$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: +nSMs0OJIsbQnFt3H5mFuSODIW7mAQ/Q3cHMz7R7Iyk= Subject key identifier: 99:11:7B:52:CC:C8:8A:A3:A0:C7:CE:45:96:6E:8A:A1:F1:32:E2:5A Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B55 Signing time: Tue 04 Nov 2025 19:16:36 +0000 Manifest this update: Tue 04 Nov 2025 19:16:36 +0000 Manifest next update: Tue 11 Nov 2025 19:16:36 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: +EqISfuOsaO+iut+wyJZtdmvcwDYKMBtIJxckplfUe0=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: 0AMWGP+6uBhgSLnnmyVJPmvq5N7a9ynJhnv9JCsPnVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Nov 4 19:16:36 2025 GMT Not After : Nov 11 19:16:36 2025 GMT Subject: CN=690a5114-cc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:85:19:ad:79:3f:0f:45:78:40:76:1f:08:b3: 39:78:7e:ee:dd:7d:b4:ea:d1:28:28:27:eb:b7:5c: 8c:35:46:22:a1:7b:3b:ef:5e:05:c7:ff:58:bb:83: 5b:9f:13:15:d0:e4:bf:f9:62:4c:90:d6:53:cc:ea: 92:bf:5d:00:5a:27:9a:cb:fd:7f:35:29:e7:1c:25: 39:e2:ae:90:07:1d:87:02:11:61:66:1e:fa:64:52: 83:72:66:8d:87:ea:69:2a:83:a3:15:e2:c2:c8:4e: 3b:5c:ef:82:ec:ee:e4:f3:41:22:59:b0:52:c4:73: e1:a9:8d:00:27:60:68:e5:00:53:b7:2e:87:4f:1c: 7c:43:64:6c:cf:3b:b4:8b:82:c1:48:45:81:25:de: f8:b3:03:ad:ae:bf:99:6c:05:49:1e:05:11:f9:e4: c7:c3:a9:86:ca:c4:e3:2b:28:35:20:0a:99:9c:5a: 43:04:ef:b2:64:ca:29:d0:4f:9b:4d:ad:8c:b6:ce: d9:50:b2:93:cb:49:fd:1a:f6:be:37:9c:fa:d3:11: 12:2b:a7:04:6b:db:11:a5:ae:d4:2d:20:7c:09:69: 94:13:04:2c:44:50:d6:79:0c:49:54:a6:27:91:88: 5e:1d:6b:05:29:03:71:82:eb:f8:1c:e8:f1:e4:25: 69:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:7B:52:CC:C8:8A:A3:A0:C7:CE:45:96:6E:8A:A1:F1:32:E2:5A X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b2:5c:6a:89:63:b6:24:9f:bd:e0:8a:a7:8e:1e:4b:c9:e2: 31:ec:73:72:8c:8f:2b:d1:5f:ef:f0:03:3e:43:fb:59:6c:5c: 9b:29:f6:f4:73:6d:35:20:39:8c:f2:b7:64:98:e2:ce:16:23: b3:a4:95:f7:c4:ba:71:2b:cd:51:9e:b7:61:0a:4c:62:31:41: 3d:84:02:31:a8:fc:ff:58:09:1d:52:8d:c0:f1:cb:1c:32:0e: cc:e0:47:db:8c:0f:1c:ee:05:1d:6d:89:cf:5b:4d:cc:ed:1a: 07:59:40:7b:61:a6:17:ba:89:32:b0:0a:bd:c9:fa:ed:9b:ec: fa:6a:80:a4:ed:f8:99:6a:f1:07:ad:42:65:15:75:12:d7:ee: 98:eb:81:f3:53:76:52:80:5c:33:20:89:68:46:10:3c:67:b4: b9:a6:e5:d6:12:16:3c:81:b6:88:02:94:3d:f6:09:d4:d0:a5: ad:b8:63:2f:3e:04:d9:1b:26:18:4d:d9:e7:f6:00:3d:43:f8: f0:e3:d6:5c:4d:33:2c:e5:7c:10:1b:a2:7b:5c:d7:df:d3:20: bc:ab:03:8c:5b:18:54:62:1b:dc:e7:2b:ab:95:56:a7:f6:b8: 43:5e:dd:bf:e7:da:c8:f9:7a:84:94:c9:d8:08:77:94:49:12: cc:06:00:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUxMTA0MTkxNjM2WhcNMjUxMTExMTkxNjM2WjAYMRYwFAYD VQQDEw02OTBhNTExNC1jYzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64UZrXk/D0V4QHYfCLM5eH7u3X206tEoKCfrt1yMNUYioXs7714Fx/9Yu4Nb nxMV0OS/+WJMkNZTzOqSv10AWieay/1/NSnnHCU54q6QBx2HAhFhZh76ZFKDcmaN h+ppKoOjFeLCyE47XO+C7O7k80EiWbBSxHPhqY0AJ2Bo5QBTty6HTxx8Q2Rszzu0 i4LBSEWBJd74swOtrr+ZbAVJHgUR+eTHw6mGysTjKyg1IAqZnFpDBO+yZMop0E+b Ta2Mts7ZULKTy0n9Gva+N5z60xESK6cEa9sRpa7ULSB8CWmUEwQsRFDWeQxJVKYn kYheHWsFKQNxguv4HOjx5CVppQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkRe1LM yIqjoMfORZZuiqHxMuJaMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwslxqiWO2JJ+94Iqnjh5LyeIx7HNyjI8r0V/v8AM+Q/tZbFybKfb0 c201IDmM8rdkmOLOFiOzpJX3xLpxK81RnrdhCkxiMUE9hAIxqPz/WAkdUo3A8csc Mg7M4EfbjA8c7gUdbYnPW03M7RoHWUB7YaYXuokysAq9yfrtm+z6aoCk7fiZavEH rUJlFXUS1+6Y64HzU3ZSgFwzIIloRhA8Z7S5puXWEhY8gbaIApQ99gnU0KWtuGMv PgTZGyYYTdnn9gA9Q/jw49ZcTTMs5XwQG6J7XNff0yC8qwOMWxhUYhvc5yurlVan 9rhDXt2/59rI+XqElMnYCHeUSRLMBgAa -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:09 2025 by rpki-client