$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft File: 125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json) Hash identifier: osVkQJP7wupC5ZgGojpeyFCQjGmF5pAw6S1k3hxAJDU= Subject key identifier: D8:02:77:3A:A0:B0:85:73:AE:D5:7D:B2:DD:B3:FD:9A:5B:C3:0D:F8 Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft Manifest number: 0555 Signing time: Tue 04 Nov 2025 23:44:06 +0000 Manifest this update: Tue 04 Nov 2025 23:44:06 +0000 Manifest next update: Tue 11 Nov 2025 23:44:06 +0000 Files and hashes: 1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: ik6tZMr9IUu+fOIcbvCKqFByLKsPfxRtH9tDCBocvD8=) 2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: 8MfWeNhYxhDpcu3Q2id403p9h7HPr5MWk8+ke8t8UDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC Validity Not Before: Nov 4 23:44:06 2025 GMT Not After : Nov 11 23:44:06 2025 GMT Subject: CN=690a8fc6-f4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:6d:dd:32:bc:48:e6:42:da:70:7a:29:eb: 8a:fe:2f:f3:1a:f7:66:23:ed:1a:52:c9:68:d2:c9: 55:70:e7:35:ea:2b:27:75:20:cc:62:83:7c:7f:61: c7:f3:4b:0b:f0:bb:b2:21:80:b9:09:12:b2:2b:9d: f5:3f:27:85:7a:fa:d1:b1:3d:83:0c:6f:57:7f:cc: 43:6e:96:dd:6f:7d:65:84:50:2d:97:b6:b6:af:d4: 9a:af:6f:78:cd:b8:6c:f7:a0:fb:fb:5e:54:58:08: bd:8f:d6:8a:91:83:56:86:08:bc:cd:a5:7e:13:ac: 6a:2d:97:fe:21:54:f7:e6:96:fc:32:52:96:08:9c: 09:2a:35:d7:cb:b0:bf:e5:f8:38:8b:4b:ce:e6:12: ed:a2:40:d1:12:fd:d8:ad:f4:ac:93:b9:fb:09:0c: 7e:68:8d:eb:bf:2b:5f:fc:70:1f:c6:03:be:9e:6a: df:c8:38:ae:97:9a:9e:e6:12:1d:c1:aa:10:b8:32: bf:d0:d4:04:3d:98:56:a2:97:8e:4d:17:ba:5f:ae: 7c:42:9e:51:49:d9:ee:b8:aa:72:e3:3d:a1:f1:c3: 85:77:c2:be:a7:35:97:dd:8b:24:05:99:5f:46:97: 5f:87:f5:7c:da:bf:d3:2d:d1:69:f4:a4:db:fd:ad: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:77:3A:A0:B0:85:73:AE:D5:7D:B2:DD:B3:FD:9A:5B:C3:0D:F8 X509v3 Authority Key Identifier: keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1b:b2:cc:9b:fb:7a:7d:e7:d1:d8:fb:24:6a:77:5a:f9:83: d1:bf:df:af:27:58:b9:44:82:af:ed:d3:25:08:0a:69:0c:b9: 2c:5b:c5:00:77:a0:5a:1e:ac:bb:42:74:4f:3b:e8:d2:6e:e9: ee:b7:57:24:7b:39:16:1d:a3:06:6a:69:1b:df:87:c8:18:06: b9:2b:fd:49:86:cc:b2:71:de:99:32:f3:a5:0f:94:19:88:63: 16:77:09:8a:cd:c9:9b:b5:7e:45:4e:00:ac:a0:09:4d:e3:1e: 36:17:27:35:77:8d:b1:c6:2e:55:70:12:57:80:8e:a4:f4:b3: ba:ad:07:e5:9c:0b:5b:ac:47:e4:a6:df:a2:b0:36:a2:a2:71: 93:f4:9f:a7:6e:d5:d3:72:2c:d8:e2:76:af:30:80:bd:c1:b3: 0f:27:cb:89:f4:f9:01:f6:19:41:bb:e9:1b:23:1e:af:05:d3: f9:73:0a:d4:5f:a3:ff:b5:34:76:0c:43:e1:66:95:be:a0:21: fe:9d:16:b5:6c:79:17:32:e7:d4:1c:1d:21:07:89:75:9a:ce: 9a:65:d6:47:ec:1c:44:a2:41:62:a9:15:a8:b5:72:a9:11:f7: 19:9c:9e:34:e0:47:eb:f9:d0:66:89:45:0a:a1:ac:6a:0b:4c: 0b:cd:37:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdDNDQxMTAvBgNVBAUTKEQ3NkU2MUI5OUY3NTNFRkVGNzk4N0Y0QjM0QThBRDMz Mjk3ODAzQUMwHhcNMjUxMTA0MjM0NDA2WhcNMjUxMTExMjM0NDA2WjAYMRYwFAYD VQQDEw02OTBhOGZjNi1mNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstBt3TK8SOZC2nB6KeuK/i/zGvdmI+0aUslo0slVcOc16isndSDMYoN8f2HH 80sL8LuyIYC5CRKyK531PyeFevrRsT2DDG9Xf8xDbpbdb31lhFAtl7a2r9Sar294 zbhs96D7+15UWAi9j9aKkYNWhgi8zaV+E6xqLZf+IVT35pb8MlKWCJwJKjXXy7C/ 5fg4i0vO5hLtokDREv3YrfSsk7n7CQx+aI3rvytf/HAfxgO+nmrfyDiul5qe5hId waoQuDK/0NQEPZhWopeOTRe6X658Qp5RSdnuuKpy4z2h8cOFd8K+pzWX3YskBZlf Rpdfh/V82r/TLdFp9KTb/a2TjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgCdzqg sIVzrtV9st2z/Zpbww34MB8GA1UdIwQYMBaAFNduYbmfdT7+95h/SzSorTMpeAOs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0M0NC84QzZGMDhGODBF RTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2NzNtSDlMTktpdE15bDRB NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNWh1WjkxUHY3M21IOUxOS2l0TXlsNEE2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0M0NC84QzZGMDhGODBFRTMxMUVDQTJFRURBMzJDNEY5QUUwMi8xMjVodVo5MVB2 NzNtSDlMTktpdE15bDRBNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKG7LMm/t6fefR2Pskanda+YPRv9+vJ1i5RIKv7dMlCAppDLksW8UA d6BaHqy7QnRPO+jSbunut1ckezkWHaMGamkb34fIGAa5K/1Jhsyycd6ZMvOlD5QZ iGMWdwmKzcmbtX5FTgCsoAlN4x42Fyc1d42xxi5VcBJXgI6k9LO6rQflnAtbrEfk pt+isDaionGT9J+nbtXTcizY4navMIC9wbMPJ8uJ9PkB9hlBu+kbIx6vBdP5cwrU X6P/tTR2DEPhZpW+oCH+nRa1bHkXMufUHB0hB4l1ms6aZdZH7BxEokFiqRWotXKp EfcZnJ404Efr+dBmiUUKoaxqC0wLzTd2 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:18 2025 by rpki-client