$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft File: hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft (raw, json) Hash identifier: yy8VjfZeL+KgnXLGgEeliLDPPUkeGTH7B8UkhhOSFKc= Subject key identifier: 8D:4E:97:5A:51:86:2C:20:86:CF:0A:31:85:2D:C5:96:21:06:5A:7B Authority key identifier: 85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1 Certificate issuer: /CN=A9191136/serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft Manifest number: 15 Signing time: Mon 03 Nov 2025 07:53:56 +0000 Manifest this update: Mon 03 Nov 2025 07:53:55 +0000 Manifest next update: Mon 10 Nov 2025 07:53:55 +0000 Files and hashes: 1: hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl (hash: jhqNs1/3nMG7+h8B8clpIUgjUdrvYeBk6kzobDPWEvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191136, serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1 Validity Not Before: Nov 3 07:53:55 2025 GMT Not After : Nov 10 07:53:55 2025 GMT Subject: CN=69085f93-38a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:6b:d3:7d:8c:7a:22:f6:4c:7d:be:82:1e: 5c:3d:81:9f:44:32:f2:b1:68:84:17:cf:45:f7:96: 42:7b:9e:78:c0:5a:5a:e5:ca:32:a9:a6:37:94:aa: a9:51:a0:26:1a:52:6e:74:fb:1b:7f:92:42:b2:96: 7c:eb:5e:10:33:3d:e2:3d:5b:f0:d4:33:2f:2e:e0: 37:4f:b6:86:86:8c:91:b8:9a:84:3b:82:43:2e:e4: 15:9f:1b:55:97:04:65:d8:47:ca:65:99:c8:1b:99: 8e:f4:07:4c:8d:86:a2:43:13:ce:6c:1a:cb:83:79: 36:58:44:32:82:ab:fb:7c:04:a9:85:f5:6a:dc:77: f2:fc:3c:42:34:71:ff:9c:b3:19:95:4a:26:06:d4: 48:85:eb:ca:88:43:6a:99:ea:7d:bb:b3:25:b7:a3: 6b:4b:70:90:c2:c6:f8:9a:e8:2c:e1:b5:b6:10:2f: f7:d0:09:bd:41:b2:0b:02:68:77:e4:2f:f2:4b:59: 6e:20:c0:8f:6d:62:0e:0c:13:ab:cd:f0:60:9b:c7: 7b:66:9c:03:64:31:57:41:0d:89:01:a0:68:07:43: 50:b6:07:68:a5:bd:79:7e:f9:6e:15:5d:b1:a8:0c: 0a:6d:f1:2f:20:be:8d:3e:8a:ab:af:28:cb:2d:93: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:97:5A:51:86:2C:20:86:CF:0A:31:85:2D:C5:96:21:06:5A:7B X509v3 Authority Key Identifier: keyid:85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:61:61:62:56:cb:ba:66:53:c2:ca:d5:f9:f8:1e:95:af:18: fb:d4:8a:82:bf:07:d1:40:f3:41:36:1c:33:e3:2e:d7:d6:7c: 83:1a:92:61:a4:85:a1:11:93:23:97:94:88:3a:a0:bd:54:95: 13:76:34:9b:f4:49:5f:e3:ed:60:d3:f6:a6:e0:2e:d5:5b:fc: 43:08:f0:d8:fd:b9:18:13:b7:22:b3:b9:4d:37:25:38:53:bc: 73:b7:38:1b:eb:03:cd:a5:7b:27:55:fb:d2:62:43:4b:d9:78: d5:c0:82:6b:6a:f6:f5:78:3c:20:80:61:86:19:c7:44:1b:ca: 77:61:90:11:3a:06:a4:2d:b2:58:31:13:8d:93:1f:33:95:1b: 2f:1a:45:3d:8c:75:4f:bd:94:dd:c5:2d:9a:d8:71:1a:94:55: 8e:58:ad:3e:46:72:cf:00:bf:db:b3:b1:56:2d:39:bf:d0:2a: 4f:a0:54:ad:6d:55:ab:36:ef:89:11:ec:19:36:99:f0:e9:26: f5:6d:33:09:e8:81:9c:c8:c0:b3:af:db:7d:af:86:79:78:8a: f0:80:21:93:63:81:04:e7:86:13:67:7f:55:08:4d:3c:77:da: f3:1d:97:f3:13:c1:68:3e:da:72:6e:4f:48:7a:a4:f6:67:9b: 9d:53:ef:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTEzNjExMC8GA1UEBRMoODU1RTExRkE1MUJDMjYxMDgyQzNERkI1NUE4NkQ1RDgy NzNGMzlEMTAeFw0yNTExMDMwNzUzNTVaFw0yNTExMTAwNzUzNTVaMBgxFjAUBgNV BAMTDTY5MDg1ZjkzLTM4YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3FGvTfYx6IvZMfb6CHlw9gZ9EMvKxaIQXz0X3lkJ7nnjAWlrlyjKppjeUqqlR oCYaUm50+xt/kkKylnzrXhAzPeI9W/DUMy8u4DdPtoaGjJG4moQ7gkMu5BWfG1WX BGXYR8plmcgbmY70B0yNhqJDE85sGsuDeTZYRDKCq/t8BKmF9Wrcd/L8PEI0cf+c sxmVSiYG1EiF68qIQ2qZ6n27syW3o2tLcJDCxvia6CzhtbYQL/fQCb1BsgsCaHfk L/JLWW4gwI9tYg4ME6vN8GCbx3tmnANkMVdBDYkBoGgHQ1C2B2ilvXl++W4VXbGo DApt8S8gvo0+iquvKMstkwBtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjU6XWlGG LCCGzwoxhS3FliEGWnswHwYDVR0jBBgwFoAUhV4R+lG8JhCCw9+1WobV2Cc/OdEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMTM2LzBDOTYwNzg0OUFB OTExRjA5NUFBMDQ4MEM0RjlBRTAyL2hWNFItbEc4SmhDQ3c5LTFXb2JWMkNjX09k RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFY0Ui1sRzhKaENDdzktMVdvYlYyQ2NfT2RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx MTM2LzBDOTYwNzg0OUFBOTExRjA5NUFBMDQ4MEM0RjlBRTAyL2hWNFItbEc4SmhD Q3c5LTFXb2JWMkNjX09kRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZhYWJWy7pmU8LK1fn4HpWvGPvUioK/B9FA80E2HDPjLtfWfIMakmGk haERkyOXlIg6oL1UlRN2NJv0SV/j7WDT9qbgLtVb/EMI8Nj9uRgTtyKzuU03JThT vHO3OBvrA82leydV+9JiQ0vZeNXAgmtq9vV4PCCAYYYZx0QbyndhkBE6BqQtslgx E42THzOVGy8aRT2MdU+9lN3FLZrYcRqUVY5YrT5Gcs8Av9uzsVYtOb/QKk+gVK1t Vas274kR7Bk2mfDpJvVtMwnogZzIwLOv232vhnl4ivCAIZNjgQTnhhNnf1UITTx3 2vMdl/MTwWg+2nJuT0h6pPZnm51T7w8= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:43 2025 by rpki-client