$ rpki-client -vvf rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft File: H3amlEQsq0PX0XzW_fmpfgt_qo4.mft (raw, json) Hash identifier: BVfoten7X0GfxajYYuCSKiyzOxCRxkCOhC5aKnRaRkQ= Subject key identifier: 52:39:E0:C2:64:00:C7:76:26:39:4D:A7:61:07:D2:47:3A:FD:77:6B Authority key identifier: 1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E Certificate issuer: /CN=A9158059/serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft Manifest number: 066D Signing time: Sun 02 Nov 2025 22:32:36 +0000 Manifest this update: Sun 02 Nov 2025 22:32:36 +0000 Manifest next update: Sun 09 Nov 2025 22:32:36 +0000 Files and hashes: 1: H3amlEQsq0PX0XzW_fmpfgt_qo4.crl (hash: SvIuv3H52q2NoUEpIggJu1CrqOR+OcYkgiETGKC7LMo=) 2: 702A62CE9CC311EBA5A7A47BC4F9AE02.roa (hash: casLvQjbiWmoUm1zZDsT8rFqITbKKo8QIpvIUSskW7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158059, serialNumber=1F76A694442CAB43D7D17CD6FDF9A97E0B7FAA8E Validity Not Before: Nov 2 22:32:36 2025 GMT Not After : Nov 9 22:32:36 2025 GMT Subject: CN=6907dc04-5cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:c9:f6:28:6c:fb:65:6b:b1:1e:1a:fb:9b: 0c:fd:0a:9a:14:f9:79:ed:f1:08:9c:04:b2:ab:8d: 05:83:58:25:3c:fe:da:e8:a3:28:11:2f:1e:db:83: 82:26:86:74:56:2d:c6:38:62:1a:fb:80:dc:4b:88: 74:61:44:e6:b5:a5:8e:b9:85:81:38:d0:03:a8:56: 4a:66:31:7c:81:06:52:a2:61:45:46:28:d7:ba:45: d3:c9:5e:c7:34:37:ef:29:d5:02:6a:9e:55:61:c6: 2f:e0:85:04:20:85:cc:ff:cf:62:b0:5e:0b:6a:78: dd:64:38:9b:c9:8c:14:c4:c2:ef:43:32:b6:b5:d1: 35:59:41:a7:73:1d:4f:ea:ff:b1:02:90:46:4e:01: bd:11:fc:1b:39:ec:be:73:02:45:36:18:0f:f6:00: a8:56:ac:6b:25:e2:71:40:9c:6f:10:a5:60:56:e3: ce:a6:4b:10:fd:4b:67:50:3c:bf:7e:c3:bc:ca:55: 1b:b6:b6:99:71:a9:f6:36:c4:f7:d6:16:ba:8f:b3: 1a:d7:54:df:ed:86:28:7a:7d:0d:a9:6e:57:ce:8c: 2d:55:9c:87:ef:0c:b6:90:90:52:05:e8:62:37:f1: f8:63:89:1e:a3:0d:22:a3:8f:e2:3d:c5:9c:c8:ac: 36:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:39:E0:C2:64:00:C7:76:26:39:4D:A7:61:07:D2:47:3A:FD:77:6B X509v3 Authority Key Identifier: keyid:1F:76:A6:94:44:2C:AB:43:D7:D1:7C:D6:FD:F9:A9:7E:0B:7F:AA:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H3amlEQsq0PX0XzW_fmpfgt_qo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158059/BBD81DA89CC111EBBFDE6579C4F9AE02/H3amlEQsq0PX0XzW_fmpfgt_qo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:13:3f:2e:33:ff:b6:52:e2:83:14:47:41:2d:85:f9:50:d4: 