$ rpki-client -vvf rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft File: HMTgP8GsieF7GYJHtuZFSrunG4w.mft (raw, json) Hash identifier: DH0As/5NcOf594y8m1SNicxhV73TEd9q/AXx1Sij++k= Subject key identifier: 63:D0:94:D4:20:72:8D:86:73:55:EE:F9:18:67:15:EF:A0:C0:F7:B3 Authority key identifier: 1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C Certificate issuer: /CN=A9174BB4/serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Certificate serial: 17A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft Manifest number: 17A7 Signing time: Sun 02 Nov 2025 16:34:19 +0000 Manifest this update: Sun 02 Nov 2025 16:34:18 +0000 Manifest next update: Sun 09 Nov 2025 16:34:18 +0000 Files and hashes: 1: HMTgP8GsieF7GYJHtuZFSrunG4w.crl (hash: KjiRAABiDlkbNtF6QCOHmmZMLlp07yxzhsM0EBv/3u4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6055 (0x17a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174BB4, serialNumber=1CC4E03FC1AC89E17B198247B6E6454ABBA71B8C Validity Not Before: Nov 2 16:34:18 2025 GMT Not After : Nov 9 16:34:18 2025 GMT Subject: CN=6907880a-eb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:6c:c1:d3:1d:d4:b7:8d:a7:62:f8:4c:8b: 88:8f:10:aa:5f:d9:34:e6:c3:ea:ef:c0:3e:c1:cd: b4:e3:50:66:ad:71:ad:1a:b7:24:85:a3:b5:56:5b: 69:1a:74:12:e7:6c:fc:b2:38:26:88:f4:69:a7:84: b4:62:31:db:68:32:77:43:e2:f8:7a:e2:83:c9:f9: 6b:d6:9a:3f:c3:00:41:71:dc:5c:8e:57:e6:22:a8: 4d:1e:62:97:1c:0b:8b:78:bc:91:de:d8:7c:70:4d: ef:96:cd:f0:c8:05:5b:e8:d3:60:e4:b6:f9:c7:9e: f2:c6:4f:53:f3:23:43:5c:17:10:5e:07:b1:bb:7a: fb:4e:32:2d:bc:d7:65:91:88:5f:d3:db:cc:d8:d1: 71:6f:e7:e2:f3:f9:d5:1a:23:bf:22:fc:4b:98:3e: 15:05:5c:31:7e:07:ff:b0:30:3d:29:2d:fe:5c:1b: c2:88:69:f4:b6:f4:70:07:77:bd:c6:9d:7e:ef:83: 2e:5d:6d:ae:3f:fb:90:ac:24:12:b3:62:f3:ce:c3: 8b:dc:32:ed:e1:63:c2:1d:f6:1b:10:ed:1d:c6:1b: 85:66:54:2a:5a:97:ad:53:1c:ca:2c:ab:32:cd:d3: ec:fe:1b:8c:cc:b0:0e:41:63:f6:5b:71:36:97:dd: 28:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:94:D4:20:72:8D:86:73:55:EE:F9:18:67:15:EF:A0:C0:F7:B3 X509v3 Authority Key Identifier: keyid:1C:C4:E0:3F:C1:AC:89:E1:7B:19:82:47:B6:E6:45:4A:BB:A7:1B:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HMTgP8GsieF7GYJHtuZFSrunG4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174BB4/9D105BFCD66211E7ACF8DF2CC4F9AE02/HMTgP8GsieF7GYJHtuZFSrunG4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:55:85:60:27:e2:e4:b2:94:4b:0c:09:29:95:13:e6:0b:a9: 