$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: 3xL857lrgmq502jRviascsEq/h7DRDMzPk4GRFV933U= Subject key identifier: A2:C9:CA:EC:EE:8F:B5:AC:45:6B:D2:92:0A:0E:35:61:2D:7C:BD:92 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 020F Signing time: Mon 03 Nov 2025 02:14:11 +0000 Manifest this update: Mon 03 Nov 2025 02:14:11 +0000 Manifest next update: Mon 10 Nov 2025 02:14:11 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: F/DP6KZ5/mcmRq3PUXTkRoWIwnLSKvsu6A8Qnidb3fs=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Nov 3 02:14:11 2025 GMT Not After : Nov 10 02:14:11 2025 GMT Subject: CN=69080ff3-09de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:d3:90:ed:f6:71:28:eb:e7:3e:49:89:43: 73:6f:08:65:bf:35:29:3c:68:19:ec:51:9e:49:08: 2c:e3:18:5d:83:86:b4:50:15:7e:26:2e:3c:5f:cc: de:3b:4c:9b:3e:c9:07:81:41:b6:e1:d5:b6:86:d0: f0:16:28:e3:7e:89:eb:dc:7f:62:38:5f:8a:fe:1f: 99:1a:01:ab:4b:5c:38:57:91:4a:c2:d3:d2:9e:b5: 96:6e:5c:d4:68:c3:44:61:51:02:8c:8a:08:59:82: ec:67:d7:06:1f:88:19:11:54:9c:81:3c:8d:0d:4d: 6e:78:cd:44:30:0e:39:5c:3f:cc:15:24:b7:f0:a6: ff:63:19:fe:26:ff:ec:d6:48:f3:67:f6:93:ea:c4: 79:46:e9:7c:48:e0:55:af:59:10:7f:a7:0d:03:ad: 84:4d:bf:7e:c1:3b:2f:2f:70:d2:42:d3:13:f7:06: 42:89:89:e7:cb:b8:5b:4d:08:ca:5d:68:86:44:97: a6:47:7b:15:eb:3e:8a:1f:c2:0d:b9:f3:c7:59:42: 97:e6:81:65:c6:18:ec:24:b0:81:86:bb:b0:75:d0: 2a:79:73:f4:3c:82:70:63:14:5d:aa:76:89:01:31: 74:3a:0e:4e:3e:82:65:2b:66:8b:be:28:83:31:9f: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C9:CA:EC:EE:8F:B5:AC:45:6B:D2:92:0A:0E:35:61:2D:7C:BD:92 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:39:21:cb:87:dc:98:00:65:7b:cc:71:fc:8c:0c:9d:a1:8a: 30:95:c6:23:76:fb:fd:93:7f:2a:43:d4:31:09:62:50:10:76: 8d:d7:fe:f0:29:f6:46:10:c8:b0:54:33:4e:d3:8d:dd:6d:09: 1d:dd:3b:85:b1:63:fe:d6:3b:39:fe:ac:75:d5:fd:36:4c:70: cd:93:85:6d:7a:fc:73:50:09:fd:72:4a:64:d6:04:25:d4:b4: ee:15:65:2c:13:81:fc:a8:f9:8b:ac:eb:84:d3:ae:e2:30:c3: 80:38:0d:9d:02:4a:33:51:ff:6f:83:c8:7a:a9:2a:11:ee:a1: 16:32:fc:c1:c9:ae:ae:a1:de:ce:a2:76:84:48:35:1b:ea:57: 16:90:96:59:0a:ca:f3:ec:87:73:6f:97:ba:f4:3b:7f:c3:58: 06:20:87:1c:f5:05:88:4f:ed:ba:37:36:95:9d:2e:75:be:59: 1d:32:4f:ca:ff:a7:fb:95:47:5a:d1:c3:2f:35:ea:cb:01:c6: 42:d5:34:10:86:3a:50:cd:e7:5e:ab:47:75:59:ec:6d:f8:3d: eb:f3:99:1a:8e:d2:4a:55:1e:f3:26:d1:5b:98:ef:64:ec:e5: 4f:ab:7a:7c:eb:6b:ee:8c:60:06:41:ad:b5:48:65:70:22:2b: f2:04:b9:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjUxMTAzMDIxNDExWhcNMjUxMTEwMDIxNDExWjAYMRYwFAYD VQQDEw02OTA4MGZmMy0wOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2/TkO32cSjr5z5JiUNzbwhlvzUpPGgZ7FGeSQgs4xhdg4a0UBV+Ji48X8ze O0ybPskHgUG24dW2htDwFijjfonr3H9iOF+K/h+ZGgGrS1w4V5FKwtPSnrWWblzU aMNEYVECjIoIWYLsZ9cGH4gZEVScgTyNDU1ueM1EMA45XD/MFSS38Kb/Yxn+Jv/s 1kjzZ/aT6sR5Rul8SOBVr1kQf6cNA62ETb9+wTsvL3DSQtMT9wZCiYnny7hbTQjK XWiGRJemR3sV6z6KH8INufPHWUKX5oFlxhjsJLCBhruwddAqeXP0PIJwYxRdqnaJ ATF0Og5OPoJlK2aLviiDMZ+cjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLJyuzu j7WsRWvSkgoONWEtfL2SMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsOSHLh9yYAGV7zHH8jAydoYowlcYjdvv9k38qQ9QxCWJQEHaN1/7w KfZGEMiwVDNO043dbQkd3TuFsWP+1js5/qx11f02THDNk4VtevxzUAn9ckpk1gQl 1LTuFWUsE4H8qPmLrOuE067iMMOAOA2dAkozUf9vg8h6qSoR7qEWMvzBya6uod7O onaESDUb6lcWkJZZCsrz7Idzb5e69Dt/w1gGIIcc9QWIT+26NzaVnS51vlkdMk/K /6f7lUda0cMvNerLAcZC1TQQhjpQzedeq0d1Wext+D3r85kajtJKVR7zJtFbmO9k 7OVPq3p862vujGAGQa21SGVwIivyBLmS -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:12 2025 by rpki-client