$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft File: tHZ0MTuUPsbL73VivRlw1ccz6ls.mft (raw, json) Hash identifier: C+899PWj96GxZ+FSWZTj9wAkMtHJGEB2UcJga83qt+Y= Subject key identifier: 40:51:96:B7:CA:15:48:AB:22:DB:D0:FD:BD:91:E7:71:AA:44:9E:C8 Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft Manifest number: 0631 Signing time: Sun 02 Nov 2025 22:44:18 +0000 Manifest this update: Sun 02 Nov 2025 22:44:18 +0000 Manifest next update: Sun 09 Nov 2025 22:44:18 +0000 Files and hashes: 1: tHZ0MTuUPsbL73VivRlw1ccz6ls.crl (hash: hyltOAEr2YhpHOfOPSp6W/KsPkqMQuszRH7Uz4/ScbA=) 2: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (hash: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B Validity Not Before: Nov 2 22:44:18 2025 GMT Not After : Nov 9 22:44:18 2025 GMT Subject: CN=6907dec2-2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:a8:7a:fd:16:ff:fb:6a:f1:58:a6:67:4c: d8:a4:b3:c2:80:79:eb:8d:4b:52:c4:a9:09:ac:52: 86:c8:0d:70:77:b8:33:e8:99:87:10:8f:4a:e5:c6: 90:cd:c7:18:5b:e6:bf:b4:01:a5:c8:3e:69:0a:20: 80:c6:f7:1f:07:5d:11:32:d6:27:1a:74:92:bc:ec: 53:84:74:b7:40:38:c3:fc:f8:a9:c2:da:99:cd:d8: 8f:56:4f:84:9f:d7:12:88:79:d5:be:a5:70:8f:8d: d0:25:1a:d4:80:4e:fe:44:c2:d2:9f:34:e3:b0:a2: 9c:7a:be:5b:b7:7a:c2:4e:b7:8c:f5:5f:4a:29:fb: 7e:1d:ea:0e:32:10:99:fb:7d:4a:96:45:0b:ca:1a: ff:c0:2a:0e:88:90:81:53:47:55:59:86:71:f2:a2: 9a:a2:1a:34:73:ee:8b:07:7d:21:ad:db:f2:79:3c: f3:9e:37:17:a6:62:f0:08:08:51:47:26:7a:d7:f0: 74:87:c2:82:f1:e4:2a:85:8e:51:91:83:4e:68:fe: 3e:08:4e:b2:05:a4:0d:69:b6:64:98:73:9c:6a:fb: 8e:f5:07:b2:74:5b:cf:bd:68:18:d1:bd:17:a0:94: 3d:34:28:24:e6:fb:fd:78:d9:15:2e:e8:bb:ab:cf: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:96:B7:CA:15:48:AB:22:DB:D0:FD:BD:91:E7:71:AA:44:9E:C8 X509v3 Authority Key Identifier: keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fc:78:b4:f8:d9:a7:1c:e0:a6:ae:05:88:a6:17:19:ed:49: 37:7a:94:f0:fd:e8:21:63:7d:b2:6d:85:9f:ad:43:9b:78:80: 46:1b:17:25:82:7e:69:b0:4c:c7:7b:0a:71:51:c5:14:aa:4a: 5c:a4:8d:53:d5:19:40:26:9d:fe:50:67:91:78:a9:3a:ff:83: 23:30:a5:6c:6e:a1:ef:0c:94:7f:83:dd:32:7c:72:18:95:c6: 5c:cc:87:c2:a9:fa:b1:36:99:8c:62:91:99:e7:d9:b9:69:c2: a1:dd:e7:10:96:4f:f8:87:44:5b:5f:36:91:e4:22:ac:45:9e: 63:88:b2:b2:b8:f3:7a:a7:c1:86:1d:72:95:28:ee:91:6e:ff: 7f:b9:23:22:c0:43:d7:a8:ec:a3:04:f7:ac:e2:11:06:fc:24: 48:39:a5:00:68:63:ae:29:28:d3:45:0d:a1:de:87:3e:c0:29: 60:fd:05:2d:ee:de:12:46:59:b8:04:03:66:d0:bd:30:7c:0d: 90:b1:54:82:69:77:d5:df:38:ec:c9:14:13:38:d6:a5:25:17: 97:ba:08:9e:0f:b4:28:09:8d:45:78:ea:6a:24:6c:ad:80:51: 34:95:74:22:d1:d6:6f:6b:f6:b8:36:1f:52:70:8b:54:e2:f9: ff:82:3c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1 QzczM0VBNUIwHhcNMjUxMTAyMjI0NDE4WhcNMjUxMTA5MjI0NDE4WjAYMRYwFAYD VQQDEw02OTA3ZGVjMi0yNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nSoev0W//tq8VimZ0zYpLPCgHnrjUtSxKkJrFKGyA1wd7gz6JmHEI9K5caQ zccYW+a/tAGlyD5pCiCAxvcfB10RMtYnGnSSvOxThHS3QDjD/PipwtqZzdiPVk+E n9cSiHnVvqVwj43QJRrUgE7+RMLSnzTjsKKcer5bt3rCTreM9V9KKft+HeoOMhCZ +31KlkULyhr/wCoOiJCBU0dVWYZx8qKaoho0c+6LB30hrdvyeTzznjcXpmLwCAhR RyZ61/B0h8KC8eQqhY5RkYNOaP4+CE6yBaQNabZkmHOcavuO9QeydFvPvWgY0b0X oJQ9NCgk5vv9eNkVLui7q8/R6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBRlrfK FUirItvQ/b2R53GqRJ7IMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4 MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg5OC8yMDkxQjAxQUI4MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBz Ykw3M1ZpdlJsdzFjY3o2bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa/Hi0+NmnHOCmrgWIphcZ7Uk3epTw/eghY32ybYWfrUObeIBGGxcl gn5psEzHewpxUcUUqkpcpI1T1RlAJp3+UGeReKk6/4MjMKVsbqHvDJR/g90yfHIY lcZczIfCqfqxNpmMYpGZ59m5acKh3ecQlk/4h0RbXzaR5CKsRZ5jiLKyuPN6p8GG HXKVKO6Rbv9/uSMiwEPXqOyjBPes4hEG/CRIOaUAaGOuKSjTRQ2h3oc+wClg/QUt 7t4SRlm4BANm0L0wfA2QsVSCaXfV3zjsyRQTONalJReXugieD7QoCY1FeOpqJGyt gFE0lXQi0dZva/a4Nh9ScItU4vn/gjxw -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:40 2025 by rpki-client