$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json) Hash identifier: h2WBxINFa0LP6v1tVjtjIsNeI9ureZtdZpdMSE4wunc= Subject key identifier: 4A:3C:BC:21:DA:D8:51:54:F8:22:E3:EF:AA:70:2D:22:8A:45:59:7E Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft Manifest number: 041D Signing time: Wed 05 Nov 2025 01:33:14 +0000 Manifest this update: Wed 05 Nov 2025 01:33:13 +0000 Manifest next update: Wed 12 Nov 2025 01:33:13 +0000 Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: lWdBSJpPaAT+03H0XuXhHgGiFhcP44TlByzXL0MS2Bw=) 2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: aBG6SO8r5rIticJAwQ3F1F0hRoqPZrUVOKMtrK+PpMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Validity Not Before: Nov 5 01:33:13 2025 GMT Not After : Nov 12 01:33:13 2025 GMT Subject: CN=690aa95a-86dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:55:4a:86:f3:b7:33:6a:44:76:b5:9d:96: a9:85:6d:d8:52:a3:54:2d:6b:3a:af:6f:cf:84:fa: d1:79:8b:70:b0:12:8a:4f:3a:0e:80:7b:1c:20:df: 67:df:2d:74:97:ff:ee:1c:e9:04:f7:9b:8d:73:1a: 95:52:43:2a:6b:25:a8:1d:5f:11:69:84:bb:68:66: 20:34:e7:50:80:25:46:64:33:7d:79:99:93:9a:47: 03:82:c7:6f:bc:80:11:e9:91:14:53:b9:c4:d6:e8: 42:1b:ac:68:5b:31:9b:7e:bc:d0:1a:3d:f2:44:0f: 8a:60:c7:66:a6:2c:ac:46:c5:db:2d:9c:41:61:8f: 42:8f:1c:8d:63:91:ab:d1:50:50:69:66:9e:2f:1d: 29:63:9f:9b:71:c5:36:90:ee:ea:89:88:da:5a:d3: d8:7d:8b:da:f1:9a:46:96:a5:3b:7a:9b:fd:74:0b: 44:58:14:05:90:d0:f0:4b:00:5b:e3:12:d5:d4:63: 67:3b:a0:03:e1:30:7a:3f:6f:e6:b5:07:b0:1f:ed: 85:c3:64:66:66:49:e5:54:0d:b0:7f:d4:51:2e:a0: 55:44:78:46:6c:e0:d2:1d:c0:32:23:3d:cd:1c:60: 58:ff:f1:c6:10:ba:64:ef:e2:08:3f:28:a3:a5:d4: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:BC:21:DA:D8:51:54:F8:22:E3:EF:AA:70:2D:22:8A:45:59:7E X509v3 Authority Key Identifier: keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0d:24:74:39:cf:ed:74:32:27:85:3a:24:8c:50:45:e5:c6: eb:48:9a:be:0c:88:1b:2a:a2:b1:21:0c:3a:af:5a:03:c3:54: 83:66:42:3c:46:d4:d9:f8:4d:d8:af:91:ff:73:89:94:3b:b3: ad:22:48:f6:8c:21:87:13:8b:49:ed:09:5b:ab:62:00:f9:32: 58:42:df:9f:52:d7:26:7b:9d:0b:8d:7f:3f:2a:11:c1:83:91: a4:2e:16:d3:b6:91:5b:b9:a1:12:ba:fc:84:0e:7b:2e:25:51: 19:a7:f7:aa:20:31:a0:51:71:6e:88:f8:c4:8c:d4:2c:ed:1e: 29:3e:0e:13:9a:15:97:c4:6f:e5:27:d2:f8:32:a5:18:3f:25: f9:1f:11:1b:5f:a2:93:3b:19:13:c9:bd:96:44:87:a1:d5:7e: 6d:17:5b:4e:04:17:b2:66:38:66:80:a3:4b:84:4c:9b:4f:d8: 81:5d:bd:85:03:36:1c:4f:b9:b8:52:3c:c0:f5:e7:08:71:53: 0c:5e:11:7f:be:9c:52:2e:51:e2:e1:16:6f:47:e5:70:61:96: e1:82:8b:97:e8:90:c7:db:da:44:1a:8e:27:be:d1:29:fe:97: d5:1e:78:0c:fc:eb:34:36:d4:8f:79:dc:5c:62:6a:47:76:94: b4:67:9f:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzcxNjExMC8GA1UEBRMoODc1RUM3MkU0NkYyQ0QxNjNGMDZCODIyRTcwNDEyOUFF RkUzMTkxMDAeFw0yNTExMDUwMTMzMTNaFw0yNTExMTIwMTMzMTNaMBgxFjAUBgNV BAMTDTY5MGFhOTVhLTg2ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcZlVKhvO3M2pEdrWdlqmFbdhSo1Qtazqvb8+E+tF5i3CwEopPOg6Aexwg32ff LXSX/+4c6QT3m41zGpVSQyprJagdXxFphLtoZiA051CAJUZkM315mZOaRwOCx2+8 gBHpkRRTucTW6EIbrGhbMZt+vNAaPfJED4pgx2amLKxGxdstnEFhj0KPHI1jkavR UFBpZp4vHSljn5txxTaQ7uqJiNpa09h9i9rxmkaWpTt6m/10C0RYFAWQ0PBLAFvj EtXUY2c7oAPhMHo/b+a1B7Af7YXDZGZmSeVUDbB/1FEuoFVEeEZs4NIdwDIjPc0c YFj/8cYQumTv4gg/KKOl1DitAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSjy8IdrY UVT4IuPvqnAtIopFWX4wHwYDVR0jBBgwFoAUh17HLkbyzRY/Brgi5wQSmu/jGRAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDNzE2LzREQjlDQUM0MTQw MjExRURCOTY2MzQxNUM0RjlBRTAyL2gxN0hMa2J5elJZX0JyZ2k1d1FTbXVfakdS QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDE3SExrYnl6UllfQnJnaTV3UVNtdV9qR1JBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD NzE2LzREQjlDQUM0MTQwMjExRURCOTY2MzQxNUM0RjlBRTAyL2gxN0hMa2J5elJZ X0JyZ2k1d1FTbXVfakdSQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF8NJHQ5z+10MieFOiSMUEXlxutImr4MiBsqorEhDDqvWgPDVINmQjxG 1Nn4Tdivkf9ziZQ7s60iSPaMIYcTi0ntCVurYgD5MlhC359S1yZ7nQuNfz8qEcGD kaQuFtO2kVu5oRK6/IQOey4lURmn96ogMaBRcW6I+MSM1CztHik+DhOaFZfEb+Un 0vgypRg/JfkfERtfopM7GRPJvZZEh6HVfm0XW04EF7JmOGaAo0uETJtP2IFdvYUD NhxPubhSPMD15whxUwxeEX++nFIuUeLhFm9H5XBhluGCi5fokMfb2kQajie+0Sn+ l9UeeAz86zQ21I953Fxiakd2lLRnnwg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:02:52 2025 by rpki-client