$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft File: H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json) Hash identifier: oX6qoufOiwe4hc8IBEJ7ycakuUi/bFMUaZb5bqRPSuw= Subject key identifier: 9A:75:46:94:D4:68:5E:0B:24:11:C7:84:07:2D:2D:8C:55:E6:71:90 Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 Certificate issuer: /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft Manifest number: 0647 Signing time: Tue 04 Nov 2025 22:45:17 +0000 Manifest this update: Tue 04 Nov 2025 22:45:16 +0000 Manifest next update: Tue 11 Nov 2025 22:45:16 +0000 Files and hashes: 1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: 6P2E0uY0B3F6o3Q6l8By8iAtauQYCLat0L5b6jAq8Mc=) 2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: JNO//UyjyCwtO6c12uk/NjDfBJbKa4UXXgFo1EP+Qts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37 Validity Not Before: Nov 4 22:45:16 2025 GMT Not After : Nov 11 22:45:16 2025 GMT Subject: CN=690a81fd-afb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:0d:57:ad:a9:53:44:71:d5:cb:ba:89:1a: c9:16:d6:0f:b9:b4:49:ce:5d:e8:a5:9b:05:d8:79: 5a:88:7d:bd:40:24:3a:3e:65:ce:c9:0b:3a:a0:c3: da:38:6d:a0:c1:91:15:c3:dd:84:05:03:bb:2f:ea: 50:40:bf:ab:7f:af:15:70:d7:66:ac:c1:12:f6:d9: 24:7e:20:7b:c0:c0:f2:0f:c9:23:59:c9:a2:4c:f9: 5d:3b:90:f5:95:e1:f0:c1:43:07:70:0d:59:3d:1e: 52:1b:4e:a6:d3:b8:b9:0a:ba:a0:5b:77:fa:84:b6: 03:3c:5a:70:f0:cb:f3:8f:33:a3:df:0a:84:38:55: 9f:16:56:76:97:61:04:bd:b9:3b:46:02:14:16:ae: 2c:aa:ba:2a:e9:d2:d2:a0:ab:8a:f7:56:fe:69:d9: c7:7e:f3:01:96:32:ec:e2:3d:bb:ee:dc:63:a6:db: be:0a:05:f7:f7:e8:7b:92:56:db:66:b1:37:f5:41: 1f:e2:bf:e3:fe:63:64:8f:2b:52:b5:3c:3c:d9:ee: 21:f0:79:e6:94:12:29:24:ae:71:2a:8b:a5:da:17: a8:8c:6a:29:ab:d3:f8:dd:a9:a3:82:38:11:4e:1d: 06:fb:cc:f7:c4:76:02:84:f9:a9:e2:59:b9:33:30: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:46:94:D4:68:5E:0B:24:11:C7:84:07:2D:2D:8C:55:E6:71:90 X509v3 Authority Key Identifier: keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:57:0f:9c:99:66:65:25:c1:20:c8:23:89:bc:94:22:f1:a1: 13:ff:5e:57:d9:4b:5d:7c:d3:f2:6b:be:d2:51:5f:09:cb:43: 1d:3b:b4:5d:55:81:99:5b:50:b9:cb:23:1f:4c:bc:6c:a2:76: 02:e4:77:d5:5c:3a:57:1b:59:b3:51:06:de:0c:19:11:f1:db: ff:f5:50:d5:c8:b3:38:39:73:2d:94:66:d6:7f:c1:cd:47:2b: 5f:d4:e3:ad:7c:2c:4e:eb:97:5e:16:d0:6c:e1:1b:45:e9:4c: 4e:51:61:cb:a8:8c:ca:c3:3c:3f:86:47:ba:8d:f1:95:48:85: cd:f6:74:a7:18:4b:bb:c3:4e:1a:7b:71:2f:cd:17:28:47:e5: 07:69:31:01:88:26:83:fe:9d:36:2c:61:7b:40:83:4a:dc:27: 73:cf:2b:b0:d2:08:c6:40:bc:97:d7:8c:6e:e9:3d:2a:f4:5d: 8e:88:1b:f1:f9:7f:e7:a8:66:8e:fb:d0:41:5e:44:71:be:cb: ee:66:75:53:f7:68:74:93:27:36:2d:36:3c:38:68:4f:64:e2: f5:94:a2:51:77:e0:b0:cb:a7:c0:58:62:83:66:62:ba:e1:41: 73:2f:5c:e1:9a:b6:87:9e:63:a4:30:f9:2f:34:e3:3f:ec:35: ba:77:0e:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0REYxMTAvBgNVBAUTKDFGRDhFQzdDNjU0N0FFQzUyQUQ3RTBFMEJDMzJDRjdD QUEyMjFFMzcwHhcNMjUxMTA0MjI0NTE2WhcNMjUxMTExMjI0NTE2WjAYMRYwFAYD VQQDEw02OTBhODFmZC1hZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SoNV62pU0Rx1cu6iRrJFtYPubRJzl3opZsF2HlaiH29QCQ6PmXOyQs6oMPa OG2gwZEVw92EBQO7L+pQQL+rf68VcNdmrMES9tkkfiB7wMDyD8kjWcmiTPldO5D1 leHwwUMHcA1ZPR5SG06m07i5CrqgW3f6hLYDPFpw8MvzjzOj3wqEOFWfFlZ2l2EE vbk7RgIUFq4sqroq6dLSoKuK91b+adnHfvMBljLs4j277txjptu+CgX39+h7klbb ZrE39UEf4r/j/mNkjytStTw82e4h8HnmlBIpJK5xKoul2heojGopq9P43amjgjgR Th0G+8z3xHYChPmp4lm5MzB8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJp1RpTU aF4LJBHHhActLYxV5nGQMB8GA1UdIwQYMBaAFB/Y7HxlR67FKtfg4Lwyz3yqIh43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRERi81Q0YxRjdBMkFE NUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJzVXExLURndkRMUGZLb2lI amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5anNmR1ZIcnNVcTEtRGd2RExQZktvaUhqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRERi81Q0YxRjdBMkFENUUxMUVCQUREOTA1NzlDNEY5QUUwMi9IOWpzZkdWSHJz VXExLURndkRMUGZLb2lIamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Vw+cmWZlJcEgyCOJvJQi8aET/15X2UtdfNPya77SUV8Jy0MdO7Rd VYGZW1C5yyMfTLxsonYC5HfVXDpXG1mzUQbeDBkR8dv/9VDVyLM4OXMtlGbWf8HN Rytf1OOtfCxO65deFtBs4RtF6UxOUWHLqIzKwzw/hke6jfGVSIXN9nSnGEu7w04a e3EvzRcoR+UHaTEBiCaD/p02LGF7QINK3Cdzzyuw0gjGQLyX14xu6T0q9F2OiBvx +X/nqGaO+9BBXkRxvsvuZnVT92h0kyc2LTY8OGhPZOL1lKJRd+Cwy6fAWGKDZmK6 4UFzL1zhmraHnmOkMPkvNOM/7DW6dw7+ -----END CERTIFICATE-----Generated at Wed Nov 5 05:21:25 2025 by rpki-client