$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: LISDWBWuAi/Kjh688fumpBM5m26T1CVJVJ+iBTLgRL8= Subject key identifier: 94:1A:64:47:BA:09:D7:7F:6B:35:E3:91:70:26:EE:FE:80:2E:57:75 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A2D Signing time: Sun 02 Nov 2025 19:42:45 +0000 Manifest this update: Sun 02 Nov 2025 19:42:44 +0000 Manifest next update: Sun 09 Nov 2025 19:42:44 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: FqkFCsm7QkYyzaIbglVrjq9hBvMNICswqQoG4LaNiUc=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: QwIma1yY7YkOQP5MP7P6PHkUn+CQDErkQ0yx5EKSwl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Nov 2 19:42:44 2025 GMT Not After : Nov 9 19:42:44 2025 GMT Subject: CN=6907b435-febc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:04:d3:d6:50:2a:bd:5d:a4:cc:34:b3:23: 83:c8:c2:ad:f3:64:2d:eb:4e:8d:c8:96:43:ac:d7: 1a:07:b9:6c:1b:5f:d9:03:94:27:75:db:5e:a0:fc: 5a:74:4f:34:7d:ec:f0:c4:73:a9:aa:3d:8e:3b:8a: 4c:bb:6d:08:6c:4b:95:2d:7c:01:69:17:ef:c0:77: b0:67:b2:20:ab:1c:90:14:4d:10:71:71:16:6c:76: a1:12:92:46:ad:b3:7b:c8:da:7a:b9:31:54:59:b5: 03:c7:1f:ae:49:88:83:56:8d:7c:cf:d0:d5:ce:fc: 7f:d3:94:04:54:69:c1:2f:f0:0b:60:f0:5d:19:50: ef:d3:11:55:47:dd:c0:fb:41:61:6d:61:1d:c4:d2: 7d:48:f8:45:65:a1:0a:fb:22:39:ab:78:2b:88:d6: ee:92:88:93:60:1a:b6:4f:0f:60:70:a6:20:43:ae: 40:2b:54:d2:8e:44:c6:97:83:b4:33:52:0b:13:4e: 64:a1:15:60:57:e8:3f:70:05:7a:52:94:4b:57:f5: c3:99:2b:9e:24:6d:63:22:f3:e0:72:4e:89:00:a4: 9b:6d:7c:1b:b5:e7:8c:88:09:ab:df:c5:02:fc:fd: 49:ef:ee:fb:1f:ef:ee:4c:ae:4e:42:75:88:2c:97: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:64:47:BA:09:D7:7F:6B:35:E3:91:70:26:EE:FE:80:2E:57:75 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:0f:ed:98:75:a7:1f:77:75:11:6a:c2:97:d2:5e:a4:20: 79:26:b6:75:46:5d:e1:b5:6d:d8:59:76:1f:c6:48:0d:79:75: 44:d6:cd:0e:9f:3d:71:fb:7e:d9:71:65:f1:38:ed:cc:55:32: 33:50:39:fa:ce:07:13:9b:cb:23:6e:98:c0:c6:b7:35:fc:9d: 78:cc:f1:60:a9:38:1a:7e:a7:fc:6a:b6:79:a0:c6:47:35:79: 72:47:a2:4f:39:41:ec:41:34:03:31:4f:01:d6:96:2f:e5:1f: 11:8f:d0:1a:33:8b:ef:e7:a4:6b:76:75:b3:1f:10:db:8d:82: 57:6a:f5:f3:6d:4b:96:14:f0:78:80:fb:da:45:bc:39:12:ac: 19:85:f3:63:39:03:2d:d5:47:a0:c2:d5:db:b1:6a:f3:e5:22: 03:07:bc:15:0a:1b:f0:49:55:bc:cc:d9:63:72:70:6e:3b:85: 29:c0:6d:ab:ec:05:a7:6e:a3:b6:17:82:2c:e8:ea:37:80:8f: ed:14:65:28:6e:93:42:59:70:6c:13:11:70:e2:fd:d6:8a:db: 73:c6:fa:3d:eb:09:f8:c4:ac:cd:91:b7:1c:6e:72:45:9d:19: 6f:03:be:ca:4f:51:9b:7f:a4:4c:e2:0d:71:58:a6:71:27:94: 28:a6:27:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUxMTAyMTk0MjQ0WhcNMjUxMTA5MTk0MjQ0WjAYMRYwFAYD VQQDEw02OTA3YjQzNS1mZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPkE09ZQKr1dpMw0syODyMKt82Qt606NyJZDrNcaB7lsG1/ZA5QnddteoPxa dE80fezwxHOpqj2OO4pMu20IbEuVLXwBaRfvwHewZ7IgqxyQFE0QcXEWbHahEpJG rbN7yNp6uTFUWbUDxx+uSYiDVo18z9DVzvx/05QEVGnBL/ALYPBdGVDv0xFVR93A +0FhbWEdxNJ9SPhFZaEK+yI5q3griNbukoiTYBq2Tw9gcKYgQ65AK1TSjkTGl4O0 M1ILE05koRVgV+g/cAV6UpRLV/XDmSueJG1jIvPgck6JAKSbbXwbteeMiAmr38UC /P1J7+77H+/uTK5OQnWILJdubQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQaZEe6 Cdd/azXjkXAm7v6ALld1MB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG9A/tmHWnH3d1EWrCl9JepCB5JrZ1Rl3htW3YWXYfxkgNeXVE1s0O nz1x+37ZcWXxOO3MVTIzUDn6zgcTm8sjbpjAxrc1/J14zPFgqTgafqf8arZ5oMZH NXlyR6JPOUHsQTQDMU8B1pYv5R8Rj9AaM4vv56RrdnWzHxDbjYJXavXzbUuWFPB4 gPvaRbw5EqwZhfNjOQMt1UegwtXbsWrz5SIDB7wVChvwSVW8zNljcnBuO4UpwG2r 7AWnbqO2F4Is6Oo3gI/tFGUobpNCWXBsExFw4v3Wittzxvo96wn4xKzNkbccbnJF nRlvA77KT1Gbf6RM4g1xWKZxJ5QopieX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:27 2025 by rpki-client