$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft File: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json) Hash identifier: I1CPMdY8jFoc8Ysxyu/nsblZqhfXD4NY1lmLc32694s= Subject key identifier: CF:B7:03:61:5B:A5:9C:31:0E:95:F0:FE:E1:C0:F4:AC:DF:FE:33:34 Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 Certificate issuer: /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Certificate serial: 1766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft Manifest number: 175A Signing time: Tue 04 Nov 2025 16:42:04 +0000 Manifest this update: Tue 04 Nov 2025 16:42:03 +0000 Manifest next update: Tue 11 Nov 2025 16:42:03 +0000 Files and hashes: 1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: szniraghnw6mR6Uk6EeQYn1iDulzOU+d9TpkyWkOQSQ=) 2: 89317668E87B11E785247983C4F9AE02.roa (hash: nzDDDyGYndishzLD7fUyGn3b75yg/sxKqZxJCeL11YE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5990 (0x1766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9 Validity Not Before: Nov 4 16:42:03 2025 GMT Not After : Nov 11 16:42:03 2025 GMT Subject: CN=690a2cdb-1a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:24:4f:58:c1:4e:c3:79:a3:d2:e2:5b:f6: b4:b0:1c:23:98:bf:b8:ab:66:19:c1:5b:ff:85:23: c7:46:66:67:dc:53:b5:96:27:19:04:5f:39:4a:ae: b7:39:11:99:a6:d4:2e:cd:46:89:e9:e6:73:67:ce: 27:30:de:e8:7c:d4:93:7b:8a:8b:94:54:52:f3:ff: 8c:d9:2f:10:e2:05:a4:7a:b8:5f:22:8d:5a:9a:09: 25:2e:6d:82:b8:7c:1e:13:5b:9a:7c:64:69:66:95: 8b:87:bd:2f:99:72:28:54:d2:f4:1c:56:61:df:9c: 57:a3:e9:fb:4b:74:1f:1f:e7:cd:52:22:8c:26:b7: 93:38:a2:21:78:92:c7:e8:22:29:ab:b8:4a:6f:33: df:9c:66:41:61:ea:89:4d:ed:52:71:5e:24:a3:05: 52:ec:2c:62:85:e6:61:ab:87:d4:9c:50:c3:bb:6e: 6e:f7:76:77:46:7c:80:d1:95:c3:2e:1a:7c:40:69: d4:7c:71:cc:1b:d7:e0:70:cd:e8:13:11:00:ca:74: c0:91:0e:1c:47:b8:d1:0b:93:d4:dd:1d:a4:fc:5c: 55:c2:57:fc:dc:64:eb:72:34:65:7c:94:c5:a8:c5: 39:32:ad:67:5b:12:9c:bb:16:41:43:09:6c:38:ce: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B7:03:61:5B:A5:9C:31:0E:95:F0:FE:E1:C0:F4:AC:DF:FE:33:34 X509v3 Authority Key Identifier: keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3d:af:f1:cf:a5:01:9f:0d:80:54:8e:14:5e:ec:9d:e4:fa: aa:48:bb:6d:64:f9:b6:18:20:28:f5:78:a0:cc:17:91:1f:88: 83:c0:fc:7e:8b:06:88:3a:54:04:7e:80:03:35:ac:3a:e1:53: 2d:50:9f:0c:d3:f7:5c:de:7d:b4:1e:48:a1:2b:b5:a4:b3:c4: 87:1d:de:bd:59:fb:5e:d9:7e:ca:a3:21:81:27:01:c2:1d:38: 81:b0:ec:29:a8:5b:f2:28:0c:91:9e:6a:80:e4:74:6e:6d:f6: df:77:4b:48:82:3f:eb:7b:fd:b2:5e:34:4d:31:3d:61:f6:96: cd:54:b9:13:51:bb:b4:30:25:80:c2:11:25:43:f7:05:2f:50: 17:3e:e4:8b:4b:bc:5f:7f:bf:d8:f6:35:be:8b:b6:5c:b5:b7: f6:b5:cc:84:a2:f4:65:10:21:44:b7:52:48:27:d3:52:d6:f9: d4:5b:34:16:26:3d:e1:0e:80:2b:fe:ea:01:f7:02:2a:d2:d2: b3:f6:4a:0f:20:3c:9b:05:1c:88:f1:ff:2c:14:1a:70:b6:ca: 0e:27:c2:38:85:72:cd:65:3b:23:c1:72:f3:07:7d:4d:82:60: 8a:0d:f8:50:06:9a:f0:38:db:f7:3f:f7:9a:a1:ca:84:63:34: 28:f3:8c:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU2NEYxMTAvBgNVBAUTKDg2OEZDOEIxODdCREZEMzBBNzBCNTAyRjZEMTQ5RTY3 ODY5MjUzQjkwHhcNMjUxMTA0MTY0MjAzWhcNMjUxMTExMTY0MjAzWjAYMRYwFAYD VQQDEw02OTBhMmNkYi0xYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy8kT1jBTsN5o9LiW/a0sBwjmL+4q2YZwVv/hSPHRmZn3FO1licZBF85Sq63 ORGZptQuzUaJ6eZzZ84nMN7ofNSTe4qLlFRS8/+M2S8Q4gWkerhfIo1amgklLm2C uHweE1uafGRpZpWLh70vmXIoVNL0HFZh35xXo+n7S3QfH+fNUiKMJreTOKIheJLH 6CIpq7hKbzPfnGZBYeqJTe1ScV4kowVS7CxiheZhq4fUnFDDu25u93Z3RnyA0ZXD Lhp8QGnUfHHMG9fgcM3oExEAynTAkQ4cR7jRC5PU3R2k/FxVwlf83GTrcjRlfJTF qMU5Mq1nWxKcuxZBQwlsOM4+NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+3A2Fb pZwxDpXw/uHA9Kzf/jM0MB8GA1UdIwQYMBaAFIaPyLGHvf0wpwtQL20UnmeGklO5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTY0Ri9ERDVDMTU4MkU4 N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9UQ25DMUF2YlJTZVo0YVNV N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvX0lzWWU5X1RDbkMxQXZiUlNlWjRhU1U3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTY0Ri9ERDVDMTU4MkU4N0ExMUU3OEY1MTcwODNDNEY5QUUwMi9ob19Jc1llOV9U Q25DMUF2YlJTZVo0YVNVN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMPa/xz6UBnw2AVI4UXuyd5PqqSLttZPm2GCAo9XigzBeRH4iDwPx+ iwaIOlQEfoADNaw64VMtUJ8M0/dc3n20HkihK7Wks8SHHd69Wfte2X7KoyGBJwHC HTiBsOwpqFvyKAyRnmqA5HRubfbfd0tIgj/re/2yXjRNMT1h9pbNVLkTUbu0MCWA whElQ/cFL1AXPuSLS7xff7/Y9jW+i7Zctbf2tcyEovRlECFEt1JIJ9NS1vnUWzQW Jj3hDoAr/uoB9wIq0tKz9koPIDybBRyI8f8sFBpwtsoOJ8I4hXLNZTsjwXLzB31N gmCKDfhQBprwONv3P/eaocqEYzQo84zi -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:42 2025 by rpki-client