$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json) Hash identifier: 6KD7HtI1b19mWfzqKNlYruVwimpqshnFT250f6th9V8= Subject key identifier: 73:C7:92:66:13:68:25:BD:8A:AC:93:4B:E7:AD:3A:57:37:BC:DB:F7 Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft Manifest number: 087D Signing time: Sun 02 Nov 2025 20:39:27 +0000 Manifest this update: Sun 02 Nov 2025 20:39:26 +0000 Manifest next update: Sun 09 Nov 2025 20:39:26 +0000 Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: HD9RQSui8VSJVpL32Zto56mzNkAElhS54Jya3qC8oSA=) 2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: NovEF3NdDvqF9F8b0/ZT82vbbHXVaw622xvGyH6ZWPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: Nov 2 20:39:26 2025 GMT Not After : Nov 9 20:39:26 2025 GMT Subject: CN=6907c17e-bcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:17:04:9c:4a:b3:49:84:c0:f4:0c:cf:2c: 6e:f0:58:09:5c:40:9f:3f:17:94:b0:9c:92:f4:3e: 5e:50:91:a0:8a:5f:de:d7:47:00:aa:09:6c:20:16: ff:38:5b:5a:d6:83:d7:c7:68:78:91:6c:d6:7b:b0: 9c:00:4a:8e:13:ce:7b:97:bb:6a:6e:49:da:95:2e: d1:f6:e8:d1:2e:83:e7:01:cc:97:22:74:d5:76:b3: 00:51:32:d3:58:fd:b9:32:9b:04:db:2b:5e:a0:64: ce:75:1f:a0:0e:06:93:da:61:a0:86:e4:f7:b4:6a: da:27:89:72:03:1c:5e:04:e1:c2:c9:08:1a:01:b4: 60:2f:3a:81:52:7f:ff:76:3f:30:05:6d:df:67:9f: 59:a9:37:98:1d:78:0d:4c:0d:a1:38:a7:1c:eb:3c: 62:18:16:4e:3f:0c:9e:63:45:59:61:1d:95:7e:d5: 45:6b:fd:74:4d:86:07:88:45:81:de:84:fd:e6:10: 88:85:eb:22:d3:70:fa:df:36:fb:58:e5:91:37:4e: 50:2b:49:eb:fe:81:05:da:d9:c4:f2:26:d4:7d:d4: 61:3c:67:76:06:0c:4e:f7:7b:57:3f:d4:d5:55:b1: e8:0f:55:76:1e:2e:a5:af:3d:2b:11:20:18:e0:d3: ed:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:92:66:13:68:25:BD:8A:AC:93:4B:E7:AD:3A:57:37:BC:DB:F7 X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:6c:e5:f8:e8:c9:38:b0:f4:44:d8:1a:6d:4f:6a:be:25:c7: af:05:f5:21:07:48:2f:1c:94:96:22:39:b3:bd:9b:e7:d8:79: 82:95:3c:3f:34:a2:a8:28:5a:9d:66:bf:a9:f5:30:4d:4c:e2: e2:8d:a0:93:b7:ec:79:32:86:ab:d4:2d:94:f3:c9:3d:32:3e: c6:25:97:f5:8b:63:11:ff:0e:cc:81:43:d9:6f:11:9e:de:07: 6c:05:36:f3:8b:db:08:de:96:8c:cb:57:c5:09:a9:ae:03:5d: 2f:01:37:cc:00:7c:c3:0f:c7:66:97:68:9e:d5:ca:e5:30:9b: c8:f0:af:04:ad:94:28:dc:79:20:32:92:d3:50:08:f1:a4:5b: b2:1e:33:18:90:11:5e:fd:59:7c:64:f0:7d:a1:b0:d8:97:0b: d0:46:29:24:99:6d:cc:b0:80:00:0c:d0:9f:24:0c:70:fc:89: 1a:8a:db:e4:e4:20:53:88:a0:fa:7d:ec:63:70:2b:54:ab:4d: 43:6f:2e:24:14:fc:30:67:31:47:8a:64:46:d8:fc:c8:ef:cf: cd:86:30:d9:f4:7f:a3:ef:9e:08:61:c0:4d:60:ca:a7:bf:07: 9b:3d:57:92:db:72:4f:a2:ab:b3:8a:10:5c:8d:06:56:07:c6: 09:7c:b0:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUxMTAyMjAzOTI2WhcNMjUxMTA5MjAzOTI2WjAYMRYwFAYD VQQDEw02OTA3YzE3ZS1iY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT4XBJxKs0mEwPQMzyxu8FgJXECfPxeUsJyS9D5eUJGgil/e10cAqglsIBb/ OFta1oPXx2h4kWzWe7CcAEqOE857l7tqbknalS7R9ujRLoPnAcyXInTVdrMAUTLT WP25MpsE2yteoGTOdR+gDgaT2mGghuT3tGraJ4lyAxxeBOHCyQgaAbRgLzqBUn// dj8wBW3fZ59ZqTeYHXgNTA2hOKcc6zxiGBZOPwyeY0VZYR2VftVFa/10TYYHiEWB 3oT95hCIhesi03D63zb7WOWRN05QK0nr/oEF2tnE8ibUfdRhPGd2BgxO93tXP9TV VbHoD1V2Hi6lrz0rESAY4NPttQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPHkmYT aCW9iqyTS+etOlc3vNv3MB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCMC9BMkRGNENFQ0RENEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhT NzFKbU9GNnpsR3VOVXBCZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5bOX46Mk4sPRE2BptT2q+JcevBfUhB0gvHJSWIjmzvZvn2HmClTw/ NKKoKFqdZr+p9TBNTOLijaCTt+x5Moar1C2U88k9Mj7GJZf1i2MR/w7MgUPZbxGe 3gdsBTbzi9sI3paMy1fFCamuA10vATfMAHzDD8dml2ie1crlMJvI8K8ErZQo3Hkg MpLTUAjxpFuyHjMYkBFe/Vl8ZPB9obDYlwvQRikkmW3MsIAADNCfJAxw/Ikaitvk 5CBTiKD6fexjcCtUq01Dby4kFPwwZzFHimRG2PzI78/NhjDZ9H+j754IYcBNYMqn vwebPVeS23JPoquzihBcjQZWB8YJfLCL -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:16 2025 by rpki-client