ad:2e:a7:77:14:4d:8c:9b:06:46:53:9b: 18:e0:02:51:35:75:7e:ba:35:0e:d1:f5:5d:c7:64:f2:0c:83: 9f:45:e7:08:26:62:00:7b:2f:ea:f1:8a:53:d4:44:46:bf:d0: 29:69:ee:2b:ec:62:22:3d:93:0b:95:7a:28:f2:29:2f:b7:9a: f5:13:0b:74:11:b8:d8:aa:de:51:60:71:c5:14:35:7c:91:0c: 52:f5:4f:36:87:00:c0:62:2d:11:d5:fa:33:e9:86:d6:3a:9f: 6e:2d:74:cb:8c:4e:a3:f8:c4:14:72:a7:0c:e3:37:d7:b9:4b: 6f:ba:39:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNEODYxMTAvBgNVBAUTKDFDOUJBMkM1RkVBOEMwMzREQTU1MUZEQURDNjJBNTNB N0EwMkU1REIwHhcNMjUxMTA0MjAwODM1WhcNMjUxMTExMjAwODM1WjAYMRYwFAYD VQQDEw02OTBhNWQ0My1iOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUQMi36rEttuoC2cHfWggrKtUDxJxzNI7vy+RKrqYVat7CjAyyyXWAWIjBBl MBfy7v6tYkD7KmCHLSyabvOSPEn9MDlGmce5wEghpTe72gtvOymIU4pD6FFfQzGW ttWIOs96QaNrTGGBMaJIYbpH66vlcBKY+2mBWwFGycyzDnASvfPHPkChKH4PYP1o hLuJHqrwh1RU9cVNVw2YHal08C2Pkly7IRBIwR8EngX+5ys/StGTgH7bGTrSzEFM tBmqwz1PBADMu5LpLUOndj4NjM5pcoIg1/BUt0qlnEsWIBfgmlLl8jKy7v4f/5Gt ITIHPLOYQT3WDDWl15sU+0o9WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+QQ69j mR45RjFqQeGYeAT8DR6BMB8GA1UdIwQYMBaAFBybosX+qMA02lUf2txipTp6AuXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4Ni9DNjdEMTc2RTlB NUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dEVGFWUl9hM0dLbE9ub0M1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hKdWl4ZjZvd0RUYVZSX2EzR0tsT25vQzVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Q4Ni9DNjdEMTc2RTlBNUYxMUVBOUY2MjZCNUVDNEY5QUUwMi9ISnVpeGY2b3dE VGFWUl9hM0dLbE9ub0M1ZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJDQQ7NayKcxxoxfswf/sOjrinufMNefmOiBZkmLMJc11yIcVyW2fU Yz+MogZruI7ka2HP9UPWjX5OHenI86Xh6ny1xCxz1FsUP4zLqpKlvBnUtUZWkf0a Cilbv+aVTP3U2XL7DSCoDwycGEiJniqXg2ojg/ui6QsoOVd7oTb8LEYZ2t2tLqd3 FE2MmwZGU5sY4AJRNXV+ujUO0fVdx2TyDIOfRecIJmIAey/q8YpT1ERGv9Apae4r 7GIiPZMLlXoo8ikvt5r1Ewt0EbjYqt5RYHHFFDV8kQxS9U82hwDAYi0R1foz6YbW Op9uLXTLjE6j+MQUcqcM4zfXuUtvujkH -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:59 2025 by rpki-client