43:60:15:d9:6b:06:da:a0:10:ff:7a:ea:ed:7b:d9:8b:a8:1b: b6:95:62:c4:8e:e0:6f:99:14:6c:7c:fc:40:36:05:14:32:58: 1a:60:11:9b:f8:86:ca:1c:a9:7b:59:7e:6e:b4:d8:09:a0:51: 7a:76:32:61:44:b3:1a:b0:43:6f:70:18:58:46:a8:87:5d:0b: 8b:5a:5a:63:63:ea:a7:30:74:f7:32:bf:69:bd:12:89:32:58: e0:3a:c2:6b:35:3e:6e:ee:34:9a:0f:86:b6:f5:74:59:21:2c: d3:17:48:2f:13:f0:43:d4:74:a6:ae:cc:e9:db:b2:25:8b:51: 59:ff:80:8b:6e:69:b8:06:97:3c:0c:1b:59:0f:df:32:38:6c: 08:26:46:61:a5:b1:ce:c6:75:08:6c:3c:1e:e6:eb:e3:46:4a: c3:0c:40:f4:b2:99:74:5c:9a:ae:97:e0:3a:60:23:99:ad:90: d7:3d:5e:ae:28:e0:89:07:c1:1b:b3:ab:56:e9:60:e8:45:ee: 6d:f4:f0:fa:60:2a:32:19:39:ae:74:c8:b9:88:b1:15:cf:f0: 03:fd:40:3f:31:64:32:31:c2:19:04:aa:df:17:95:45:00:70: 9c:97:2b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwNTkxMTAvBgNVBAUTKDFGNzZBNjk0NDQyQ0FCNDNEN0QxN0NENkZERjlBOTdF MEI3RkFBOEUwHhcNMjUxMTAyMjIzMjM2WhcNMjUxMTA5MjIzMjM2WjAYMRYwFAYD VQQDEw02OTA3ZGMwNC01Y2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu77J9ihs+2VrsR4a+5sM/QqaFPl57fEInASyq40Fg1glPP7a6KMoES8e24OC JoZ0Vi3GOGIa+4DcS4h0YUTmtaWOuYWBONADqFZKZjF8gQZSomFFRijXukXTyV7H NDfvKdUCap5VYcYv4IUEIIXM/89isF4LanjdZDibyYwUxMLvQzK2tdE1WUGncx1P 6v+xApBGTgG9EfwbOey+cwJFNhgP9gCoVqxrJeJxQJxvEKVgVuPOpksQ/UtnUDy/ fsO8ylUbtraZcan2NsT31ha6j7Ma11Tf7YYoen0NqW5XzowtVZyH7wy2kJBSBehi N/H4Y4keow0io4/iPcWcyKw2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFI54MJk AMd2JjlNp2EH0kc6/XdrMB8GA1UdIwQYMBaAFB92ppRELKtD19F81v35qX4Lf6qO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODA1OS9CQkQ4MURBODlD QzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3EwUFgwWHpXX2ZtcGZndF9x bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gzYW1sRVFzcTBQWDBYeldfZm1wZmd0X3FvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODA1OS9CQkQ4MURBODlDQzExMUVCQkZERTY1NzlDNEY5QUUwMi9IM2FtbEVRc3Ew UFgwWHpXX2ZtcGZndF9xbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALEz8uM/+2UuKDFEdBLYX5UNRDYBXZawbaoBD/eurte9mLqBu2lWLE juBvmRRsfPxANgUUMlgaYBGb+IbKHKl7WX5utNgJoFF6djJhRLMasENvcBhYRqiH XQuLWlpjY+qnMHT3Mr9pvRKJMljgOsJrNT5u7jSaD4a29XRZISzTF0gvE/BD1HSm rszp27Ili1FZ/4CLbmm4Bpc8DBtZD98yOGwIJkZhpbHOxnUIbDwe5uvjRkrDDED0 spl0XJqul+A6YCOZrZDXPV6uKOCJB8Ebs6tW6WDoRe5t9PD6YCoyGTmudMi5iLEV z/AD/UA/MWQyMcIZBKrfF5VFAHCclysx -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:32 2025 by rpki-client