$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: ZyaU7nVgYVhMwLuE6tIOjetHdpQDe0NZtjOTktUgKdY= Subject key identifier: 90:A3:0E:0E:EC:18:00:73:BB:65:A1:73:5A:AC:45:B0:4F:FC:99:D1 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 117B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 1173 Signing time: Sun 02 Nov 2025 17:14:42 +0000 Manifest this update: Sun 02 Nov 2025 17:14:41 +0000 Manifest next update: Sun 09 Nov 2025 17:14:41 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: iN13fa/JzoQF9m/Eqo9N8o8z0WhAHbRp1QIm+5corJ8=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4475 (0x117b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Nov 2 17:14:41 2025 GMT Not After : Nov 9 17:14:41 2025 GMT Subject: CN=69079181-fe43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:d8:7c:5b:b9:c0:2e:a7:12:bc:29:8d:13: 56:99:f5:35:4d:21:2a:54:d3:a6:24:96:89:17:4b: bd:c5:aa:46:08:65:7d:0c:ef:ff:76:a9:1c:35:e5: bc:6e:56:9d:09:36:0c:67:e7:0e:db:5d:8d:23:4f: b9:52:8c:a3:58:8a:72:df:10:f9:ad:a2:31:2a:1c: b2:b4:41:2e:0d:65:5c:a0:04:ff:62:03:32:0b:9c: 1f:fa:6b:5e:75:ee:50:22:73:e6:58:e4:db:01:17: a9:ec:e6:74:40:d0:a8:a8:30:ae:38:e1:de:3d:69: c5:74:24:cc:bc:ae:a7:e2:9f:b6:03:f3:de:a7:30: 64:84:aa:6f:e7:d9:09:21:b9:75:1b:b8:1d:c3:34: 2f:83:02:0b:84:d7:0e:d2:c1:91:89:f6:f9:30:07: 01:1c:e5:d8:00:b5:02:20:cb:24:7b:81:e2:04:a6: bf:f4:2a:ad:a1:69:cc:b0:30:3d:0d:db:ba:fb:75: ea:3c:49:04:98:f9:40:5a:9f:5c:5b:22:b7:e3:32: cb:78:7f:c7:95:78:52:25:f4:b6:02:15:e1:c4:5c: 0e:c1:3d:6b:78:38:78:66:f1:f0:22:d2:d0:f3:57: de:41:ea:25:11:e6:85:2f:9d:9f:e1:72:e7:83:c3: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:0E:0E:EC:18:00:73:BB:65:A1:73:5A:AC:45:B0:4F:FC:99:D1 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6f:1c:4d:3f:7e:49:46:60:ad:18:95:fc:28:82:d9:d7:d3: ef:74:b3:c4:26:6e:14:c9:cb:af:3d:44:82:f6:4a:c9:40:07: 29:e9:74:7a:a4:29:22:ad:93:89:f1:ef:1c:86:c6:a8:33:e0: f3:41:b0:17:f6:59:b5:45:5e:48:73:88:6c:20:e5:60:d8:e3: 20:1a:e0:16:a4:18:9b:92:a5:67:60:4c:20:3c:d1:90:40:35: 8d:6c:b0:5c:52:21:15:7b:82:bb:27:5e:de:16:78:10:12:ba: 39:16:bf:96:33:3f:48:a3:74:10:1c:e2:69:64:7e:c1:66:21: 9f:52:83:9b:70:75:25:0d:d4:b1:9b:1a:ee:17:8a:f0:c0:3b: 7b:44:fb:e4:df:6c:f2:93:69:4b:15:f1:d6:32:68:77:c0:72: 6f:d0:03:ce:10:38:b6:12:d5:f0:c6:31:30:08:ad:11:a5:2f: de:8d:00:79:a3:4a:c5:8d:c2:c0:70:10:9c:bb:05:12:bf:ec: 13:3d:06:4b:f9:38:10:e4:67:7d:8d:eb:e8:db:12:fd:a3:ea: d5:ae:46:48:74:9f:9e:a0:4c:39:1a:28:02:2f:3f:0a:fc:c6: 50:b3:15:8f:67:02:35:81:6b:0c:a5:99:08:e6:96:d8:07:ba: 64:98:ae:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUxMTAyMTcxNDQxWhcNMjUxMTA5MTcxNDQxWjAYMRYwFAYD VQQDEw02OTA3OTE4MS1mZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkbYfFu5wC6nErwpjRNWmfU1TSEqVNOmJJaJF0u9xapGCGV9DO//dqkcNeW8 bladCTYMZ+cO212NI0+5UoyjWIpy3xD5raIxKhyytEEuDWVcoAT/YgMyC5wf+mte de5QInPmWOTbARep7OZ0QNCoqDCuOOHePWnFdCTMvK6n4p+2A/PepzBkhKpv59kJ Ibl1G7gdwzQvgwILhNcO0sGRifb5MAcBHOXYALUCIMske4HiBKa/9CqtoWnMsDA9 Ddu6+3XqPEkEmPlAWp9cWyK34zLLeH/HlXhSJfS2AhXhxFwOwT1reDh4ZvHwItLQ 81feQeolEeaFL52f4XLng8NydQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCjDg7s GABzu2Whc1qsRbBP/JnRMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChbxxNP35JRmCtGJX8KILZ19PvdLPEJm4UycuvPUSC9krJQAcp6XR6 pCkirZOJ8e8chsaoM+DzQbAX9lm1RV5Ic4hsIOVg2OMgGuAWpBibkqVnYEwgPNGQ QDWNbLBcUiEVe4K7J17eFngQEro5Fr+WMz9Io3QQHOJpZH7BZiGfUoObcHUlDdSx mxruF4rwwDt7RPvk32zyk2lLFfHWMmh3wHJv0APOEDi2EtXwxjEwCK0RpS/ejQB5 o0rFjcLAcBCcuwUSv+wTPQZL+TgQ5Gd9jevo2xL9o+rVrkZIdJ+eoEw5GigCLz8K /MZQsxWPZwI1gWsMpZkI5pbYB7pkmK6f -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:03 2025 by rpki-client