$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft File: HWQu0o7OpfKqzzR7Fgl_nZJB120.mft (raw, json) Hash identifier: pi8HB/SlAO+ihuzaUQYZdG5BZVzVFI6RFfSgS5wCR+Y= Subject key identifier: 91:E6:2B:ED:97:4F:92:82:91:27:56:70:DB:83:A7:0F:CA:88:5B:AD Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft Manifest number: 039F Signing time: Mon 03 Nov 2025 00:42:23 +0000 Manifest this update: Mon 03 Nov 2025 00:42:22 +0000 Manifest next update: Mon 10 Nov 2025 00:42:22 +0000 Files and hashes: 1: HWQu0o7OpfKqzzR7Fgl_nZJB120.crl (hash: tIu312r1uUowQqfKobecokqs4L610wNm6wW9NoGxi9c=) 2: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (hash: 8hUucYPHQ79ZY6uDpo1eHlNtJ78CYgic7xieJwMDGwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D Validity Not Before: Nov 3 00:42:22 2025 GMT Not After : Nov 10 00:42:22 2025 GMT Subject: CN=6907fa6e-9507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:02:87:83:65:0a:ea:db:eb:90:96:0b:fe: 03:f4:64:e9:67:5a:5c:d2:84:b1:75:71:fb:77:4c: 84:1b:a9:19:70:79:12:2c:d1:fb:e6:1e:f3:5b:0c: 2e:71:da:9b:c2:83:46:e2:50:4a:61:d6:a8:cc:0a: ad:9e:f0:84:ba:81:b2:53:85:79:6a:59:ad:24:18: 95:9f:73:06:dd:6d:7a:12:69:dd:95:cc:9a:28:4e: 7c:64:da:07:13:eb:92:e4:82:13:a6:65:b2:a8:8e: 84:de:91:2e:e2:50:6e:9d:bf:79:2e:6b:5a:9d:2d: 52:34:b0:16:61:64:f9:37:98:2d:14:49:98:1e:17: 08:cc:9d:c0:15:2d:3a:67:1a:de:44:17:13:3a:e5: 1d:ca:29:47:4e:6c:f8:c9:fe:af:19:d4:bb:d2:d0: b8:fa:9c:8d:40:6d:f2:b4:57:fc:12:ff:12:e7:2d: 7f:53:d2:5a:be:ce:01:6c:a1:ca:19:f8:e6:19:9c: 55:5f:ba:d8:fc:8c:96:fc:8d:87:2d:71:3e:3a:8b: 9b:be:53:62:a4:18:57:de:26:2a:c1:42:8f:4e:28: c9:74:14:15:65:4d:7c:f1:90:38:29:49:8b:58:52: 72:59:5d:5b:ee:7b:64:47:78:af:dd:95:46:e5:23: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E6:2B:ED:97:4F:92:82:91:27:56:70:DB:83:A7:0F:CA:88:5B:AD X509v3 Authority Key Identifier: keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:bc:5e:22:09:8f:21:cd:c8:20:68:a0:d3:d9:c3:ac:3e: c2:a9:f2:7b:8d:e9:94:07:30:74:e5:70:c2:73:cd:b7:2d:65: bd:f1:20:0f:1a:59:68:b6:cd:26:e1:4f:24:d3:ff:31:75:bb: 66:e9:87:c0:4e:42:3b:79:24:74:e2:54:af:d9:5c:f0:e0:09: ea:25:fb:aa:ba:0a:ba:a2:9d:31:df:f0:4a:d0:38:67:4e:5b: ac:29:b1:c1:2a:10:1a:ce:9c:ca:b0:da:20:3a:8e:47:31:d9: b4:70:cf:0b:b5:6c:fd:2f:27:81:e8:56:b8:93:8a:33:33:57: ca:db:09:af:4c:91:fb:51:20:25:a9:93:d2:00:39:90:d0:f8: 94:ec:a5:8b:a9:19:bd:7b:d9:82:92:19:d1:82:3c:39:17:46: 6e:9d:ac:99:20:6d:61:df:a2:35:cc:25:0e:1a:1f:26:c0:ff: 2a:aa:8d:1c:be:f0:52:2a:ad:8a:1e:9c:ff:24:d9:04:70:b9: 02:22:7d:01:f6:5f:e7:1e:4e:8d:36:3c:14:02:c4:c1:91:e4: c3:c1:df:b9:44:8a:ed:3a:84:80:15:c6:3e:b3:28:63:44:7c: 9b:e0:58:f2:4a:8a:d1:84:1a:2d:66:08:36:87:f2:de:cc:f4: 1d:3c:81:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFM0ExMTAvBgNVBAUTKDFENjQyRUQyOEVDRUE1RjJBQUNGMzQ3QjE2MDk3RjlE OTI0MUQ3NkQwHhcNMjUxMTAzMDA0MjIyWhcNMjUxMTEwMDA0MjIyWjAYMRYwFAYD VQQDEw02OTA3ZmE2ZS05NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HgCh4NlCurb65CWC/4D9GTpZ1pc0oSxdXH7d0yEG6kZcHkSLNH75h7zWwwu cdqbwoNG4lBKYdaozAqtnvCEuoGyU4V5almtJBiVn3MG3W16EmndlcyaKE58ZNoH E+uS5IITpmWyqI6E3pEu4lBunb95LmtanS1SNLAWYWT5N5gtFEmYHhcIzJ3AFS06 ZxreRBcTOuUdyilHTmz4yf6vGdS70tC4+pyNQG3ytFf8Ev8S5y1/U9Javs4BbKHK GfjmGZxVX7rY/IyW/I2HLXE+OoubvlNipBhX3iYqwUKPTijJdBQVZU188ZA4KUmL WFJyWV1b7ntkR3iv3ZVG5SNQdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHmK+2X T5KCkSdWcNuDpw/KiFutMB8GA1UdIwQYMBaAFB1kLtKOzqXyqs80exYJf52SQddt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEUzQS9BN0FCMEE4QUI5 OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3BmS3F6elI3RmdsX25aSkIx MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXUXUwbzdPcGZLcXp6UjdGZ2xfblpKQjEyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEUzQS9BN0FCMEE4QUI5OTgxMUVDOERCRTkyODFDNEY5QUUwMi9IV1F1MG83T3Bm S3F6elI3RmdsX25aSkIxMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOZLxeIgmPIc3IIGig09nDrD7CqfJ7jemUBzB05XDCc823LWW98SAP Gllots0m4U8k0/8xdbtm6YfATkI7eSR04lSv2Vzw4AnqJfuqugq6op0x3/BK0Dhn TlusKbHBKhAazpzKsNogOo5HMdm0cM8LtWz9LyeB6Fa4k4ozM1fK2wmvTJH7USAl qZPSADmQ0PiU7KWLqRm9e9mCkhnRgjw5F0ZunayZIG1h36I1zCUOGh8mwP8qqo0c vvBSKq2KHpz/JNkEcLkCIn0B9l/nHk6NNjwUAsTBkeTDwd+5RIrtOoSAFcY+syhj RHyb4FjySorRhBotZgg2h/LezPQdPIFH -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:54 2025 by rpki-client