$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft File: HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json) Hash identifier: P5hDI3VSUb11QvJb166LmDsZlp+6cRqilXtLEeWxFpM= Subject key identifier: BF:E9:8E:6E:9E:59:CF:EE:92:BE:2F:DA:CA:A9:DC:AE:6F:BC:40:85 Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC Certificate issuer: /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft Manifest number: 3A Signing time: Mon 03 Nov 2025 07:32:52 +0000 Manifest this update: Mon 03 Nov 2025 07:32:51 +0000 Manifest next update: Mon 10 Nov 2025 07:32:51 +0000 Files and hashes: 1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: Hffe5vBdksC5F9FPN+C0zB3qYG6s8juKxyYo6Q28J6M=) 2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: RBJCVf8Vhn27huQa1u7FR3jz192DVTd/ur20Jj+Crn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC Validity Not Before: Nov 3 07:32:51 2025 GMT Not After : Nov 10 07:32:51 2025 GMT Subject: CN=69085aa4-1ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:91:8b:ad:96:00:dd:81:dd:b1:a5:72:03: 47:7f:1a:a8:90:b7:48:a3:69:6a:33:24:3c:f3:6e: eb:48:7c:fb:04:0f:db:83:84:bf:82:cc:69:dc:bb: 00:31:34:59:03:e3:e7:4a:62:92:5a:ab:bd:ed:76: 85:94:17:3f:12:08:dc:4e:30:ca:7f:4e:bd:6d:b5: a0:96:c5:9f:0e:cb:c1:7e:e5:ac:03:65:20:79:22: 28:ac:d4:09:83:1d:1a:4a:1a:cf:ca:ad:8f:05:b8: 11:d2:fa:ce:8a:14:e2:87:5a:37:cd:6c:71:2d:14: c2:46:af:3a:d0:1f:e0:92:0e:f3:91:cf:20:d1:c6: b3:d6:c7:c4:c1:ed:5b:54:ad:fd:d7:61:18:76:76: 5f:42:26:e5:3c:5f:51:bd:90:99:96:2d:b3:ca:62: 63:4b:6a:a2:26:98:7f:10:8f:64:1f:a7:d6:37:1b: 08:b1:97:74:52:b4:70:45:7b:10:ab:22:62:ec:d3: 8f:fc:6a:62:46:74:c3:67:de:31:7f:57:71:8d:46: a3:d5:04:44:9f:b7:3e:be:72:ef:b3:05:8c:b9:25: 25:a2:37:d2:cc:9d:5a:9b:2f:6a:58:20:d0:b1:16: cd:b0:7c:e2:10:5b:0c:99:5e:7c:3e:e0:55:b0:78: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E9:8E:6E:9E:59:CF:EE:92:BE:2F:DA:CA:A9:DC:AE:6F:BC:40:85 X509v3 Authority Key Identifier: keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:35:92:fa:e4:e8:5e:8c:b7:b1:96:3d:8c:ac:c2:73:cc:92: 6f:eb:7d:d2:f9:f6:84:d7:b3:19:49:da:71:fc:e3:ac:ad:66: fb:d4:f2:3e:fc:10:7c:f2:d7:62:30:48:5f:fd:f8:b4:79:11: f7:59:72:f1:63:86:c0:b9:41:93:2d:01:a6:d6:6e:a1:ee:2c: 65:1f:af:48:87:c0:0a:06:28:61:69:92:26:6a:6d:58:bd:5b: db:9d:f0:e3:58:20:61:08:3c:c5:f4:b9:ab:db:55:f5:de:52: 34:ce:82:f3:70:0f:44:62:7d:a1:58:af:f5:ff:24:36:55:28: 71:43:74:e7:6d:b4:80:7e:d0:15:fb:43:b3:fc:94:a2:7b:cd: 64:6e:3a:8a:69:a9:80:5b:b2:43:2c:59:33:42:be:59:81:43: bb:46:42:12:1e:72:aa:53:0e:20:e1:b6:29:bf:d4:1d:4f:d7: d5:b9:98:01:b1:70:cf:9d:05:a6:a6:d1:fe:12:e5:ee:c0:90: be:53:1c:6c:08:c5:c8:c0:42:1a:bb:73:b1:0b:a0:94:6e:63: 88:a7:ec:60:8d:62:c7:dd:a8:25:f1:14:c7:f6:4f:3d:9c:6b: 04:f2:c9:f9:0c:46:aa:8e:d6:b9:9c:f3:60:c5:8b:b2:e5:12: 6e:86:ad:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkVBNDExMC8GA1UEBRMoMUQyNDJFMzdCN0E3NDZDMzdFNDU0MTQ1NkFCMDA5OEIz QjU3M0NGQzAeFw0yNTExMDMwNzMyNTFaFw0yNTExMTAwNzMyNTFaMBgxFjAUBgNV BAMTDTY5MDg1YWE0LTFjYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP65GLrZYA3YHdsaVyA0d/GqiQt0ijaWozJDzzbutIfPsED9uDhL+CzGncuwAx NFkD4+dKYpJaq73tdoWUFz8SCNxOMMp/Tr1ttaCWxZ8Oy8F+5awDZSB5Iiis1AmD HRpKGs/KrY8FuBHS+s6KFOKHWjfNbHEtFMJGrzrQH+CSDvORzyDRxrPWx8TB7VtU rf3XYRh2dl9CJuU8X1G9kJmWLbPKYmNLaqImmH8Qj2Qfp9Y3Gwixl3RStHBFexCr ImLs04/8amJGdMNn3jF/V3GNRqPVBESftz6+cu+zBYy5JSWiN9LMnVqbL2pYINCx Fs2wfOIQWwyZXnw+4FWweArRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv+mObp5Z z+6Svi/ayqncrm+8QIUwHwYDVR0jBBgwFoAUHSQuN7enRsN+RUFFarAJiztXPPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRUE0LzI2NERDRjFDNjNB RjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSFNRdU43ZW5Sc04tUlVGRmFyQUppenRYUFB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RUE0LzI2NERDRjFDNjNBRjExRjA4RTAwMkI0Q0M0RjlBRTAyL0hTUXVON2VuUnNO LVJVRkZhckFKaXp0WFBQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMU1kvrk6F6Mt7GWPYyswnPMkm/rfdL59oTXsxlJ2nH846ytZvvU8j78 EHzy12IwSF/9+LR5EfdZcvFjhsC5QZMtAabWbqHuLGUfr0iHwAoGKGFpkiZqbVi9 W9ud8ONYIGEIPMX0uavbVfXeUjTOgvNwD0RifaFYr/X/JDZVKHFDdOdttIB+0BX7 Q7P8lKJ7zWRuOoppqYBbskMsWTNCvlmBQ7tGQhIecqpTDiDhtim/1B1P19W5mAGx cM+dBaam0f4S5e7AkL5THGwIxcjAQhq7c7ELoJRuY4in7GCNYsfdqCXxFMf2Tz2c awTyyfkMRqqO1rmc82DFi7LlEm6GrV4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:39 2025 by rpki-client