$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft File: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft (raw, json) Hash identifier: mQ8hfIeFN2w25BXQIL8ZvXIbbHeNRZeA4HA/HNgKqF4= Subject key identifier: 0A:95:7D:C3:9C:25:A3:99:BE:58:1B:34:6E:40:3E:4D:DD:72:E8:FB Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 Certificate issuer: /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft Manifest number: 0142 Signing time: Fri 17 Oct 2025 07:31:37 +0000 Manifest this update: Fri 17 Oct 2025 07:31:37 +0000 Manifest next update: Fri 24 Oct 2025 07:31:36 +0000 Files and hashes: 1: Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl (hash: 1+ZpCWeo1dvWpHjvfeqnfesgZGaOh8sSy3DHjFyh5Z0=) 2: 9530495612BE11F08CCA4623C4F9AE02.roa (hash: Kq0ugwH9OuTBQBxfFQ8ElxHtYYyZ1NmJOiuKPPFe80I=) 3: 486F76B812BF11F0BA15A929C4F9AE02.roa (hash: zzdEKdXg7PtYmyul7ayVLXvjXFDgVqUVGxPOLSuwkDE=) 4: 355D028E4AB511EF87AB161BC4F9AE02.roa (hash: xnTxVBzuqpyQgM9jdgicco4JNCk9XP1Efnj6SZnRf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5 Validity Not Before: Oct 17 07:31:37 2025 GMT Not After : Oct 24 07:31:36 2025 GMT Subject: CN=68f1f0d9-0d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:b8:e2:a4:c6:69:59:49:a8:c6:c3:5f:05: 00:b7:f2:24:73:19:59:f3:75:8b:13:fc:7e:07:d4: c4:70:df:32:a9:7a:28:bd:e0:54:e6:bb:e3:45:fb: 57:df:72:a9:f3:6f:1b:2b:2e:14:91:2c:40:b5:6f: 29:2a:e7:48:21:40:22:44:b7:9b:8c:27:b0:5c:ae: fd:c6:43:a8:f7:b1:25:09:54:67:aa:e0:67:ca:21: 8c:5f:ee:18:2b:9e:f8:d9:2b:a3:8b:92:86:79:71: d9:5f:b7:5d:24:bd:6c:3a:fc:6a:3f:0d:7c:ad:eb: 97:52:e6:32:9e:b7:a0:e0:1f:1a:9f:62:d9:29:92: 96:3b:0c:a8:34:95:a2:b4:a1:00:97:d0:fb:94:3f: 75:d5:d4:40:b4:7e:d0:e8:9f:b6:23:c8:bd:5c:4d: 45:a7:62:95:24:d7:ec:8b:2f:e5:cb:c0:d6:fa:b2: d1:c2:1e:71:43:e5:32:cd:59:48:8e:76:15:00:b7: 42:e5:eb:63:a5:19:aa:fd:cb:62:44:93:b1:60:28: f3:60:1a:d1:42:f7:21:e2:12:96:cd:cb:68:c7:16: f4:c6:fe:de:41:2b:dc:66:89:69:d5:63:4a:24:71: a7:34:1b:77:cf:bf:46:11:ee:cd:ba:e7:62:86:35: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:95:7D:C3:9C:25:A3:99:BE:58:1B:34:6E:40:3E:4D:DD:72:E8:FB X509v3 Authority Key Identifier: keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:43:45:be:2f:0d:30:33:b9:d8:fa:fb:75:3e:7f:11:b6:7e: 7f:59:fb:1b:fa:a9:54:3f:7f:5d:02:68:00:3e:8f:6f:f7:32: fd:30:44:fe:3c:f2:c0:af:3c:68:2e:e2:f4:e6:eb:1e:08:33: fd:57:d2:20:28:a3:63:c7:e5:60:d9:4b:bf:4f:1a:03:fc:97: 4f:0a:04:43:43:07:2c:5a:18:f2:7d:b2:56:2a:ff:af:4d:43: de:a4:48:64:b5:f1:c0:7b:a9:5b:e2:00:f7:a6:2e:f3:92:61: f1:98:3b:30:14:4d:6e:c8:0a:16:e8:4c:ba:14:52:49:2c:45: 0f:cb:2d:e3:24:dc:a7:82:32:6f:90:24:c8:17:33:76:c4:4d: 54:ec:25:30:02:20:c7:fd:ac:02:83:ed:ce:ce:e8:42:b6:29: 3a:0f:52:f7:0d:d4:4e:2d:4f:ac:bc:2d:44:d3:89:6b:fa:02: 33:52:ec:39:58:2d:c4:66:89:15:d2:8e:20:f9:d8:9b:ed:5c: a8:7a:18:27:12:8f:9f:77:0a:ac:e0:23:36:d6:7d:6c:fc:17: b8:b7:43:13:02:4d:bb:ee:4a:8a:56:3d:67:04:60:d1:e2:83: a0:93:30:a8:82:b9:98:d1:52:ea:4b:21:0a:26:72:54:1a:0d: 8d:66:7c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKDFFQjlBRThCRjU5NTlGRThCRjJFQjgyQjkyM0I3MTdF RkYzMTA2QzUwHhcNMjUxMDE3MDczMTM3WhcNMjUxMDI0MDczMTM2WjAYMRYwFAYD VQQDEw02OGYxZjBkOS0wZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4e44qTGaVlJqMbDXwUAt/IkcxlZ83WLE/x+B9TEcN8yqXooveBU5rvjRftX 33Kp828bKy4UkSxAtW8pKudIIUAiRLebjCewXK79xkOo97ElCVRnquBnyiGMX+4Y K5742Suji5KGeXHZX7ddJL1sOvxqPw18reuXUuYynreg4B8an2LZKZKWOwyoNJWi tKEAl9D7lD911dRAtH7Q6J+2I8i9XE1Fp2KVJNfsiy/ly8DW+rLRwh5xQ+UyzVlI jnYVALdC5etjpRmq/ctiRJOxYCjzYBrRQvch4hKWzctoxxb0xv7eQSvcZolp1WNK JHGnNBt3z79GEe7NuudihjWUYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqVfcOc JaOZvlgbNG5APk3dcuj7MB8GA1UdIwQYMBaAFB65rov1lZ/ovy64K5I7cX7/MQbF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi84QjI1QUQwNEQy MkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4taV9Mcmdya2p0eGZ2OHhC c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hybXVpX1dWbi1pX0xyZ3JranR4ZnY4eEJzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi84QjI1QUQwNEQyMkIxMUVFQkMxNDUzNDNDNEY5QUUwMi9Icm11aV9XVm4t aV9Mcmdya2p0eGZ2OHhCc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAQ0W+Lw0wM7nY+vt1Pn8Rtn5/Wfsb+qlUP39dAmgAPo9v9zL9MET+ PPLArzxoLuL05useCDP9V9IgKKNjx+Vg2Uu/TxoD/JdPCgRDQwcsWhjyfbJWKv+v TUPepEhktfHAe6lb4gD3pi7zkmHxmDswFE1uyAoW6Ey6FFJJLEUPyy3jJNyngjJv kCTIFzN2xE1U7CUwAiDH/awCg+3OzuhCtik6D1L3DdROLU+svC1E04lr+gIzUuw5 WC3EZokV0o4g+dib7VyoehgnEo+fdwqs4CM21n1s/Be4t0MTAk277kqKVj1nBGDR 4oOgkzCogrmY0VLqSyEKJnJUGg2NZnzs -----END CERTIFICATE-----Generated at Sun Oct 19 04:36:13 2025 by rpki-client