82:c8:42:14:f3:59:aa:42:e6:e2:28:7a:32:36:c3:14:75:6d: a3:24:c1:20:b4:68:4f:2d:43:13:47:c8:f8:a9:d3:a0:4b:98: e5:39:d2:26:e4:1d:95:a1:1a:f1:2f:c0:77:3f:a5:16:e7:1d: 03:c6:52:7f:c0:cb:2a:f3:cb:e0:24:8a:ac:d4:ee:c1:75:f6: 8f:75:b2:2d:a0:49:ec:c1:e6:4e:bd:1b:29:b5:c9:ff:6c:33: 63:27:a5:e3:5f:e3:23:7f:09:bb:69:c2:63:9b:b9:cd:3e:9e: a9:06:4f:e6:28:c5:e6:ee:b3:be:fc:77:74:8d:d6:cd:eb:14: 15:2a:c8:ab:4e:94:77:0e:2d:1c:34:43:ca:e7:84:bc:45:5c: 61:0b:72:29:52:92:76:9b:ef:67:ed:17:ba:d7:8c:7d:5b:cf: ca:df:9a:60:14:ee:10:53:07:cf:4c:fb:23:c0:b1:6e:20:0f: dc:ff:76:3d:73:54:57:62:78:c1:a4:e9:fb:af:2d:19:6a:de: 8d:61:a4:93:84:b7:85:4d:7b:78:b3:33:a3:ff:22:32:ac:a0: 01:10:28:ea:fd:c4:84:9d:1e:c5:f1:ff:89:e0:aa:3c:60:81: 5e:58:5f:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCQjQxMTAvBgNVBAUTKDFDQzRFMDNGQzFBQzg5RTE3QjE5ODI0N0I2RTY0NTRB QkJBNzFCOEMwHhcNMjUxMTAyMTYzNDE4WhcNMjUxMTA5MTYzNDE4WjAYMRYwFAYD VQQDEw02OTA3ODgwYS1lYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+xswdMd1LeNp2L4TIuIjxCqX9k05sPq78A+wc2041BmrXGtGrckhaO1Vltp GnQS52z8sjgmiPRpp4S0YjHbaDJ3Q+L4euKDyflr1po/wwBBcdxcjlfmIqhNHmKX HAuLeLyR3th8cE3vls3wyAVb6NNg5Lb5x57yxk9T8yNDXBcQXgexu3r7TjItvNdl kYhf09vM2NFxb+fi8/nVGiO/IvxLmD4VBVwxfgf/sDA9KS3+XBvCiGn0tvRwB3e9 xp1+74MuXW2uP/uQrCQSs2LzzsOL3DLt4WPCHfYbEO0dxhuFZlQqWpetUxzKLKsy zdPs/huMzLAOQWP2W3E2l90ogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPQlNQg co2Gc1Xu+RhnFe+gwPezMB8GA1UdIwQYMBaAFBzE4D/BrInhexmCR7bmRUq7pxuM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEJCNC85RDEwNUJGQ0Q2 NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2llRjdHWUpIdHVaRlNydW5H NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hNVGdQOEdzaWVGN0dZSkh0dVpGU3J1bkc0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEJCNC85RDEwNUJGQ0Q2NjIxMUU3QUNGOERGMkNDNEY5QUUwMi9ITVRnUDhHc2ll RjdHWUpIdHVaRlNydW5HNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWVYVgJ+LkspRLDAkplRPmC6mCyEIU81mqQubiKHoyNsMUdW2jJMEg tGhPLUMTR8j4qdOgS5jlOdIm5B2VoRrxL8B3P6UW5x0DxlJ/wMsq88vgJIqs1O7B dfaPdbItoEnsweZOvRsptcn/bDNjJ6XjX+Mjfwm7acJjm7nNPp6pBk/mKMXm7rO+ /Hd0jdbN6xQVKsirTpR3Di0cNEPK54S8RVxhC3IpUpJ2m+9n7Re614x9W8/K35pg FO4QUwfPTPsjwLFuIA/c/3Y9c1RXYnjBpOn7ry0Zat6NYaSThLeFTXt4szOj/yIy rKABECjq/cSEnR7F8f+J4Ko8YIFeWF8s -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:02 2025 by rpki-client