$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft File: hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json) Hash identifier: 1wggKrZgviW7en0fRuNnC1+axp2KniK65mDMLKpSLIY= Subject key identifier: DF:CA:4E:C5:DD:E2:29:0B:57:45:B1:E7:5C:D0:BD:D8:36:57:2A:92 Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft Manifest number: 01BC Signing time: Sat 25 Oct 2025 06:29:39 +0000 Manifest this update: Sat 25 Oct 2025 06:29:39 +0000 Manifest next update: Sat 01 Nov 2025 06:29:39 +0000 Files and hashes: 1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: oT4M6IRSl0IYRKNhggjnwycmW3hF+IHA/o2aF97B3qo=) 2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: 3AQgtCiu1AvELGcQ0dN/q4SITzh5GfFFMFmGHpirqhw=) 3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: 5/eMUVmevequFuGJFSqiqzgHPak9nF5vFMfMZWfmlQA=) 4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Oct 25 06:29:39 2025 GMT Not After : Nov 1 06:29:39 2025 GMT Subject: CN=68fc6e53-1ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:55:62:22:6b:a8:25:4b:03:bc:8f:1e:5b: 15:a0:49:71:e2:80:4d:21:7e:72:4c:87:90:11:c9: ca:36:c9:e7:99:32:21:a1:37:b2:6b:a1:67:49:2c: 4a:b7:50:2d:15:3d:df:bc:63:60:5e:ee:0f:9a:e6: a5:8e:85:3c:0f:0f:b4:74:4f:d7:24:f7:32:28:a5: d0:69:17:ac:af:08:1d:cc:c1:5a:dd:2d:3d:b4:7e: e7:dd:04:bd:cd:58:59:02:fd:6a:e9:c4:4d:22:42: 0f:3c:1a:e7:7f:d7:a5:44:5e:47:a3:21:f0:45:5b: 88:b0:69:40:74:61:0c:63:b1:4b:09:d2:62:e7:05: 33:11:d2:0a:8d:68:8b:6c:08:15:c3:4f:18:94:e8: a4:70:31:b1:f3:63:0b:37:30:2b:e5:63:84:72:09: 3b:f7:09:91:29:81:55:49:45:94:d2:c2:60:b2:58: c2:5b:6e:ee:88:c1:9a:ba:a4:b2:94:0e:75:1f:23: 71:41:e6:ea:9b:98:13:05:a7:55:6d:ae:71:42:35: 02:73:98:d5:bc:e9:14:c8:f0:e2:5b:bb:47:e4:09: 09:96:a5:29:ed:69:01:dd:1b:b9:3d:59:fc:a9:e0: 86:03:b9:4c:e8:6e:93:97:a1:46:6d:19:17:cc:a4: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CA:4E:C5:DD:E2:29:0B:57:45:B1:E7:5C:D0:BD:D8:36:57:2A:92 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:55:5f:fb:d9:33:96:fb:e3:00:45:19:bd:ed:c5:6f:2b: 8b:41:bf:e8:f4:55:a7:6b:5e:53:95:56:f6:1c:87:c7:29:04: a7:6b:76:e1:9d:66:58:c1:ce:36:a4:eb:a3:55:c5:61:36:30: 68:01:17:5c:5b:cd:45:35:4e:43:b9:b0:c8:34:1b:3b:e4:25: 4c:67:aa:bb:40:52:f8:b5:00:9b:99:62:44:fa:bc:a4:ec:13: ab:b5:9d:16:f5:ee:06:38:d0:4a:5e:80:45:45:1f:59:df:f9: d8:1b:bb:86:8e:5e:d6:02:29:8f:39:e4:6a:c1:5f:bf:ef:ba: 23:1b:1a:0b:b4:b2:45:91:ef:c2:ad:33:16:e6:2f:53:4d:7a: fd:7a:5c:72:64:9b:ef:b0:2b:17:b6:bf:e8:7f:bb:f9:a1:10: 84:04:94:05:2e:bb:d3:af:01:9a:f7:6e:96:a0:ce:b6:a9:45: 5a:d3:3a:ba:31:21:94:2e:f9:8b:a5:0b:5c:54:8a:38:d0:ad: e2:88:a4:81:c3:86:aa:c9:bf:3e:37:d0:d2:b6:39:01:c8:28: 84:f1:3a:a8:b1:2e:21:69:1f:d2:91:c7:71:73:b4:9a:03:42: 1a:c4:fc:2b:34:30:62:28:99:d0:d1:8d:99:c0:bc:a0:90:fc: 47:45:70:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUxMDI1MDYyOTM5WhcNMjUxMTAxMDYyOTM5WjAYMRYwFAYD VQQDEw02OGZjNmU1My0xZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTJVYiJrqCVLA7yPHlsVoElx4oBNIX5yTIeQEcnKNsnnmTIhoTeya6FnSSxK t1AtFT3fvGNgXu4PmualjoU8Dw+0dE/XJPcyKKXQaResrwgdzMFa3S09tH7n3QS9 zVhZAv1q6cRNIkIPPBrnf9elRF5HoyHwRVuIsGlAdGEMY7FLCdJi5wUzEdIKjWiL bAgVw08YlOikcDGx82MLNzAr5WOEcgk79wmRKYFVSUWU0sJgsljCW27uiMGauqSy lA51HyNxQebqm5gTBadVba5xQjUCc5jVvOkUyPDiW7tH5AkJlqUp7WkB3Ru5PVn8 qeCGA7lM6G6Tl6FGbRkXzKRxswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/KTsXd 4ikLV0Wx51zQvdg2VyqSMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy85QTVGMEUxQTE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlK cFJULW41QzJfcFVKMDh5Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlVVf+9kzlvvjAEUZve3FbyuLQb/o9FWna15TlVb2HIfHKQSna3bh nWZYwc42pOujVcVhNjBoARdcW81FNU5DubDINBs75CVMZ6q7QFL4tQCbmWJE+ryk 7BOrtZ0W9e4GONBKXoBFRR9Z3/nYG7uGjl7WAimPOeRqwV+/77ojGxoLtLJFke/C rTMW5i9TTXr9elxyZJvvsCsXtr/of7v5oRCEBJQFLrvTrwGa926WoM62qUVa0zq6 MSGULvmLpQtcVIo40K3iiKSBw4aqyb8+N9DStjkByCiE8TqosS4haR/Skcdxc7Sa A0IaxPwrNDBiKJnQ0Y2ZwLygkPxHRXBD -----END CERTIFICATE-----Generated at Sat Oct 25 20:19:13 2025 by rpki-client