$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: lsDM0+4605hX+0Gy/HntQGYmrOrhnjUd56y8nwycAOo= Subject key identifier: A6:46:7D:6D:87:D2:1B:0B:DE:53:2B:A1:BF:01:2F:42:DE:C9:30:33 Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 044A Signing time: Mon 03 Nov 2025 00:11:38 +0000 Manifest this update: Mon 03 Nov 2025 00:11:37 +0000 Manifest next update: Mon 10 Nov 2025 00:11:37 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: SgzTr/tebWxQpVGBMU8Vf3NujElZpFdbMM0vXZoP4Gk=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Nov 3 00:11:37 2025 GMT Not After : Nov 10 00:11:37 2025 GMT Subject: CN=6907f339-fa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:37:63:8e:94:e4:23:bd:7b:b9:de:f6:6b: a1:a1:96:af:78:08:b3:2c:3d:d7:a9:c8:08:95:14: c9:1e:75:8a:2f:14:f8:6a:c0:b9:6a:85:ee:fb:44: 06:b8:ce:d4:09:79:bd:ce:ed:71:93:0d:11:24:2f: ea:40:07:13:cf:66:f5:55:a2:7a:9e:e1:13:f9:a5: f1:7c:a9:ce:ad:f8:0f:e9:8c:8c:83:26:4c:cb:04: c6:7a:07:b1:53:c5:24:e2:ff:37:23:e8:4a:56:67: a8:c6:a9:a1:cc:04:ac:6a:4f:a5:d7:ee:c2:db:ac: f0:22:55:a2:3c:52:2d:5a:39:8c:87:4a:d6:bd:7f: 5b:01:24:da:7e:ec:da:f6:be:72:0c:f0:4e:2a:d6: 58:06:57:b8:5b:76:f0:d3:21:a7:e6:87:62:ee:3f: 5b:33:04:35:ea:39:2f:ab:72:a0:59:a2:00:94:2a: d8:7f:b4:2d:fe:97:cd:cf:d4:aa:56:30:da:eb:c5: 1b:c4:7f:0a:29:3f:e8:40:85:16:5e:5f:92:7d:a6: 37:1d:ba:98:be:8a:9a:15:7c:06:dc:0a:eb:78:94: b4:1d:ab:6a:5b:96:09:09:d9:23:f0:22:08:94:f1: 2f:36:3f:9b:e9:e3:64:b7:e3:89:da:46:99:3f:80: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:7D:6D:87:D2:1B:0B:DE:53:2B:A1:BF:01:2F:42:DE:C9:30:33 X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1f:61:62:b2:b5:3a:d3:f2:e8:45:75:52:03:55:e2:87:f7: 24:95:38:e9:9d:84:7f:e1:e4:83:70:7e:05:63:4a:5d:c8:d0: c2:1b:25:16:58:c0:42:22:e7:1f:96:17:78:90:ea:9a:88:02: 7e:a0:1c:a9:5f:09:fe:6d:96:54:7a:96:5f:23:69:9b:ce:4d: fc:33:9d:13:c3:22:6b:94:cd:2b:9a:85:68:0d:05:4a:32:ab: 85:4a:cb:fb:df:79:96:bf:eb:99:ba:67:b5:14:4d:63:c8:68: 31:f0:a8:84:9b:ce:2e:b0:7f:53:72:79:f6:62:c5:8b:21:c1: da:5a:c7:00:1d:ef:bc:8a:08:3f:95:6e:f5:bb:46:eb:cb:93: 99:bd:06:85:9b:fc:c3:13:b5:70:65:03:93:ad:81:a8:65:6f: f1:da:fa:b6:ed:c9:3b:e8:24:81:3f:48:37:8d:ed:53:a6:d5: a9:cf:3d:e7:ec:6b:82:c0:76:f7:fb:b8:59:c0:6b:b5:50:6b: d7:16:b2:86:7a:58:b9:3f:4a:b0:a1:e5:c6:46:0e:45:25:ad: 8a:95:1a:74:7a:32:96:e5:48:8b:35:fb:7b:10:e4:4a:af:91: a4:88:c8:21:68:a3:2c:75:38:da:41:a5:4d:db:b3:72:40:36: d1:3d:b9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUxMTAzMDAxMTM3WhcNMjUxMTEwMDAxMTM3WjAYMRYwFAYD VQQDEw02OTA3ZjMzOS1mYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX83Y46U5CO9e7ne9muhoZaveAizLD3XqcgIlRTJHnWKLxT4asC5aoXu+0QG uM7UCXm9zu1xkw0RJC/qQAcTz2b1VaJ6nuET+aXxfKnOrfgP6YyMgyZMywTGegex U8Uk4v83I+hKVmeoxqmhzASsak+l1+7C26zwIlWiPFItWjmMh0rWvX9bASTafuza 9r5yDPBOKtZYBle4W3bw0yGn5odi7j9bMwQ16jkvq3KgWaIAlCrYf7Qt/pfNz9Sq VjDa68UbxH8KKT/oQIUWXl+SfaY3HbqYvoqaFXwG3ArreJS0HatqW5YJCdkj8CII lPEvNj+b6eNkt+OJ2kaZP4DYRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZGfW2H 0hsL3lMrob8BL0LeyTAzMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSH2FisrU60/LoRXVSA1Xih/cklTjpnYR/4eSDcH4FY0pdyNDCGyUW WMBCIucflhd4kOqaiAJ+oBypXwn+bZZUepZfI2mbzk38M50TwyJrlM0rmoVoDQVK MquFSsv733mWv+uZume1FE1jyGgx8KiEm84usH9Tcnn2YsWLIcHaWscAHe+8igg/ lW71u0bry5OZvQaFm/zDE7VwZQOTrYGoZW/x2vq27ck76CSBP0g3je1TptWpzz3n 7GuCwHb3+7hZwGu1UGvXFrKGeli5P0qwoeXGRg5FJa2KlRp0ejKW5UiLNft7EORK r5GkiMghaKMsdTjaQaVN27NyQDbRPbmE -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:10 2025 by rpki-client