$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: MInrBOyvcDehd/NPbuMhoe5qkC5AXffeVeZIDFgNuO0= Subject key identifier: 29:50:CC:73:65:FC:60:53:99:92:63:C0:A2:9D:8A:7B:61:2A:C7:38 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 034F Signing time: Mon 03 Nov 2025 00:56:21 +0000 Manifest this update: Mon 03 Nov 2025 00:56:21 +0000 Manifest next update: Mon 10 Nov 2025 00:56:21 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: FwayBmhZGAY3WLMv2plnublOuBxboRwpMD0tNf5QooQ=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Nov 3 00:56:21 2025 GMT Not After : Nov 10 00:56:21 2025 GMT Subject: CN=6907fdb5-46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:72:58:8e:c0:52:11:d8:da:53:31:1a:a7: cc:05:c5:37:23:55:2a:24:13:30:72:b6:79:25:b0: 9b:df:47:3a:e4:96:a2:58:52:58:a5:94:f2:11:5a: 31:4a:b6:5d:75:02:b7:94:93:eb:c9:c7:d6:5a:f5: 06:96:d2:8e:35:74:a8:c9:72:b1:4a:67:e8:cf:7a: 8d:d1:69:a7:a5:42:68:b9:5e:c7:fe:ee:13:47:77: 3b:72:25:cc:34:1e:f8:bf:53:af:23:76:98:48:64: 61:5b:9c:e0:11:61:50:c7:0c:43:6a:98:a2:ac:91: 54:c2:30:d5:30:82:03:07:aa:37:96:27:38:c0:84: 33:80:b3:13:d0:01:60:bc:be:c1:21:d7:a0:1c:fe: 63:d6:7b:cb:b9:d4:3c:fc:e7:5a:00:d5:55:a3:f9: 98:fa:81:c8:b1:de:54:92:52:5f:a6:81:d8:5e:dd: d6:02:c8:dc:63:3a:fa:c9:d9:50:8b:fc:7f:59:d2: 5f:d9:1f:80:a4:ee:8e:7a:ea:c9:5f:b4:4c:c2:bf: ea:2d:ae:fe:8f:70:f7:db:77:ba:f4:3c:5a:7d:d5: ce:1b:9d:91:33:e5:50:82:63:17:a9:24:b4:21:e8: 62:08:cb:22:06:47:00:6a:e2:6f:cb:93:09:c5:3b: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:50:CC:73:65:FC:60:53:99:92:63:C0:A2:9D:8A:7B:61:2A:C7:38 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9e:bd:79:25:db:ef:b4:f4:ed:76:bb:72:8b:d6:bb:e7:18: 33:6f:8d:6c:2c:52:83:25:7b:8e:1b:9f:ec:39:fa:7a:52:08: 77:17:13:26:c4:2f:e8:5f:61:d2:70:83:85:e2:1c:f9:46:dc: 44:f3:8c:0b:42:1a:b6:e6:be:d9:51:47:f6:84:42:bf:b3:33: 27:d4:36:cd:dd:67:b4:50:12:01:31:28:a8:6a:8f:69:a0:f9: d1:0d:25:4a:86:d9:14:ee:10:97:1b:ba:56:9f:79:ab:d0:06: fa:d3:55:e4:9d:cb:99:9d:e8:f3:03:d6:f5:79:46:09:89:9c: 5b:b0:56:88:5d:f1:3e:fa:45:19:36:61:89:9a:be:3c:1d:1d: 1c:8e:72:7b:d1:43:2e:4c:07:96:5f:9e:43:ac:01:47:23:33: af:49:2b:4b:1b:85:25:4e:89:cd:5a:a7:bd:87:ed:5d:2a:e4: d4:a4:ba:06:93:aa:a4:0f:96:80:67:38:c0:02:3e:c2:52:58: bd:aa:6b:27:72:0a:a4:5c:99:f0:7a:68:ab:fd:05:53:e7:f9: 4e:36:26:4d:38:07:00:26:7d:00:00:0c:36:7f:cd:cc:6d:12: 1c:6e:45:75:f4:c2:de:92:60:a1:39:e4:25:54:91:ee:75:8e: 4c:16:df:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUxMTAzMDA1NjIxWhcNMjUxMTEwMDA1NjIxWjAYMRYwFAYD VQQDEw02OTA3ZmRiNS00NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8JyWI7AUhHY2lMxGqfMBcU3I1UqJBMwcrZ5JbCb30c65JaiWFJYpZTyEVox SrZddQK3lJPrycfWWvUGltKONXSoyXKxSmfoz3qN0WmnpUJouV7H/u4TR3c7ciXM NB74v1OvI3aYSGRhW5zgEWFQxwxDapiirJFUwjDVMIIDB6o3lic4wIQzgLMT0AFg vL7BIdegHP5j1nvLudQ8/OdaANVVo/mY+oHIsd5UklJfpoHYXt3WAsjcYzr6ydlQ i/x/WdJf2R+ApO6OeurJX7RMwr/qLa7+j3D323e69DxafdXOG52RM+VQgmMXqSS0 IehiCMsiBkcAauJvy5MJxTuUWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClQzHNl /GBTmZJjwKKdinthKsc4MB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGnr15JdvvtPTtdrtyi9a75xgzb41sLFKDJXuOG5/sOfp6Ugh3FxMm xC/oX2HScIOF4hz5RtxE84wLQhq25r7ZUUf2hEK/szMn1DbN3We0UBIBMSioao9p oPnRDSVKhtkU7hCXG7pWn3mr0Ab601XkncuZnejzA9b1eUYJiZxbsFaIXfE++kUZ NmGJmr48HR0cjnJ70UMuTAeWX55DrAFHIzOvSStLG4UlTonNWqe9h+1dKuTUpLoG k6qkD5aAZzjAAj7CUli9qmsncgqkXJnwemir/QVT5/lONiZNOAcAJn0AAAw2f83M bRIcbkV19MLekmChOeQlVJHudY5MFt/u -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:46 2025 by rpki-client