$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json) Hash identifier: kIutlHRyhw6oTPuYrHu3tR4Vfe3xkbonhpHQpfi4ht4= Subject key identifier: 14:BF:33:91:59:79:EE:B2:23:5C:37:08:52:99:87:C9:D9:C5:CC:54 Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft Manifest number: 0174 Signing time: Wed 05 Nov 2025 04:01:52 +0000 Manifest this update: Wed 05 Nov 2025 04:01:52 +0000 Manifest next update: Wed 12 Nov 2025 04:01:52 +0000 Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: 1rd4lsdB4dFy5KimSniVygD9Y6nzeg6D3OP4kttNrT0=) 2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: oBJXc8GYCJgJm/47m5fsAm6DbvpC1fTX4mDB8Bng8Io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772 Validity Not Before: Nov 5 04:01:52 2025 GMT Not After : Nov 12 04:01:52 2025 GMT Subject: CN=690acc30-1c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:8f:b2:15:0c:e3:94:a2:01:b8:d2:43:a3: 58:72:02:da:6c:c7:4d:66:1b:38:e6:d1:ce:48:d6: e4:e6:97:e2:6b:18:79:4d:49:16:80:0e:bf:91:8e: 2f:91:e4:a6:7d:9f:e2:51:af:8d:5c:98:88:f2:83: f3:50:68:69:ee:81:0d:98:f9:7a:33:ef:fe:97:48: ba:39:d5:43:94:77:9b:f2:cf:b4:38:d1:f6:22:25: e7:ac:1d:70:da:82:de:96:07:8b:87:d5:40:fc:7b: de:27:0a:9e:8c:71:14:30:da:de:8d:ae:95:4e:29: 8a:20:6d:a1:2b:40:d3:a0:23:f7:f9:12:2c:33:97: 8b:ce:2e:c1:74:31:7f:dd:e7:51:09:58:9b:2a:b0: 38:f1:03:60:ca:50:dd:35:99:4c:bf:99:e4:e5:df: b2:5d:dd:46:a6:6c:9d:a3:c8:64:31:2b:bc:a4:16: 43:e4:6f:2b:1e:54:6d:e2:a4:cf:ef:b5:58:03:02: d4:71:4f:ef:e1:22:41:2b:f0:b2:c3:09:a9:41:00: 85:17:8c:a3:10:8e:d3:b4:85:e2:e5:21:b0:0b:df: b7:58:52:a9:10:6d:84:d1:26:d3:1f:8e:77:ce:85: 94:e2:f7:c0:3e:4f:a4:e6:a7:4a:0b:e3:ad:cd:5c: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:33:91:59:79:EE:B2:23:5C:37:08:52:99:87:C9:D9:C5:CC:54 X509v3 Authority Key Identifier: keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ba:f4:f1:5d:ca:65:b0:a0:b3:76:12:85:54:be:d8:45:bc: c6:c2:db:d7:11:2c:41:23:5d:f7:32:fa:ec:96:19:5b:8f:db: 91:32:2a:83:52:c4:98:1e:65:49:06:1b:3a:93:32:7a:40:95: 3e:56:3c:b9:c8:28:a3:c6:46:ff:ba:0e:d5:a8:76:c4:96:52: 82:b9:fa:fc:c9:e0:1b:6c:a6:2f:13:b6:49:c3:17:65:85:e4: 79:f6:03:00:d9:03:96:61:36:0b:92:94:20:06:6f:a4:68:0d: d7:fc:c4:0c:54:60:52:c0:d0:8f:00:91:a1:7a:b5:b7:28:e7: d7:f6:62:83:cd:b5:a6:ad:9e:4e:97:89:20:4c:a1:16:8f:6b: bf:bd:55:03:4c:fd:2d:8d:4c:52:1f:7c:dd:b9:b2:cb:d1:ac: e9:9e:3b:6d:dc:ea:ca:f3:3e:55:4c:a6:73:7c:3f:d3:77:e5: 14:b1:11:09:3c:b1:44:6e:9c:69:df:8b:59:91:04:9f:0b:52: 11:08:dd:a6:ba:05:de:df:1a:af:d4:5e:86:d5:b6:35:46:15: c1:53:f0:60:f5:10:ac:98:dc:9c:b3:a7:a0:81:25:72:1d:78: dd:5d:ee:66:de:06:66:2d:7b:39:cb:89:cd:82:bb:ea:79:df: d9:41:63:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNDQTQxMTAvBgNVBAUTKDBDN0M0RDZCRTg2RDU1QkU0NENCNEFEOTY2NjZDMTUz NTE5M0Y3NzIwHhcNMjUxMTA1MDQwMTUyWhcNMjUxMTEyMDQwMTUyWjAYMRYwFAYD VQQDEw02OTBhY2MzMC0xYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLKPshUM45SiAbjSQ6NYcgLabMdNZhs45tHOSNbk5pfiaxh5TUkWgA6/kY4v keSmfZ/iUa+NXJiI8oPzUGhp7oENmPl6M+/+l0i6OdVDlHeb8s+0ONH2IiXnrB1w 2oLelgeLh9VA/HveJwqejHEUMNreja6VTimKIG2hK0DToCP3+RIsM5eLzi7BdDF/ 3edRCVibKrA48QNgylDdNZlMv5nk5d+yXd1Gpmydo8hkMSu8pBZD5G8rHlRt4qTP 77VYAwLUcU/v4SJBK/CywwmpQQCFF4yjEI7TtIXi5SGwC9+3WFKpEG2E0SbTH453 zoWU4vfAPk+k5qdKC+OtzVzLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS/M5FZ ee6yI1w3CFKZh8nZxcxUMB8GA1UdIwQYMBaAFAx8TWvobVW+RMtK2WZmwVNRk/dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0NBNC9CNzUxNkIxMDg5 QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZiNUV5MHJaWm1iQlUxR1Q5 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIeE5hLWh0VmI1RXkwclpabWJCVTFHVDkzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0NBNC9CNzUxNkIxMDg5QjYxMUVFOTk1MTJBNkRDNEY5QUUwMi9ESHhOYS1odFZi NUV5MHJaWm1iQlUxR1Q5M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuuvTxXcplsKCzdhKFVL7YRbzGwtvXESxBI133Mvrslhlbj9uRMiqD UsSYHmVJBhs6kzJ6QJU+Vjy5yCijxkb/ug7VqHbEllKCufr8yeAbbKYvE7ZJwxdl heR59gMA2QOWYTYLkpQgBm+kaA3X/MQMVGBSwNCPAJGherW3KOfX9mKDzbWmrZ5O l4kgTKEWj2u/vVUDTP0tjUxSH3zdubLL0azpnjtt3OrK8z5VTKZzfD/Td+UUsREJ PLFEbpxp34tZkQSfC1IRCN2mugXe3xqv1F6G1bY1RhXBU/Bg9RCsmNycs6eggSVy HXjdXe5m3gZmLXs5y4nNgrvqed/ZQWMB -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:37 2025 by rpki-client