$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: OYlt2FujlDFKaAzzNr8/PaVHzgRxCA0c5ZTtdxa20Lc= Subject key identifier: 30:78:94:FC:D2:73:A1:16:C9:5F:A1:A0:76:97:FB:74:60:37:45:59 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: 018C Signing time: Mon 03 Nov 2025 03:36:12 +0000 Manifest this update: Mon 03 Nov 2025 03:36:11 +0000 Manifest next update: Mon 10 Nov 2025 03:36:11 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: N803N0IOczB5Pfd5spjw4wKvUrNEnN9+B6x+NFVIKGY=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: tkC94LIcazFbktBOOWxjViOTNkAmC8Zs4gf9iesOvuI=) 3: 81D3CB186B7D11F0A482004CC4F9AE02.roa (hash: UKKopt0iwOreSp0uNtTtDqHFVLkM2EYVL8idxsWUjB0=) 4: ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (hash: OcNbuxa2ZSSG1bMP1PQ4GkM3WfcX4kd/s4GUQn4/jaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Nov 3 03:36:11 2025 GMT Not After : Nov 10 03:36:11 2025 GMT Subject: CN=6908232b-2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:79:3d:08:82:7d:47:ee:26:92:cf:a7:94: 45:b8:08:e9:61:ce:56:7a:9c:d9:ed:dd:75:fd:08: 04:27:3d:a1:12:f4:45:5e:8c:66:d1:d9:bf:62:bb: 12:a7:d4:cc:35:92:e6:f6:02:ee:85:e8:88:77:39: d0:f2:5b:ce:ce:1f:05:bb:55:ae:f2:bd:74:d4:8b: 2e:97:38:b0:2d:34:dc:84:94:b7:24:4e:5d:82:bf: 5b:79:22:cf:6a:09:4c:13:3b:49:a5:ba:fb:e4:ea: 2d:1b:71:d3:c9:d6:d0:e9:e4:42:0a:93:f6:24:7e: 20:22:6b:f0:72:4e:4c:da:bd:89:49:64:12:79:86: 55:f7:e0:17:de:d8:dd:29:fc:fe:dd:8a:0f:99:96: a7:e7:13:09:08:9c:05:e1:36:76:9e:96:42:c7:70: f0:91:fe:9f:a0:57:ed:20:6a:02:e6:0a:d6:a7:a5: d4:4c:e7:ba:3f:5c:c2:2a:89:3f:be:0f:9d:d1:2a: d9:bf:71:be:17:94:ee:f6:0f:ec:43:d4:0b:82:c0: ef:7f:67:c8:a2:cc:a2:1a:12:ac:11:f9:1b:53:e7: d4:d8:db:18:45:7d:42:81:bb:7d:d0:71:5a:ac:82: 7a:06:5f:50:34:5b:ef:e5:25:3d:63:f3:5c:95:8a: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:78:94:FC:D2:73:A1:16:C9:5F:A1:A0:76:97:FB:74:60:37:45:59 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c9:09:24:bf:8f:f7:cb:b8:b9:5b:33:7b:84:93:b4:54:c8: 12:db:a2:1c:2e:fe:e4:b6:15:cb:7c:b3:56:9f:ac:6e:47:d8: 42:44:36:aa:c9:ce:04:70:1e:30:ee:46:12:98:97:b0:c1:fa: c0:67:97:3f:ae:44:60:4c:31:c9:3f:e3:73:04:d1:02:8e:52: e1:db:24:26:a1:fe:57:62:24:be:2c:e1:ac:f6:37:ee:a8:e7: c7:06:5c:01:37:3b:4d:ef:46:b5:b6:f0:96:59:e3:0f:7e:cf: 12:14:ea:e1:4f:3f:7e:5a:28:62:2a:7b:e0:48:37:d5:33:f6: b8:25:ae:c4:be:3c:85:a8:10:03:75:35:cf:c0:dd:6b:67:01: 73:6c:ed:4a:39:70:4b:03:98:bf:c5:a5:86:39:81:6a:9f:9d: 60:3d:e5:e8:83:7c:9d:86:4d:1d:84:a6:c5:4a:b2:82:41:b2: 7d:80:a8:b3:da:1e:33:69:93:0f:f6:58:c3:f4:9e:e2:05:bd: fe:04:29:f5:ae:d7:5f:eb:d3:07:36:54:21:7e:0d:2e:0e:22: 88:7b:68:3b:0a:bd:de:5e:b8:9b:1c:b3:f1:10:83:6d:6d:88: f8:64:9c:94:87:e0:b7:ab:17:52:4e:08:54:cb:e3:f2:cb:c3: 88:b1:78:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUxMTAzMDMzNjExWhcNMjUxMTEwMDMzNjExWjAYMRYwFAYD VQQDEw02OTA4MjMyYi0yNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrR5PQiCfUfuJpLPp5RFuAjpYc5WepzZ7d11/QgEJz2hEvRFXoxm0dm/YrsS p9TMNZLm9gLuheiIdznQ8lvOzh8Fu1Wu8r101IsulziwLTTchJS3JE5dgr9beSLP aglMEztJpbr75OotG3HTydbQ6eRCCpP2JH4gImvwck5M2r2JSWQSeYZV9+AX3tjd Kfz+3YoPmZan5xMJCJwF4TZ2npZCx3Dwkf6foFftIGoC5grWp6XUTOe6P1zCKok/ vg+d0SrZv3G+F5Tu9g/sQ9QLgsDvf2fIosyiGhKsEfkbU+fU2NsYRX1Cgbt90HFa rIJ6Bl9QNFvv5SU9Y/NclYqH2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB4lPzS c6EWyV+hoHaX+3RgN0VZMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXyQkkv4/3y7i5WzN7hJO0VMgS26IcLv7kthXLfLNWn6xuR9hCRDaq yc4EcB4w7kYSmJewwfrAZ5c/rkRgTDHJP+NzBNECjlLh2yQmof5XYiS+LOGs9jfu qOfHBlwBNztN70a1tvCWWeMPfs8SFOrhTz9+WihiKnvgSDfVM/a4Ja7EvjyFqBAD dTXPwN1rZwFzbO1KOXBLA5i/xaWGOYFqn51gPeXog3ydhk0dhKbFSrKCQbJ9gKiz 2h4zaZMP9ljD9J7iBb3+BCn1rtdf69MHNlQhfg0uDiKIe2g7Cr3eXribHLPxEINt bYj4ZJyUh+C3qxdSTghUy+Pyy8OIsXjl -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:38 2025 by rpki-client