$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: DHhrn8zol4cumXSpb8oHdJ83OAK0BD9C3ZVe6XTVcOo= Subject key identifier: 9F:FE:02:B3:A9:21:D3:65:C4:F2:70:03:76:7F:EB:8E:64:AB:F7:44 Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: DB Signing time: Mon 03 Nov 2025 05:38:46 +0000 Manifest this update: Mon 03 Nov 2025 05:38:45 +0000 Manifest next update: Mon 10 Nov 2025 05:38:45 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: YhRYrTcImLeQ39p3y0+wo08yhIhlpKl/xwEINyabVqE=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Nov 3 05:38:45 2025 GMT Not After : Nov 10 05:38:45 2025 GMT Subject: CN=69083fe6-7101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:9b:9e:ad:73:41:04:44:3c:5d:64:70:66: 61:06:76:5a:0f:0d:00:09:b1:df:cc:78:3d:55:73: 5e:f3:77:c7:69:07:40:33:5d:48:a3:c0:38:c6:04: 96:b7:9c:fe:1c:d6:21:73:a7:87:03:a4:31:e1:6a: 1c:a6:7b:4e:62:1d:48:8a:df:b2:1f:19:a9:e0:7d: 0a:71:02:70:05:90:dd:e1:d2:64:c3:c1:0b:79:18: 3a:16:6f:54:77:46:40:ba:16:3d:2d:e2:9e:1d:6e: d8:a0:37:b4:8a:4a:24:9d:81:4b:70:d6:b4:51:9c: eb:24:21:fb:06:3f:6c:76:09:59:cc:9a:ef:52:83: 43:11:ff:74:0c:64:f2:f1:9d:90:14:f6:6a:8f:66: 24:c4:14:4d:58:8e:ba:b9:f5:ed:de:3d:2c:a8:9b: 83:27:c2:fb:4a:af:ce:d0:4b:2d:78:83:e1:54:cb: 94:1d:79:d6:0f:f7:28:47:c7:6f:59:28:c6:4d:1d: 28:4c:6c:71:bb:28:2f:55:cc:8c:7d:57:77:e6:d3: fb:5e:ff:a7:4d:57:7f:35:fa:a2:84:11:14:7a:b2: ae:47:3c:58:05:64:e6:15:f4:fd:19:2b:d6:99:d7: 24:97:94:16:37:c2:0e:44:5f:a9:d7:fd:c5:f7:8c: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FE:02:B3:A9:21:D3:65:C4:F2:70:03:76:7F:EB:8E:64:AB:F7:44 X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:13:54:9e:f3:76:d9:20:db:1a:58:85:38:79:87:b5:c5:2f: 45:9a:20:71:15:9a:82:46:42:d9:bc:c3:59:9a:67:16:7b:67: 3f:b2:ef:90:05:bb:af:d8:fa:4a:ed:ec:b1:7a:3f:07:8b:5f: e5:29:97:a2:49:7e:51:51:c6:e9:3f:47:8c:03:79:2f:93:46: e2:32:65:52:58:52:df:eb:8d:b7:4a:3e:db:f0:19:0e:17:e4: 9a:41:a6:34:9f:16:8f:b7:0e:02:4f:2e:84:6e:50:54:4f:8b: 69:95:4f:bc:f0:4c:7f:03:c8:9f:6e:10:f5:14:6d:59:d4:97: 93:75:76:bc:35:9f:65:ed:6f:de:ca:ad:63:00:65:cc:0f:65: 11:f5:81:47:28:d7:30:3a:c4:09:c2:e2:69:0e:9c:f1:54:48: 3c:7b:1c:ba:1d:35:e3:c5:27:36:ef:32:c3:f6:f7:07:32:3c: 98:1a:6e:bd:ea:1d:39:82:db:33:45:e7:3e:38:4f:e6:e9:f1: bb:fd:e6:40:f4:9f:46:eb:8f:a6:8f:9c:2f:8a:ce:03:5e:66: 50:79:fc:9a:4e:ee:3f:0a:a9:9e:26:2e:80:68:88:66:23:ef: 41:e8:39:78:2e:55:f4:ea:e5:80:9d:75:73:7f:fe:db:64:65: e1:0c:88:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUxMTAzMDUzODQ1WhcNMjUxMTEwMDUzODQ1WjAYMRYwFAYD VQQDEw02OTA4M2ZlNi03MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrGbnq1zQQREPF1kcGZhBnZaDw0ACbHfzHg9VXNe83fHaQdAM11Io8A4xgSW t5z+HNYhc6eHA6Qx4WocpntOYh1Iit+yHxmp4H0KcQJwBZDd4dJkw8ELeRg6Fm9U d0ZAuhY9LeKeHW7YoDe0ikoknYFLcNa0UZzrJCH7Bj9sdglZzJrvUoNDEf90DGTy 8Z2QFPZqj2YkxBRNWI66ufXt3j0sqJuDJ8L7Sq/O0EsteIPhVMuUHXnWD/coR8dv WSjGTR0oTGxxuygvVcyMfVd35tP7Xv+nTVd/NfqihBEUerKuRzxYBWTmFfT9GSvW mdckl5QWN8IORF+p1/3F94xGvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/+ArOp IdNlxPJwA3Z/645kq/dEMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdE1Se83bZINsaWIU4eYe1xS9FmiBxFZqCRkLZvMNZmmcWe2c/su+Q Bbuv2PpK7eyxej8Hi1/lKZeiSX5RUcbpP0eMA3kvk0biMmVSWFLf6423Sj7b8BkO F+SaQaY0nxaPtw4CTy6EblBUT4tplU+88Ex/A8ifbhD1FG1Z1JeTdXa8NZ9l7W/e yq1jAGXMD2UR9YFHKNcwOsQJwuJpDpzxVEg8exy6HTXjxSc27zLD9vcHMjyYGm69 6h05gtszRec+OE/m6fG7/eZA9J9G64+mj5wvis4DXmZQefyaTu4/CqmeJi6AaIhm I+9B6Dl4LlX06uWAnXVzf/7bZGXhDIgR -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:44 2025 by rpki-client