$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: swUBK59nqQEo9Akta972mndYZZm1Mz+96NDEESrkDZ8= Subject key identifier: 88:4B:BF:BA:CA:2F:FE:D4:8A:9D:E0:F1:AB:C7:72:F3:FC:21:A7:71 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 015A Signing time: Mon 03 Nov 2025 04:15:11 +0000 Manifest this update: Mon 03 Nov 2025 04:15:10 +0000 Manifest next update: Mon 10 Nov 2025 04:15:10 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: Z7R4cLGbY/pNGAAqr65Dq8dZQ59RXgCkddZEjsFXkFo=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Nov 3 04:15:10 2025 GMT Not After : Nov 10 04:15:10 2025 GMT Subject: CN=69082c4f-70cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:61:ef:c4:25:5b:8a:cf:74:09:c1:dd:1d: 5b:e5:e7:b3:ff:51:af:3a:b3:09:95:fe:82:ba:b2: 9e:30:45:4d:a8:8d:fe:7e:c6:a5:c8:9d:10:2e:e0: bd:6a:96:06:8e:6f:af:d5:56:f6:47:c8:17:b6:b3: 7a:ad:7e:1b:02:d0:91:05:a6:c4:d0:17:71:05:b9: b6:ee:23:58:c6:e4:db:79:56:45:d4:b4:aa:9c:43: 92:e4:56:5f:ca:26:2a:ef:a6:3b:fa:7a:6c:f7:4c: 24:67:ce:ce:7e:09:fb:06:d1:b3:aa:35:cc:32:aa: 48:4e:82:47:22:0c:a6:3b:4f:48:93:29:86:1c:bf: 58:f6:c7:a6:14:3b:d2:e6:4e:df:6e:23:ad:9b:d6: 94:dd:e0:b7:97:f1:fa:ad:db:c4:1b:4a:04:ed:5b: 4f:ff:22:b7:e0:7c:3d:ea:62:96:0a:4f:7e:f9:24: 07:02:5a:e9:9e:b4:8c:3a:61:89:2a:00:3d:7a:63: 87:bb:2f:b7:8d:35:b3:f9:8c:a0:68:d8:94:86:d8: af:04:43:b5:e2:48:73:0b:dd:7e:ef:a9:67:3f:7d: 99:4a:eb:5d:e6:98:ff:56:9d:b4:77:87:7c:65:1c: 80:40:45:86:7e:e2:36:63:02:36:5e:08:47:05:21: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4B:BF:BA:CA:2F:FE:D4:8A:9D:E0:F1:AB:C7:72:F3:FC:21:A7:71 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:25:46:47:c0:8f:e1:8a:f0:10:93:2d:57:de:f5:82:7e: 1d:30:b1:9a:f0:cd:f2:24:d5:ce:fc:3d:a8:78:27:74:f1:1d: e6:34:1d:47:6a:00:8f:e6:48:1a:b0:3e:05:b6:65:98:33:8e: c7:2d:c3:29:b2:e8:51:8f:9a:7b:80:41:9f:35:ab:5a:e9:d9: bb:2f:33:d1:c0:cc:be:fb:d2:a7:dd:87:28:13:55:71:0f:86: 21:18:cb:30:b5:18:5f:8c:24:7f:e1:e3:8b:a6:5e:33:b6:8d: 24:76:15:12:0e:93:e2:85:90:c4:9f:3b:b2:21:26:3c:2e:d2: d7:86:49:f5:01:4f:ee:54:f8:26:1e:88:8c:57:32:80:40:1d: e7:0c:91:b2:5d:c2:16:27:1b:84:5e:f9:d9:49:a2:ef:e8:93: 2f:db:95:8e:ec:77:bf:8c:fc:d8:d8:a3:96:ea:78:6b:34:70: 06:d8:3b:d3:4e:3f:6f:9f:64:82:4e:9a:2a:1f:4f:99:fd:14: e2:13:60:6a:a3:f8:3b:20:44:a5:f4:d6:b1:a5:a6:04:57:57: 49:78:d5:d9:f8:68:48:ff:03:12:4b:bc:bc:54:79:31:5b:ff: 5b:17:ab:6b:22:86:83:b9:c3:44:18:16:c6:61:c3:6e:85:76: ff:65:52:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUxMTAzMDQxNTEwWhcNMjUxMTEwMDQxNTEwWjAYMRYwFAYD VQQDEw02OTA4MmM0Zi03MGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswNh78QlW4rPdAnB3R1b5eez/1GvOrMJlf6CurKeMEVNqI3+fsalyJ0QLuC9 apYGjm+v1Vb2R8gXtrN6rX4bAtCRBabE0BdxBbm27iNYxuTbeVZF1LSqnEOS5FZf yiYq76Y7+nps90wkZ87Ofgn7BtGzqjXMMqpIToJHIgymO09IkymGHL9Y9semFDvS 5k7fbiOtm9aU3eC3l/H6rdvEG0oE7VtP/yK34Hw96mKWCk9++SQHAlrpnrSMOmGJ KgA9emOHuy+3jTWz+YygaNiUhtivBEO14khzC91+76lnP32ZSutd5pj/Vp20d4d8 ZRyAQEWGfuI2YwI2XghHBSH71wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhLv7rK L/7Uip3g8avHcvP8IadxMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk8yVGR8CP4YrwEJMtV971gn4dMLGa8M3yJNXO/D2oeCd08R3mNB1H agCP5kgasD4FtmWYM47HLcMpsuhRj5p7gEGfNata6dm7LzPRwMy++9Kn3YcoE1Vx D4YhGMswtRhfjCR/4eOLpl4zto0kdhUSDpPihZDEnzuyISY8LtLXhkn1AU/uVPgm HoiMVzKAQB3nDJGyXcIWJxuEXvnZSaLv6JMv25WO7He/jPzY2KOW6nhrNHAG2DvT Tj9vn2SCTpoqH0+Z/RTiE2Bqo/g7IESl9NaxpaYEV1dJeNXZ+GhI/wMSS7y8VHkx W/9bF6trIoaDucNEGBbGYcNuhXb/ZVJM -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:22 2025 by rpki-client