$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft File: hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json) Hash identifier: Bn656aYSBe6CJC8wtH70YqfsBtwbdovvWMWyKHJ5UgQ= Subject key identifier: CD:78:26:6C:6D:11:60:A1:BF:31:28:DD:2B:7E:89:AF:D8:8D:0D:16 Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC Certificate issuer: /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft Manifest number: 03EC Signing time: Mon 03 Nov 2025 00:28:02 +0000 Manifest this update: Mon 03 Nov 2025 00:28:01 +0000 Manifest next update: Mon 10 Nov 2025 00:28:01 +0000 Files and hashes: 1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: POTWNakSGGYtEoGzdZOAGPJAQDBa3ndtlyBgMv+4TNA=) 2: 162108BA9A5A11EC951D391BC4F9AE02.roa (hash: Fvfha9KVlHyCADzshJ79PsXJU9IfuH07KjiuOr5+Ai8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC Validity Not Before: Nov 3 00:28:01 2025 GMT Not After : Nov 10 00:28:01 2025 GMT Subject: CN=6907f711-7fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:f3:bb:b8:8d:56:02:72:8a:ce:83:7a:da: ee:4c:4a:cb:fa:ab:25:d9:14:48:1e:01:74:1c:7b: 65:5c:a0:cc:5b:18:23:7f:ff:de:ed:c3:ef:d9:29: ee:74:4e:d7:4f:11:8c:0f:63:35:1b:f8:36:46:57: e6:32:36:98:84:0b:d3:ab:0a:94:00:1d:ef:0f:fb: 6e:b4:e1:90:4c:a9:83:9e:7d:2e:88:48:15:75:ac: 80:56:81:d4:90:ea:74:23:0d:b2:7a:53:92:bd:a8: e7:e6:b5:f4:c8:5c:80:b4:34:b3:87:88:04:25:7d: 38:c5:bb:98:54:d0:d8:51:ff:8d:04:0b:43:34:f8: 28:d7:e2:ff:a3:8d:7d:9e:6f:1d:d2:1c:8b:10:c3: 74:d5:99:dd:24:83:2d:69:af:13:a8:6b:4c:54:3c: ef:14:62:9a:a6:a6:82:44:e4:4d:13:91:6e:77:6b: c0:26:f6:20:ed:37:10:87:5c:06:aa:30:3f:7d:9a: 9e:5b:81:65:0b:e1:16:3e:46:30:15:a8:f2:c5:2f: 62:7d:57:85:d3:7b:b9:71:bd:e7:4e:52:65:c3:54: c2:d6:e4:62:4b:c4:15:7f:2f:b1:d8:8c:9a:05:46: 4f:d5:33:88:13:ab:87:99:7a:2c:9f:12:e6:21:c6: db:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:78:26:6C:6D:11:60:A1:BF:31:28:DD:2B:7E:89:AF:D8:8D:0D:16 X509v3 Authority Key Identifier: keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c8:54:06:06:bf:85:00:2c:84:81:67:27:a7:07:c3:64:6b: a5:57:f7:38:26:4b:cb:dd:fd:27:62:36:7f:85:24:b8:a5:b9: 55:21:79:1c:3c:d3:48:90:0c:31:b1:05:0e:85:b6:b6:53:81: b5:e6:d2:b7:4f:48:5d:32:e5:2a:8d:db:b5:94:22:75:4c:b7: e0:a1:94:b5:21:f1:5b:b6:24:5f:db:3d:45:73:f3:b4:08:44: 47:89:ce:d8:3d:26:be:61:bf:29:d3:8c:b0:19:e7:4f:08:3b: 40:f6:89:45:e3:df:90:c8:c4:3e:00:78:0f:c6:9b:50:27:f9: e0:27:2f:ea:fd:28:36:a5:62:cb:65:c9:c9:cd:2d:b4:bf:94: bf:2c:69:13:1a:36:2a:3a:a2:5d:43:f9:3f:20:0a:76:2b:4c: 75:eb:f6:a3:78:6d:ac:b8:59:2f:72:fc:b8:cd:e8:02:c5:dd: 38:0a:af:c1:cc:14:7c:91:94:ff:a3:48:78:49:32:58:68:e0: b0:8f:40:3e:8e:a5:8d:0c:29:aa:28:b1:5d:c6:7a:e4:bf:c7: 80:e0:3c:1a:70:bf:e5:f5:dd:a9:d6:c7:95:fa:9d:6f:36:a7: 9d:c0:0e:ec:da:a7:43:02:66:f6:27:d6:cf:7f:9f:98:b1:b8: fe:b7:0a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0MzExMTAvBgNVBAUTKDg0NDRFQUFDOTI5NTg4RTg5NkI3QzU5MUY2MEUzNDMw NDJCMERGQkMwHhcNMjUxMTAzMDAyODAxWhcNMjUxMTEwMDAyODAxWjAYMRYwFAYD VQQDEw02OTA3ZjcxMS03ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshbzu7iNVgJyis6DetruTErL+qsl2RRIHgF0HHtlXKDMWxgjf//e7cPv2Snu dE7XTxGMD2M1G/g2RlfmMjaYhAvTqwqUAB3vD/tutOGQTKmDnn0uiEgVdayAVoHU kOp0Iw2yelOSvajn5rX0yFyAtDSzh4gEJX04xbuYVNDYUf+NBAtDNPgo1+L/o419 nm8d0hyLEMN01ZndJIMtaa8TqGtMVDzvFGKapqaCRORNE5Fud2vAJvYg7TcQh1wG qjA/fZqeW4FlC+EWPkYwFajyxS9ifVeF03u5cb3nTlJlw1TC1uRiS8QVfy+x2Iya BUZP1TOIE6uHmXosnxLmIcbbhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM14Jmxt EWChvzEo3St+ia/YjQ0WMB8GA1UdIwQYMBaAFIRE6qySlYjolrfFkfYONDBCsN+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDQzMS8xMjI0N0UyNDlB NTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlPaVd0OFdSOWc0ME1FS3cz N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFVHFySktWaU9pV3Q4V1I5ZzQwTUVLdzM3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDQzMS8xMjI0N0UyNDlBNTgxMUVDODU4MkYzMUFDNEY5QUUwMi9oRVRxckpLVmlP aVd0OFdSOWc0ME1FS3czN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhyFQGBr+FACyEgWcnpwfDZGulV/c4JkvL3f0nYjZ/hSS4pblVIXkc PNNIkAwxsQUOhba2U4G15tK3T0hdMuUqjdu1lCJ1TLfgoZS1IfFbtiRf2z1Fc/O0 CERHic7YPSa+Yb8p04ywGedPCDtA9olF49+QyMQ+AHgPxptQJ/ngJy/q/Sg2pWLL ZcnJzS20v5S/LGkTGjYqOqJdQ/k/IAp2K0x16/ajeG2suFkvcvy4zegCxd04Cq/B zBR8kZT/o0h4STJYaOCwj0A+jqWNDCmqKLFdxnrkv8eA4DwacL/l9d2p1seV+p1v NqedwA7s2qdDAmb2J9bPf5+Ysbj+twqa -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:07 2025 by rpki-client