$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: x4GxPUWrJVkU8qDHeyhZ0V4yxgJfz22x3d/KezeN8GU= Subject key identifier: 74:C8:B9:7D:B2:26:D9:DB:49:9B:3C:35:0C:35:69:4A:2C:02:E5:69 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:37:52 +0000 Manifest this update: Mon 27 Oct 2025 07:37:51 +0000 Manifest next update: Mon 03 Nov 2025 07:37:51 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: W2hhdokLwc0Z8D09aNBfzVh6haldD1TVZGSBfjlru6A=) 2: B70A38DCABD111F08E516516C4F9AE02.roa (hash: 6f4F+XIwA2rHEPqEklnobgdqYhNbXAFCeGr2CJ6y/cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F, serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Oct 27 07:37:51 2025 GMT Not After : Nov 3 07:37:51 2025 GMT Subject: CN=68ff214f-90cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:e4:81:df:35:53:2b:e3:1f:2f:ef:b2:ac: 4b:29:04:a6:2a:4c:fa:33:dd:52:61:ed:5e:99:61: b1:7d:42:1c:f0:0e:a3:99:eb:fb:ff:01:b4:46:b2: 5b:48:59:3c:b5:4d:03:d4:a5:f5:89:c6:55:0c:f9: d3:51:b0:23:fc:af:80:27:b5:c5:8b:03:3c:06:5c: 3d:24:79:4f:5f:f6:37:fd:14:f2:e5:76:2d:a6:08: 63:a4:45:ed:10:79:86:28:d7:f6:16:ef:42:e8:99: 55:1d:6a:ca:1b:06:40:01:12:2c:f7:3d:4c:e5:a4: b8:23:f4:23:8d:95:95:43:ef:59:8e:d1:98:34:62: f1:fa:c6:45:d9:25:d1:31:6d:7c:bd:19:c3:6e:ed: 63:6f:31:2c:a8:5d:00:68:07:04:64:84:8f:f6:5a: d3:3f:c7:a9:39:01:05:55:da:b1:83:e2:fa:6e:9e: 61:56:49:50:ad:1f:7a:19:dc:43:25:58:46:00:0f: 76:3e:0d:b5:ee:b0:60:fb:6b:3f:f0:7b:0e:34:7b: 06:d2:10:1e:33:b2:e7:73:b3:ce:22:d1:54:02:52: 5e:ba:41:b5:09:95:3a:d1:05:c1:5b:74:4b:bc:74: e4:bb:83:49:8f:75:12:f7:77:39:06:f0:d8:c4:33: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:B9:7D:B2:26:D9:DB:49:9B:3C:35:0C:35:69:4A:2C:02:E5:69 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a5:33:0e:4b:a0:9f:74:8c:d5:84:c5:11:8e:b5:aa:74:e6: c9:b5:eb:19:41:3b:24:59:6e:6c:56:5b:55:6f:d1:51:61:45: 42:71:78:c5:03:91:7e:b2:5c:37:18:7f:aa:70:ab:9b:a1:99: f1:a2:12:73:e2:51:f2:ab:30:8e:7d:fd:65:91:9d:78:cc:be: d4:ce:d0:71:68:e6:f7:3a:d8:e8:49:e9:29:ff:0a:d9:26:48: e1:a8:58:5c:47:b1:16:b3:34:ca:2f:97:b8:dc:b3:fd:1a:65: 45:1a:0f:13:0f:a3:87:41:61:69:80:d6:a5:c9:af:6b:cd:87: 55:e7:fb:51:a7:ba:ee:b5:a4:f2:b5:71:35:68:e8:26:c5:47: a6:5d:54:11:e1:db:d9:46:d4:20:e8:db:16:f8:26:35:c2:f7: 1d:b9:ec:cb:3c:a5:21:f3:98:45:7d:bf:9c:84:b7:d9:86:91: 7c:c5:f2:b2:a5:47:bc:c2:42:4e:79:b8:8e:1f:6a:8a:40:45: 3f:cf:8d:20:61:33:58:af:b6:2c:99:05:1c:a0:80:5a:48:90: 02:ed:ff:e7:7a:63:a5:d9:58:d9:6f:30:43:e6:a4:8c:ef:24: c2:9b:f1:76:4f:e4:af:13:9f:63:ad:a4:f3:99:14:9a:8c:24: a0:a3:a3:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRENEYxMTAvBgNVBAUTKDY4Nzc0MURFMTVDRDg4M0MxMEREQkM0RkMzQTJEQ0Y1 NDg1RTdERjMwHhcNMjUxMDI3MDczNzUxWhcNMjUxMTAzMDczNzUxWjAYMRYwFAYD VQQDEw02OGZmMjE0Zi05MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzHkgd81UyvjHy/vsqxLKQSmKkz6M91SYe1emWGxfUIc8A6jmev7/wG0RrJb SFk8tU0D1KX1icZVDPnTUbAj/K+AJ7XFiwM8Blw9JHlPX/Y3/RTy5XYtpghjpEXt EHmGKNf2Fu9C6JlVHWrKGwZAARIs9z1M5aS4I/QjjZWVQ+9ZjtGYNGLx+sZF2SXR MW18vRnDbu1jbzEsqF0AaAcEZISP9lrTP8epOQEFVdqxg+L6bp5hVklQrR96GdxD JVhGAA92Pg217rBg+2s/8HsONHsG0hAeM7Lnc7POItFUAlJeukG1CZU60QXBW3RL vHTku4NJj3US93c5BvDYxDNtFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTIuX2y JtnbSZs8NQw1aUosAuVpMB8GA1UdIwQYMBaAFGh3Qd4VzYg8EN28T8Oi3PVIXn3z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQ0Ri8wRTNBQ0NGQzVC OUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlEd1EzYnhQdzZMYzlVaGVm Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQ0Ri8wRTNBQ0NGQzVCOUMxMUVGOUIxNTQ5NDRDNEY5QUUwMi9hSGRCM2hYTmlE d1EzYnhQdzZMYzlVaGVmZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbpTMOS6CfdIzVhMURjrWqdObJtesZQTskWW5sVltVb9FRYUVCcXjF A5F+slw3GH+qcKuboZnxohJz4lHyqzCOff1lkZ14zL7UztBxaOb3OtjoSekp/wrZ JkjhqFhcR7EWszTKL5e43LP9GmVFGg8TD6OHQWFpgNalya9rzYdV5/tRp7rutaTy tXE1aOgmxUemXVQR4dvZRtQg6NsW+CY1wvcduezLPKUh85hFfb+chLfZhpF8xfKy pUe8wkJOebiOH2qKQEU/z40gYTNYr7YsmQUcoIBaSJAC7f/nemOl2VjZbzBD5qSM 7yTCm/F2T+SvE59jraTzmRSajCSgo6OU -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:47 2025 by rpki-client