$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: kNkTlLYX9+2DGonKVczelxGjiHcvKGQtJL7hCuCfBzI= Subject key identifier: 26:20:DB:5C:15:8A:6F:6A:33:FB:6E:0F:01:5B:2E:17:F2:08:9B:05 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0BD1 Signing time: Sun 02 Nov 2025 18:52:13 +0000 Manifest this update: Sun 02 Nov 2025 18:52:13 +0000 Manifest next update: Sun 09 Nov 2025 18:52:13 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: /xpThm/5JsU3A1ZyrsrWQ9RGI9kGE+3yTYZCq78e9Ck=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Nov 2 18:52:13 2025 GMT Not After : Nov 9 18:52:13 2025 GMT Subject: CN=6907a85d-b24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:0e:05:62:ba:98:43:1b:c9:07:0b:06:4d: b3:3c:12:de:57:ca:90:34:78:90:17:74:e4:ae:d5: c7:80:7b:ec:10:7a:1f:50:75:d4:df:df:00:f5:18: 8a:b1:59:5b:5c:d8:ca:22:c2:08:40:74:7d:d8:f3: 32:09:82:e4:c3:c8:1a:de:e2:7a:0e:86:44:74:bf: 10:41:48:c7:58:ab:40:e5:eb:df:90:55:6d:e7:17: 08:d3:3e:1e:d6:b8:02:f4:ee:eb:ab:e2:d8:0b:cc: c8:9f:57:3a:cc:66:1a:0c:65:8e:2f:d8:c1:a6:51: d0:69:c1:10:4e:71:c3:a1:a2:4e:20:8f:05:f6:ab: 6b:65:59:1d:ee:05:a4:aa:c0:e8:ea:fb:36:aa:cc: 6f:b6:bf:7d:9d:7b:9e:91:a0:d9:bf:8d:76:b2:88: 4e:0e:a6:6a:ab:05:38:c8:ff:c1:3f:05:c9:9d:fc: a6:74:19:ad:64:23:95:72:9c:26:3e:fa:80:64:8a: c0:a0:31:60:1f:4c:cf:9e:29:87:df:61:06:c3:5b: 88:cd:64:06:22:ad:38:94:20:25:d0:c2:e4:2d:f6: 27:4c:09:09:fa:ce:30:ee:3b:0e:95:dd:3c:0c:37: aa:14:01:df:99:31:dc:5d:4e:86:5b:f6:00:9b:43: 8c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:20:DB:5C:15:8A:6F:6A:33:FB:6E:0F:01:5B:2E:17:F2:08:9B:05 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7e:3f:e9:cf:fe:34:25:9a:10:f9:c5:bb:59:d0:a8:3d:e2: 92:60:1d:9d:c4:97:ae:06:68:40:92:0b:da:4f:85:75:6c:f0: 92:7b:58:e7:c7:f4:33:d0:83:25:25:f2:2c:bf:fb:ed:11:29: 73:54:8c:0f:a7:53:92:8c:ea:6b:33:5e:29:72:ca:9d:19:66: 20:2f:64:76:15:ac:02:29:71:5f:6e:e7:f8:cd:14:f9:ad:85: a3:4a:9b:10:1c:49:06:82:c1:f1:4c:ec:84:27:93:c8:fc:ce: 3e:47:d0:01:64:28:ed:04:44:f7:65:6a:0b:0b:20:3d:7f:f8: af:7f:69:f8:15:0a:0d:a4:9f:75:b7:00:f8:a0:05:ed:02:59: 82:a8:47:30:de:d3:8e:0c:bd:f7:45:1d:e4:f3:4c:1d:14:e8: 1d:0b:4c:9f:f7:81:73:2d:ee:6c:82:b3:59:6d:a0:0e:e5:73: 6e:1d:8e:45:b4:39:44:04:a4:c4:da:bb:ba:b6:d5:6e:23:5b: 30:23:2e:72:7f:0c:e7:b1:db:ac:cb:c6:96:fc:e2:dd:57:f9: 93:87:19:12:70:8e:0e:40:3d:7c:8e:a0:f1:3b:01:89:5a:7b: 4b:c0:b8:52:1b:8c:74:2b:42:d6:ff:e7:4a:9b:98:62:2f:24: 6a:27:3a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUxMTAyMTg1MjEzWhcNMjUxMTA5MTg1MjEzWjAYMRYwFAYD VQQDEw02OTA3YTg1ZC1iMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PEOBWK6mEMbyQcLBk2zPBLeV8qQNHiQF3TkrtXHgHvsEHofUHXU398A9RiK sVlbXNjKIsIIQHR92PMyCYLkw8ga3uJ6DoZEdL8QQUjHWKtA5evfkFVt5xcI0z4e 1rgC9O7rq+LYC8zIn1c6zGYaDGWOL9jBplHQacEQTnHDoaJOII8F9qtrZVkd7gWk qsDo6vs2qsxvtr99nXuekaDZv412sohODqZqqwU4yP/BPwXJnfymdBmtZCOVcpwm PvqAZIrAoDFgH0zPnimH32EGw1uIzWQGIq04lCAl0MLkLfYnTAkJ+s4w7jsOld08 DDeqFAHfmTHcXU6GW/YAm0OMJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYg21wV im9qM/tuDwFbLhfyCJsFMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArfj/pz/40JZoQ+cW7WdCoPeKSYB2dxJeuBmhAkgvaT4V1bPCSe1jn x/Qz0IMlJfIsv/vtESlzVIwPp1OSjOprM14pcsqdGWYgL2R2FawCKXFfbuf4zRT5 rYWjSpsQHEkGgsHxTOyEJ5PI/M4+R9ABZCjtBET3ZWoLCyA9f/ivf2n4FQoNpJ91 twD4oAXtAlmCqEcw3tOODL33RR3k80wdFOgdC0yf94FzLe5sgrNZbaAO5XNuHY5F tDlEBKTE2ru6ttVuI1swIy5yfwznsdusy8aW/OLdV/mThxkScI4OQD18jqDxOwGJ WntLwLhSG4x0K0LW/+dKm5hiLyRqJzpm -----END CERTIFICATE-----Generated at Tue Nov 4 00:51:11 2025 by rpki-client