$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: XnqXd/28dBUShaIar5GKvh8f9UZwW7NRW5wJiIsatQA= Subject key identifier: B4:F1:19:BA:B8:BC:29:A5:F6:FA:A1:B7:FC:FA:5C:51:14:E1:BE:55 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0CB3 Signing time: Tue 04 Nov 2025 18:20:34 +0000 Manifest this update: Tue 04 Nov 2025 18:20:33 +0000 Manifest next update: Tue 11 Nov 2025 18:20:33 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: fXwpXX+JkRl92b6/6LIaXydY+boSUWhtZLNUpT6e3yM=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: wMSrEY4jFMgUk7xS4t418ohJ7Tj1+1Jik/P+Kog8XB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Nov 4 18:20:33 2025 GMT Not After : Nov 11 18:20:33 2025 GMT Subject: CN=690a43f2-122a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:ac:e5:ab:13:6c:50:f6:3f:a6:67:ca:bc: 50:c2:1c:a3:a8:1e:25:07:cc:74:e8:92:2d:fe:89: f2:9b:ea:9c:17:5e:50:70:c6:5b:52:bf:cd:c0:aa: 2a:34:7b:a5:b7:fc:48:34:76:c1:66:35:7b:c4:4b: ca:cf:45:ee:3a:d8:9c:b5:22:54:aa:e7:59:df:d0: 16:6f:f8:6a:63:fd:e2:6b:f5:94:e5:05:47:b8:1a: 86:be:b4:cb:73:d6:4f:5c:ed:75:60:24:54:55:ab: cc:02:d3:d8:ac:1e:c5:74:f5:d0:e0:0b:30:e4:cd: 8e:13:83:3e:b4:7b:34:c0:2b:12:5a:1a:55:49:45: 3e:57:c1:9f:dc:17:96:64:42:8a:f5:a5:e4:f4:18: 88:2f:5a:90:ff:5b:13:6c:ba:b7:4d:7c:72:50:40: c8:44:4b:42:74:23:81:c5:41:eb:9c:43:42:bd:17: c4:63:9e:25:15:e3:e0:8e:f4:e7:14:c3:c5:bd:bc: c7:40:e8:04:af:a1:81:55:25:99:a3:6b:05:2f:44: 13:02:51:b4:3f:a0:e7:8c:13:5c:6b:25:8f:71:00: 7b:04:b4:4e:cc:2a:64:a1:8a:4c:f0:eb:0d:a4:62: 5b:6c:c8:0c:5a:04:dd:40:81:e8:ff:87:c0:5e:c4: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:19:BA:B8:BC:29:A5:F6:FA:A1:B7:FC:FA:5C:51:14:E1:BE:55 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7f:3b:6e:69:6e:87:72:30:17:93:44:62:0f:8a:25:18:5d: 2f:3a:69:45:39:d0:b8:6b:c0:ba:6f:5c:69:65:99:5e:e7:40: 0a:a1:1f:1e:25:73:c3:bc:01:a2:65:c1:52:5b:69:b2:f9:b4: 4e:c6:2b:dc:41:a3:9d:89:78:81:00:1b:82:16:98:ae:5e:5c: f3:32:9d:41:e3:15:9c:65:18:53:5f:38:fc:46:a5:59:d8:7b: 0e:31:a8:f4:85:2a:91:89:10:b3:72:1e:1c:37:5c:f9:af:7e: 81:e8:77:2d:49:6d:be:8c:79:e5:76:51:32:6a:6c:df:13:d3: f6:00:47:df:84:50:be:61:ec:90:af:79:a5:bc:66:d8:dc:9c: 82:f5:d9:3e:41:61:b0:21:38:c3:af:85:d9:27:00:8d:90:d5: 28:c5:a0:a6:84:b7:08:b0:c2:66:21:55:94:db:af:ed:15:b9: 6b:3f:03:5d:4c:42:db:eb:a8:87:02:5d:d3:f3:d1:c2:8f:63: 8b:85:06:4f:6d:53:50:c1:bf:ac:e9:9d:fc:4c:d1:1c:34:9b: b2:ef:61:fb:1e:c5:da:75:e7:79:2f:72:81:c7:ed:4f:aa:76: 88:bd:7d:02:ef:44:d3:80:2e:6b:d2:08:f2:d8:33:84:66:27: 50:af:39:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjUxMTA0MTgyMDMzWhcNMjUxMTExMTgyMDMzWjAYMRYwFAYD VQQDEw02OTBhNDNmMi0xMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdus5asTbFD2P6ZnyrxQwhyjqB4lB8x06JIt/onym+qcF15QcMZbUr/NwKoq NHult/xINHbBZjV7xEvKz0XuOtictSJUqudZ39AWb/hqY/3ia/WU5QVHuBqGvrTL c9ZPXO11YCRUVavMAtPYrB7FdPXQ4Asw5M2OE4M+tHs0wCsSWhpVSUU+V8Gf3BeW ZEKK9aXk9BiIL1qQ/1sTbLq3TXxyUEDIREtCdCOBxUHrnENCvRfEY54lFePgjvTn FMPFvbzHQOgEr6GBVSWZo2sFL0QTAlG0P6DnjBNcayWPcQB7BLROzCpkoYpM8OsN pGJbbMgMWgTdQIHo/4fAXsTtswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTxGbq4 vCml9vqht/z6XFEU4b5VMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwfztuaW6HcjAXk0RiD4olGF0vOmlFOdC4a8C6b1xpZZle50AKoR8e JXPDvAGiZcFSW2my+bROxivcQaOdiXiBABuCFpiuXlzzMp1B4xWcZRhTXzj8RqVZ 2HsOMaj0hSqRiRCzch4cN1z5r36B6HctSW2+jHnldlEyamzfE9P2AEffhFC+YeyQ r3mlvGbY3JyC9dk+QWGwITjDr4XZJwCNkNUoxaCmhLcIsMJmIVWU26/tFblrPwNd TELb66iHAl3T89HCj2OLhQZPbVNQwb+s6Z38TNEcNJuy72H7HsXaded5L3KBx+1P qnaIvX0C70TTgC5r0gjy2DOEZidQrzlq -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:47 2025 by rpki-client