$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft File: h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json) Hash identifier: mCz0fwskF4I4qubX/yWGv+K9Fbf3aso1OVvdVcdCs7A= Subject key identifier: D0:D2:42:10:BC:00:8A:BF:87:EA:2B:D5:BA:BE:BC:88:AB:28:9F:02 Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft Manifest number: A2 Signing time: Wed 05 Nov 2025 06:39:13 +0000 Manifest this update: Wed 05 Nov 2025 06:39:12 +0000 Manifest next update: Wed 12 Nov 2025 06:39:12 +0000 Files and hashes: 1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: ZY63KlSnlMGXZaIfuQntTgXj7UVdklD1cBI07qlXXzE=) 2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: usgzG5l4Fc/vVVRb6d9DCRrnc0s/zMN8s4ksanz/FtM=) 3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: FHrz83TvBf0PQed/UPRQj7z6Reuifr4TTzu0H0Cz+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Validity Not Before: Nov 5 06:39:12 2025 GMT Not After : Nov 12 06:39:12 2025 GMT Subject: CN=690af110-932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:37:da:01:bd:b0:c8:43:2a:01:83:37:03: 1d:41:3e:40:af:08:d2:33:06:7d:ab:fa:5f:05:17: e1:6a:46:e1:be:5c:f6:35:4d:9c:f5:f3:bd:e4:65: b0:3b:76:5a:ce:5c:6f:58:a8:d4:1a:ed:f8:a4:53: 08:8e:c1:7c:89:4b:0d:3c:8a:c4:e2:48:98:fa:5d: 3c:13:84:6e:e5:34:06:6e:71:af:5f:fd:91:f5:35: 00:8b:51:a4:7d:8d:a9:0b:ad:0e:32:ac:59:70:b3: eb:09:68:d9:c0:2d:2f:e5:7d:46:2d:60:f9:3c:6e: 41:b2:5d:d4:9d:2f:a1:b4:6f:20:82:d9:d7:a2:f7: a8:06:6e:3c:6e:10:84:f3:35:1d:be:d4:32:a0:2f: 83:8c:eb:1c:a7:2f:57:0c:38:40:73:3e:e8:ae:05: 20:02:b5:8b:64:7a:c4:3c:83:07:4a:4c:ef:e3:46: 97:0b:df:b9:98:46:99:72:66:38:3a:74:90:56:4f: 72:d7:38:b7:2d:a4:5a:5b:f5:2d:44:0b:ba:9e:55: 03:75:f7:9a:02:c5:9f:29:44:e0:61:df:c9:e2:66: 82:f6:d9:82:bc:69:c5:38:70:1e:ce:59:86:0e:26: ff:ce:f5:62:b1:42:ec:da:88:a0:5b:99:a1:e5:c3: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D2:42:10:BC:00:8A:BF:87:EA:2B:D5:BA:BE:BC:88:AB:28:9F:02 X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ae:9a:b8:c0:99:9c:6d:40:c4:ad:65:30:6b:15:c9:b8:94: 46:f7:7a:76:30:a7:f5:88:76:78:06:0a:1f:36:2b:3b:54:cd: 00:23:13:e1:0d:0c:81:7e:1e:55:55:73:c6:a6:ca:f7:a5:d2: ba:f6:a3:c7:e8:a0:bc:e3:8a:b7:77:b4:68:a2:9a:f8:1c:4a: 41:c6:9a:99:72:73:7f:28:62:09:bd:cb:2f:c8:ae:a4:c9:5e: 55:15:83:65:0e:3f:28:51:47:0a:51:b2:15:2f:dc:53:04:9d: 87:79:8b:2d:d5:1f:cc:c2:aa:4e:c0:fd:19:35:75:fe:dd:5e: dc:8a:8c:56:17:fc:46:ec:2c:e0:99:00:6b:55:30:3f:ee:2a: 03:09:46:b4:d1:6c:4e:ee:26:14:c9:8b:b6:b1:56:ba:df:da: 6d:fb:d8:c4:39:5e:3e:9c:92:59:c9:2f:fc:a5:8d:17:03:e3: 57:22:6e:72:af:cb:79:65:06:5e:4c:c7:91:87:50:9c:41:3e: e9:33:52:a7:88:aa:96:bf:c3:e7:65:ea:d3:13:89:96:75:fe: f0:28:2d:3c:11:83:20:3b:7a:89:05:62:9a:10:7c:61:9e:3e: 8f:59:e1:1c:cf:ca:00:3a:96:ea:e4:13:69:eb:54:bb:5a:9a: e1:0f:26:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxODAxMTAvBgNVBAUTKDg3REE0NEE0Q0Y4MzlDMzg4MUM2QkMzODY4M0NDREMz MDhDQTdDRTkwHhcNMjUxMTA1MDYzOTEyWhcNMjUxMTEyMDYzOTEyWjAYMRYwFAYD VQQDEw02OTBhZjExMC05MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq432gG9sMhDKgGDNwMdQT5ArwjSMwZ9q/pfBRfhakbhvlz2NU2c9fO95GWw O3ZazlxvWKjUGu34pFMIjsF8iUsNPIrE4kiY+l08E4Ru5TQGbnGvX/2R9TUAi1Gk fY2pC60OMqxZcLPrCWjZwC0v5X1GLWD5PG5Bsl3UnS+htG8ggtnXoveoBm48bhCE 8zUdvtQyoC+DjOscpy9XDDhAcz7orgUgArWLZHrEPIMHSkzv40aXC9+5mEaZcmY4 OnSQVk9y1zi3LaRaW/UtRAu6nlUDdfeaAsWfKUTgYd/J4maC9tmCvGnFOHAezlmG Dib/zvVisULs2oigW5mh5cMcLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDSQhC8 AIq/h+or1bq+vIirKJ8CMB8GA1UdIwQYMBaAFIfaRKTPg5w4gca8OGg8zcMIynzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDE4MC83NzQyODdGMkQ2 QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5EaUJ4cnc0YUR6Tnd3aktm T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5E aUJ4cnc0YUR6Tnd3aktmT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1rpq4wJmcbUDErWUwaxXJuJRG93p2MKf1iHZ4BgofNis7VM0AIxPh DQyBfh5VVXPGpsr3pdK69qPH6KC844q3d7Roopr4HEpBxpqZcnN/KGIJvcsvyK6k yV5VFYNlDj8oUUcKUbIVL9xTBJ2HeYst1R/MwqpOwP0ZNXX+3V7cioxWF/xG7Czg mQBrVTA/7ioDCUa00WxO7iYUyYu2sVa639pt+9jEOV4+nJJZyS/8pY0XA+NXIm5y r8t5ZQZeTMeRh1CcQT7pM1KniKqWv8PnZerTE4mWdf7wKC08EYMgO3qJBWKaEHxh nj6PWeEcz8oAOpbq5BNp61S7WprhDyaY -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:25 2025 by rpki-client