$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: cxXngptlZi+mPTUrOkmNUvmdWMONNy0pHWFocrwDAP4= Subject key identifier: D6:8C:EA:5B:55:8D:31:5A:0C:72:A1:3F:FE:0B:8C:8B:59:41:25:BC Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 0A7A Signing time: Tue 04 Nov 2025 19:42:29 +0000 Manifest this update: Tue 04 Nov 2025 19:42:28 +0000 Manifest next update: Tue 11 Nov 2025 19:42:28 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: aQMMBkKvr8VZsRb3U90Zm8Sbt+ASGtmAHJFpeK8b48A=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Nov 4 19:42:28 2025 GMT Not After : Nov 11 19:42:28 2025 GMT Subject: CN=690a5724-2e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:51:d6:3f:2e:50:5f:d2:4d:65:72:20:f5: c8:74:31:35:88:48:73:bd:e0:a1:ac:86:40:ea:6c: 07:89:39:3c:f1:e5:10:87:13:22:cf:9b:3f:b9:2d: 99:74:5b:6d:4c:38:a1:f6:af:35:e2:3c:c9:eb:80: 42:0d:59:fa:75:1f:b8:5b:23:2b:88:4e:77:63:de: b6:e3:0a:ef:d2:0c:37:0c:33:78:03:cc:b1:58:99: a0:0e:34:68:36:b8:49:69:a6:12:22:c7:1a:9d:ac: a7:ad:84:ab:93:8b:51:12:30:57:41:ac:fe:15:d7: f4:42:de:94:72:c2:84:56:47:73:4c:fb:8c:33:ac: b5:3c:84:f8:c5:6d:a8:52:4a:23:17:60:df:e6:ba: 99:e0:97:b6:6f:04:31:cc:8d:16:a5:52:0d:5e:a1: 00:7f:8d:01:83:9b:7a:87:19:ca:99:72:52:96:3f: e7:0d:0d:f4:99:cc:42:3e:59:bd:9d:e7:83:c1:2a: be:f7:1b:bb:68:7a:4f:4b:d2:a6:6a:31:4b:85:a8: 2b:11:05:ad:2b:83:a4:d3:20:71:97:37:24:c1:6a: ce:58:61:11:fc:eb:a8:a4:69:70:e7:d1:76:07:59: ed:74:f6:40:b9:5a:58:8c:0a:f2:fe:1b:53:e5:46: bc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8C:EA:5B:55:8D:31:5A:0C:72:A1:3F:FE:0B:8C:8B:59:41:25:BC X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:8e:d2:fe:af:8e:22:0a:62:2c:16:02:35:0c:46:de:f9: da:bc:c6:c7:14:44:81:71:a9:05:48:53:75:e4:d4:87:c9:8a: 02:30:d6:b2:78:8f:0e:f8:89:a9:51:a3:c1:3e:47:ee:7d:9b: 1f:d2:77:07:fe:1c:58:c4:74:0c:88:e9:d9:9a:39:9e:8e:89: 79:b1:40:e3:82:dc:83:e0:96:ea:6b:5a:23:00:55:4e:68:cc: 23:ed:ac:a2:5e:55:39:56:e0:6f:3b:14:3c:52:1f:11:65:1b: ea:64:99:80:9a:5b:a2:52:12:a5:e6:76:10:b9:ef:ac:cd:de: 78:97:d2:27:e3:fc:10:84:c1:40:ab:67:82:12:63:b8:c0:21: d3:54:0d:db:c2:ad:bc:7e:96:ea:d6:87:9d:8e:48:3f:4d:87: e2:66:c9:26:86:f7:c9:78:fc:9b:98:85:30:e7:e6:ef:b6:7f: dd:b1:6f:5f:63:ea:3b:c2:87:81:97:ea:67:a4:70:f7:54:7e: 6f:63:62:ee:50:95:b6:bc:fa:8e:1c:88:3a:3f:1e:8b:b1:e4: 9b:6e:e2:46:5d:2e:80:e8:e4:ff:76:55:b8:bb:6d:fc:61:9a: 91:31:6e:43:79:ab:d2:e7:fb:da:57:61:c3:bb:84:b7:30:52: 39:5b:65:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUxMTA0MTk0MjI4WhcNMjUxMTExMTk0MjI4WjAYMRYwFAYD VQQDEw02OTBhNTcyNC0yZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQRR1j8uUF/STWVyIPXIdDE1iEhzveChrIZA6mwHiTk88eUQhxMiz5s/uS2Z dFttTDih9q814jzJ64BCDVn6dR+4WyMriE53Y9624wrv0gw3DDN4A8yxWJmgDjRo NrhJaaYSIscanaynrYSrk4tREjBXQaz+Fdf0Qt6UcsKEVkdzTPuMM6y1PIT4xW2o UkojF2Df5rqZ4Je2bwQxzI0WpVINXqEAf40Bg5t6hxnKmXJSlj/nDQ30mcxCPlm9 neeDwSq+9xu7aHpPS9KmajFLhagrEQWtK4Ok0yBxlzckwWrOWGER/OuopGlw59F2 B1ntdPZAuVpYjAry/htT5Ua8pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaM6ltV jTFaDHKhP/4LjItZQSW8MB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqp47S/q+OIgpiLBYCNQxG3vnavMbHFESBcakFSFN15NSHyYoCMNay eI8O+ImpUaPBPkfufZsf0ncH/hxYxHQMiOnZmjmejol5sUDjgtyD4Jbqa1ojAFVO aMwj7ayiXlU5VuBvOxQ8Uh8RZRvqZJmAmluiUhKl5nYQue+szd54l9In4/wQhMFA q2eCEmO4wCHTVA3bwq28fpbq1oedjkg/TYfiZskmhvfJePybmIUw5+bvtn/dsW9f Y+o7woeBl+pnpHD3VH5vY2LuUJW2vPqOHIg6Px6LseSbbuJGXS6A6OT/dlW4u238 YZqRMW5DeavS5/vaV2HDu4S3MFI5W2XR -----END CERTIFICATE-----Generated at Wed Nov 5 16:49:00 2025 by rpki-client