$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json) Hash identifier: B2hHzZWDYQlZC8mG7lcIA5gpxBNQwV60QJnFnCNXYHc= Subject key identifier: A2:E7:8D:D3:43:DB:8E:3D:CA:A2:85:FD:99:FC:33:CE:A5:B3:D0:40 Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft Manifest number: 9C Signing time: Mon 03 Nov 2025 06:20:29 +0000 Manifest this update: Mon 03 Nov 2025 06:20:29 +0000 Manifest next update: Mon 10 Nov 2025 06:20:29 +0000 Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: XWKedIbR8CgKuAw7m38ACBcna4vnBVnx1i3J+7huW/s=) 2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: q3EE6bhQvO1jqMvzi5TnaMDMrsSHuVeWmQU0kCxzZeQ=) 3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: +20O4NUWPTxqKeXepVeDCO/g+GXNSbJwYfdmkDR6B2Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B Validity Not Before: Nov 3 06:20:29 2025 GMT Not After : Nov 10 06:20:29 2025 GMT Subject: CN=690849ad-e095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:26:43:a4:1d:29:b0:7e:6e:ef:94:a8:83:96: 7a:1e:03:94:cb:41:3b:27:94:c9:33:a7:0a:4e:9d: 4a:b6:bd:c0:28:a2:b2:9d:a8:cd:f8:dd:24:ec:8f: fc:ab:fd:d5:f7:c0:22:72:92:6b:2a:b9:f7:20:30: f9:a8:a4:a2:9f:dd:ab:d8:9e:b7:33:20:47:5e:2f: 3b:e3:21:4c:68:e4:a6:de:d9:cf:3d:7e:80:4c:31: e0:fa:5d:93:d7:e2:0c:3c:c0:49:d5:76:a4:11:f2: 82:db:5a:e5:1b:a6:35:11:c9:10:04:61:11:16:07: dc:ad:17:e9:d0:27:19:87:fe:5d:48:a7:b6:b8:87: 69:ff:4a:fe:90:26:01:3b:2f:5d:06:df:4d:ce:84: e2:b9:d2:ad:93:e4:84:49:58:69:ed:ed:1f:38:4c: 03:93:95:bf:aa:be:f3:30:ec:21:bd:94:9e:dd:df: 0d:16:30:5a:08:91:48:18:cb:fd:a5:91:52:95:b6: 50:74:e4:7d:f7:84:0d:4c:c9:e1:22:f9:d6:af:16: 39:56:4a:ec:fe:b5:b6:e1:fe:6e:6e:fd:aa:e1:4d: bf:79:a0:a9:b5:82:2f:7d:92:d9:e8:58:1e:af:28: 5e:f8:67:99:19:cb:c4:80:92:88:76:39:0d:88:61: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:8D:D3:43:DB:8E:3D:CA:A2:85:FD:99:FC:33:CE:A5:B3:D0:40 X509v3 Authority Key Identifier: keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:36:4a:c4:fb:d9:de:f5:9f:49:c5:05:09:e7:cc:2d:28:5f: 30:11:a4:63:00:7c:35:0b:c7:21:5c:85:71:90:11:3d:d4:13: 99:66:b8:4c:19:ef:d0:ff:be:72:75:ad:0f:5f:85:46:87:7b: 31:02:01:38:ae:2e:75:f6:f0:ac:89:ae:31:f7:04:06:6c:85: 88:d6:ba:16:7c:0a:d4:91:f7:71:41:92:eb:8a:65:8c:be:9b: 58:07:12:70:4a:87:fd:a5:c3:f7:f4:eb:44:43:23:41:ce:5c: 9c:88:46:2e:99:0a:6d:7a:94:6b:67:cb:d7:09:bd:51:e7:e1: c9:ea:5c:68:6b:dd:93:3b:75:fe:97:81:6e:2c:28:a7:5f:a1: cb:ae:da:dc:34:40:1d:13:58:8c:ff:37:67:99:8e:81:07:76: 7a:ef:81:18:54:05:09:35:01:0c:cc:39:61:92:12:27:3d:85: ad:e7:bd:52:e8:6f:a6:b9:bd:f6:5b:0e:fe:30:c8:c5:d0:94: ca:d4:b0:be:d0:d1:e1:97:7b:65:70:a2:62:79:de:ca:a2:ae: 43:12:08:1b:ab:44:93:b5:98:57:15:5e:02:7a:ad:1d:70:b3: 2e:40:ff:cd:18:e2:f1:08:60:e2:6a:79:d6:da:57:ae:1d:ff: 92:de:4f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzRDkxMTAvBgNVBAUTKEJFOEI0NzMzQjFBRThBNDczNkI3RTkxMzI3MzNENjU0 MDkxRTNEMkIwHhcNMjUxMTAzMDYyMDI5WhcNMjUxMTEwMDYyMDI5WjAYMRYwFAYD VQQDEw02OTA4NDlhZC1lMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSZDpB0psH5u75Sog5Z6HgOUy0E7J5TJM6cKTp1Ktr3AKKKynajN+N0k7I/8 q/3V98AicpJrKrn3IDD5qKSin92r2J63MyBHXi874yFMaOSm3tnPPX6ATDHg+l2T 1+IMPMBJ1XakEfKC21rlG6Y1EckQBGERFgfcrRfp0CcZh/5dSKe2uIdp/0r+kCYB Oy9dBt9NzoTiudKtk+SESVhp7e0fOEwDk5W/qr7zMOwhvZSe3d8NFjBaCJFIGMv9 pZFSlbZQdOR994QNTMnhIvnWrxY5Vkrs/rW24f5ubv2q4U2/eaCptYIvfZLZ6Fge ryhe+GeZGcvEgJKIdjkNiGH1fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLnjdND 2449yqKF/Zn8M86ls9BAMB8GA1UdIwQYMBaAFL6LRzOxropHNrfpEycz1lQJHj0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNEOS83QjhCRDZDQ0M5 RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlrYzJ0LWtUSnpQV1ZBa2VQ U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZvdEhNN0d1aWtjMnQta1RKelBXVkFrZVBTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNEOS83QjhCRDZDQ0M5RDExMUVGOTc1QkRDNEJDNEY5QUUwMi92b3RITTdHdWlr YzJ0LWtUSnpQV1ZBa2VQU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBANkrE+9ne9Z9JxQUJ58wtKF8wEaRjAHw1C8chXIVxkBE91BOZZrhM Ge/Q/75yda0PX4VGh3sxAgE4ri519vCsia4x9wQGbIWI1roWfArUkfdxQZLrimWM vptYBxJwSof9pcP39OtEQyNBzlyciEYumQptepRrZ8vXCb1R5+HJ6lxoa92TO3X+ l4FuLCinX6HLrtrcNEAdE1iM/zdnmY6BB3Z674EYVAUJNQEMzDlhkhInPYWt571S 6G+mub32Ww7+MMjF0JTK1LC+0NHhl3tlcKJied7Koq5DEggbq0STtZhXFV4Ceq0d cLMuQP/NGOLxCGDiannW2leuHf+S3k8Q -----END CERTIFICATE-----Generated at Tue Nov 4 19:11:33 2025 by rpki-client