$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: ViDyMjva7Aj6uZvZ1TWeRh7CwxtY516OUvXGwLhPLtA= Subject key identifier: FE:63:CA:3B:F5:25:70:82:06:E9:1C:00:15:90:A9:4C:2E:64:D2:27 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 02CC Signing time: Sun 16 Nov 2025 23:42:07 +0000 Manifest this update: Sun 16 Nov 2025 23:42:06 +0000 Manifest next update: Sun 23 Nov 2025 23:42:06 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: WbUtMZ2zXPAsPceCC8R53faleaZ2z27ZOmrfZHql3BE=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 23:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Nov 16 23:42:06 2025 GMT Not After : Nov 23 23:42:06 2025 GMT Subject: CN=691a614f-b8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:9a:9b:46:0c:40:5e:8b:99:73:5a:84:80: a0:18:e9:90:27:01:5b:fd:b7:b6:46:6f:ab:8d:47: fe:0b:7f:96:fd:d7:a7:b5:fb:5c:fd:fe:17:2e:b3: 2e:d0:b1:df:49:d6:fc:6c:73:88:8c:d4:a4:13:bb: d3:9d:48:94:38:33:5c:75:13:ee:7d:23:3a:95:d8: a5:c3:bb:0c:ff:48:cd:f7:5f:87:b5:02:2d:91:ee: 44:51:b9:96:c6:80:98:80:fd:3f:8d:c3:aa:6f:fd: f8:e1:9f:43:f7:f1:65:32:e2:d7:e5:d9:66:a1:4e: c2:9b:d9:33:d6:4d:df:5a:8f:dc:79:08:b0:ca:6c: 84:31:03:8b:4b:d7:17:4f:9e:b6:4d:62:35:15:66: 4f:76:72:6b:fb:73:8d:93:06:fc:7e:46:33:40:a2: ba:a8:3e:3c:12:02:39:7d:38:fe:6b:40:e2:4d:36: e1:d9:41:85:74:dd:bf:64:48:95:cb:1c:64:82:56: 90:4f:c5:fe:80:56:5b:74:05:c3:ee:a5:7d:d1:07: f2:03:70:95:8c:88:98:02:64:b3:28:c0:23:6d:c8: 60:ec:64:28:4a:2f:ae:6f:00:90:95:91:f2:8b:1b: 85:65:07:a0:5a:a7:d7:e3:51:cd:0c:8e:0a:61:cb: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:63:CA:3B:F5:25:70:82:06:E9:1C:00:15:90:A9:4C:2E:64:D2:27 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:e6:c2:ff:a6:19:b1:ed:ab:18:33:7b:4b:cd:d7:d0:fd:4d: 93:08:dc:5d:a4:2b:42:86:9e:02:9d:6d:f0:d9:0c:46:eb:41: e0:ad:9b:4b:aa:04:95:47:6e:66:ff:d4:9a:95:68:b7:50:a0: 55:90:04:0a:71:e8:2a:24:e6:e3:8d:45:63:ff:b3:0a:d2:73: ed:62:08:b0:0b:8f:69:ba:f1:18:84:95:5f:f8:42:98:a9:c8: 52:e4:ba:08:8b:41:42:b9:d9:85:49:93:7d:57:32:4a:dd:38: eb:4c:3f:61:3d:37:fd:71:cb:49:b5:60:c3:8e:51:a6:9d:31: 5a:ad:c9:2d:e7:a5:9b:a2:55:31:7f:a4:b2:31:01:01:95:3f: 06:fb:56:50:97:c9:59:8c:3e:f4:cc:43:98:14:d8:a0:5c:d2: 9b:2e:cf:6d:ae:bb:23:1e:11:42:de:97:a6:74:65:e3:55:11: fc:87:94:69:bc:d0:26:52:48:47:46:00:af:1d:a0:fd:18:06: 90:fd:66:0e:c2:dc:8e:25:63:83:15:d3:fb:2d:35:0c:1f:d9: 77:2a:7a:0b:08:64:34:c8:55:b0:22:9d:63:83:c9:eb:97:4a: 67:a8:72:47:75:5b:e1:5f:d9:61:7c:fb:32:1e:03:d0:e5:50: 62:1c:d8:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUxMTE2MjM0MjA2WhcNMjUxMTIzMjM0MjA2WjAYMRYwFAYD VQQDEw02OTFhNjE0Zi1iOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUiam0YMQF6LmXNahICgGOmQJwFb/be2Rm+rjUf+C3+W/dentftc/f4XLrMu 0LHfSdb8bHOIjNSkE7vTnUiUODNcdRPufSM6ldilw7sM/0jN91+HtQItke5EUbmW xoCYgP0/jcOqb/344Z9D9/FlMuLX5dlmoU7Cm9kz1k3fWo/ceQiwymyEMQOLS9cX T562TWI1FWZPdnJr+3ONkwb8fkYzQKK6qD48EgI5fTj+a0DiTTbh2UGFdN2/ZEiV yxxkglaQT8X+gFZbdAXD7qV90QfyA3CVjIiYAmSzKMAjbchg7GQoSi+ubwCQlZHy ixuFZQegWqfX41HNDI4KYctL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5jyjv1 JXCCBukcABWQqUwuZNInMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI5sL/phmx7asYM3tLzdfQ/U2TCNxdpCtChp4CnW3w2QxG60HgrZtL qgSVR25m/9SalWi3UKBVkAQKcegqJObjjUVj/7MK0nPtYgiwC49puvEYhJVf+EKY qchS5LoIi0FCudmFSZN9VzJK3TjrTD9hPTf9cctJtWDDjlGmnTFarckt56WbolUx f6SyMQEBlT8G+1ZQl8lZjD70zEOYFNigXNKbLs9trrsjHhFC3pemdGXjVRH8h5Rp vNAmUkhHRgCvHaD9GAaQ/WYOwtyOJWODFdP7LTUMH9l3KnoLCGQ0yFWwIp1jg8nr l0pnqHJHdVvhX9lhfPsyHgPQ5VBiHNgM -----END CERTIFICATE-----Generated at Tue Nov 18 07:02:51 2025 by rpki-client