$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft File: rN0Hh_30YaFfcqHizj449FTtIHI.mft (raw, json) Hash identifier: AUaTisu8nZ4L4eVMpkLCPy6T57nQBsL+de2kqwvRXzA= Subject key identifier: 14:7B:A5:B1:A0:7A:EC:BF:63:82:3A:EA:57:E8:6A:15:A6:57:82:70 Authority key identifier: AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 Certificate issuer: /CN=A9116D68/serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Certificate serial: 0F55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft Manifest number: 17F5 Signing time: Tue 04 Nov 2025 17:39:49 +0000 Manifest this update: Tue 04 Nov 2025 17:39:49 +0000 Manifest next update: Tue 11 Nov 2025 17:39:49 +0000 Files and hashes: 1: rN0Hh_30YaFfcqHizj449FTtIHI.crl (hash: aV47emwaZy1C50dqU/luh17uWUdiAQqbQFVq3+Arfr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3925 (0xf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=ACDD0787FDF461A15F72A1E2CE3E38F454ED2072 Validity Not Before: Nov 4 17:39:49 2025 GMT Not After : Nov 11 17:39:49 2025 GMT Subject: CN=690a3a65-ccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:d3:58:4c:9b:f8:a7:b7:3c:7a:25:ba:18: 0e:b6:e8:46:a2:67:48:b4:cd:8a:d3:60:3e:4f:2d: 96:e6:15:b7:73:0a:bd:4f:fa:6c:83:3c:f1:1c:47: d7:7b:f0:68:6f:6e:e1:1b:ed:76:e1:11:4f:09:ba: ce:8a:80:e3:fa:2e:ea:94:a8:a3:c0:d6:6c:16:94: e8:68:00:9f:5f:04:dc:0f:3d:29:6b:4b:61:eb:34: 66:27:64:2b:41:e1:b8:ea:4b:17:39:c7:cc:22:53: 04:9b:19:49:37:51:6a:64:46:aa:c1:64:86:b0:e0: eb:f8:48:22:e7:2f:45:c4:3d:93:68:aa:a9:5f:31: 69:b9:18:cc:47:42:e5:3f:a8:ac:80:a5:a8:33:dd: c2:51:8b:78:9b:5d:03:4e:bd:29:39:a8:2b:f6:ab: 1a:7c:df:09:47:09:d7:f5:a7:7d:34:a0:76:0e:77: a6:93:09:44:c5:ca:3b:9f:f3:44:00:44:cc:39:67: cd:6b:74:5c:09:74:cd:d6:11:0a:60:cc:16:7b:7c: 18:da:39:78:b9:49:51:e4:6e:e9:1d:26:5d:c1:84: 9b:d3:89:86:b6:ae:f5:d1:0b:71:30:d2:2e:75:45: 17:df:d6:28:d3:65:40:be:0d:6d:8c:27:ad:0a:ad: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7B:A5:B1:A0:7A:EC:BF:63:82:3A:EA:57:E8:6A:15:A6:57:82:70 X509v3 Authority Key Identifier: keyid:AC:DD:07:87:FD:F4:61:A1:5F:72:A1:E2:CE:3E:38:F4:54:ED:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN0Hh_30YaFfcqHizj449FTtIHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/rN0Hh_30YaFfcqHizj449FTtIHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8f:c7:c4:b0:96:bf:23:6e:a7:78:2f:2e:9e:83:c1:4d:e5: a2:9c:7b:8b:a0:1d:d9:bb:8b:7d:3f:8e:47:f3:1b:b5:a3:00: 94:51:b8:a7:e9:79:9f:5e:dd:84:55:7c:89:4b:6d:2d:b0:e8: 78:47:29:04:8b:4e:28:f0:ab:1f:60:fa:a9:24:15:ef:33:b9: 04:88:f5:6a:2c:4f:39:fd:e6:6a:ea:d8:fe:d5:f5:41:1f:e4: 67:d3:39:06:8e:95:57:9f:17:de:44:84:3c:99:6c:82:3d:a7: 6f:0a:cc:3b:85:25:f0:a7:d2:88:27:d6:08:3d:c3:10:a9:7a: e2:cd:80:62:f1:98:ad:da:24:8a:b4:bc:e7:33:24:98:23:6e: e4:57:fb:14:23:4e:9b:bc:e4:83:93:31:d5:45:dc:3d:2f:5e: 8b:7c:4d:a3:a4:b0:58:c4:dc:03:1c:11:fc:5c:98:0b:32:a2: cd:74:7d:93:99:fd:73:37:c6:6a:29:f2:9a:a3:a9:ef:53:63: 7f:b6:77:08:c4:e9:ab:d5:20:16:3f:c7:26:0d:aa:b4:ce:d1: b5:e6:2e:a0:78:d4:ec:c2:36:8d:f0:95:74:74:36:a3:c0:4b: a2:12:58:46:fd:3b:e2:83:78:f2:9e:c5:75:65:ff:5a:a5:79: c2:06:94:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKEFDREQwNzg3RkRGNDYxQTE1RjcyQTFFMkNFM0UzOEY0 NTRFRDIwNzIwHhcNMjUxMTA0MTczOTQ5WhcNMjUxMTExMTczOTQ5WjAYMRYwFAYD VQQDEw02OTBhM2E2NS1jY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+XTWEyb+Ke3PHoluhgOtuhGomdItM2K02A+Ty2W5hW3cwq9T/psgzzxHEfX e/Bob27hG+124RFPCbrOioDj+i7qlKijwNZsFpToaACfXwTcDz0pa0th6zRmJ2Qr QeG46ksXOcfMIlMEmxlJN1FqZEaqwWSGsODr+Egi5y9FxD2TaKqpXzFpuRjMR0Ll P6isgKWoM93CUYt4m10DTr0pOagr9qsafN8JRwnX9ad9NKB2DnemkwlExco7n/NE AETMOWfNa3RcCXTN1hEKYMwWe3wY2jl4uUlR5G7pHSZdwYSb04mGtq710QtxMNIu dUUX39Yo02VAvg1tjCetCq0blwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBR7pbGg euy/Y4I66lfoahWmV4JwMB8GA1UdIwQYMBaAFKzdB4f99GGhX3Kh4s4+OPRU7SBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlhRmZjcUhpemo0NDlGVHRJ SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOMEhoXzMwWWFGZmNxSGl6ajQ0OUZUdElISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9yTjBIaF8zMFlh RmZjcUhpemo0NDlGVHRJSEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoj8fEsJa/I26neC8unoPBTeWinHuLoB3Zu4t9P45H8xu1owCUUbin 6XmfXt2EVXyJS20tsOh4RykEi04o8KsfYPqpJBXvM7kEiPVqLE85/eZq6tj+1fVB H+Rn0zkGjpVXnxfeRIQ8mWyCPadvCsw7hSXwp9KIJ9YIPcMQqXrizYBi8Zit2iSK tLznMySYI27kV/sUI06bvOSDkzHVRdw9L16LfE2jpLBYxNwDHBH8XJgLMqLNdH2T mf1zN8ZqKfKao6nvU2N/tncIxOmr1SAWP8cmDaq0ztG15i6geNTswjaN8JV0dDaj wEuiElhG/Tvig3jynsV1Zf9apXnCBpRj -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:42 2025 by rpki-client