$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: UNnlUMIPItQmNnLcOS8t/e2hSijCgRkRKlY0KwrR3/U= Subject key identifier: 48:67:DE:67:A8:DC:74:AE:95:F2:70:45:B6:C6:4A:D9:72:97:91:A8 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 14CD Signing time: Sun 02 Nov 2025 16:52:13 +0000 Manifest this update: Sun 02 Nov 2025 16:52:12 +0000 Manifest next update: Sun 09 Nov 2025 16:52:12 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: IRO6AfibL3RzCmboHd/Fy7ukaw+R4/4IepWce9Ss2uU=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5349 (0x14e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Nov 2 16:52:12 2025 GMT Not After : Nov 9 16:52:12 2025 GMT Subject: CN=69078c3c-0ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:2c:59:f8:b9:19:18:05:1d:60:d8:6a:f2: 45:f7:76:4a:4c:5d:35:a0:7c:7a:00:6f:a0:08:2d: eb:b5:3e:a9:c4:9c:42:42:cd:57:d4:9f:37:ec:8e: 7a:69:ca:d5:22:db:82:f3:e3:3f:c1:92:fd:7e:e6: e8:7d:9c:68:44:7a:f2:f1:2d:1b:88:7f:fc:1e:1f: 97:c9:82:28:ac:ac:b0:93:a4:3b:7c:55:2c:a8:6e: 5b:5c:29:35:4a:6c:30:f6:01:77:47:36:8a:b7:c7: f2:05:1e:6a:38:e2:07:1c:9a:53:3d:7d:90:e7:dd: 7b:7e:d7:64:6f:ac:bc:63:a8:ec:33:88:33:8f:7e: ce:ab:e7:2a:53:96:29:f9:e6:b5:2b:d2:02:53:77: 20:92:3d:66:02:f0:00:f2:29:ee:ee:0d:ed:d1:81: 49:7a:7c:a2:05:42:79:1c:d8:07:b2:6a:67:de:a3: ea:b0:3e:ce:3f:3a:fa:ba:25:57:ef:c0:e5:8e:02: 74:91:cb:d2:16:90:f9:b4:7f:31:0f:2a:3b:c5:4e: 25:07:df:1e:31:84:59:01:25:ee:98:d2:de:69:51: 0b:6b:eb:1d:a4:d0:9a:dd:78:41:f5:3b:9d:e2:14: a9:bd:6b:5a:42:6d:9b:76:ed:ba:a6:48:c5:27:50: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:67:DE:67:A8:DC:74:AE:95:F2:70:45:B6:C6:4A:D9:72:97:91:A8 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fd:00:a8:98:ff:27:64:0f:49:6c:47:35:9c:63:bf:15:5d: 47:e4:0c:6a:f6:3e:8f:f0:17:c4:be:dc:83:4b:5a:d0:40:f1: 74:7d:ed:63:8e:ce:1f:f4:48:d9:0a:54:24:1d:a8:a4:27:9f: fb:14:3d:af:90:16:00:d3:69:ac:c7:20:9e:26:d6:cd:12:74: 00:6b:2e:5d:d2:a5:2b:7e:2a:13:2b:9a:1d:1d:39:bf:bd:25: 4e:2c:f7:8b:11:67:1f:b2:d8:01:d4:95:2d:13:7e:da:6d:49: 92:85:c1:fd:7c:5c:af:13:4c:4e:5a:96:27:12:8a:d0:4d:bc: 68:86:7a:7c:a3:86:64:98:4e:fc:95:82:ee:2c:85:90:b3:5a: 00:b0:e7:f7:c9:8c:af:34:81:39:01:3d:7c:2c:9a:f1:1d:3b: 5b:81:60:12:21:8a:6f:ca:4e:d3:3e:fc:36:2a:f1:69:7d:b4: 67:a1:7e:31:df:2b:7b:ff:93:80:0f:71:26:9f:73:b5:9e:f0: 6e:ca:6a:b6:a2:0b:17:a4:89:d4:93:68:f7:b3:c5:74:93:72: 42:09:57:a5:e5:01:d7:ec:c1:df:fe:c0:f2:15:31:9b:ea:13: 15:ef:11:b7:b7:0b:ce:35:05:19:c0:a3:cd:2e:55:e9:02:9e: 8d:19:b6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUxMTAyMTY1MjEyWhcNMjUxMTA5MTY1MjEyWjAYMRYwFAYD VQQDEw02OTA3OGMzYy0wZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh4sWfi5GRgFHWDYavJF93ZKTF01oHx6AG+gCC3rtT6pxJxCQs1X1J837I56 acrVItuC8+M/wZL9fubofZxoRHry8S0biH/8Hh+XyYIorKywk6Q7fFUsqG5bXCk1 Smww9gF3RzaKt8fyBR5qOOIHHJpTPX2Q5917ftdkb6y8Y6jsM4gzj37Oq+cqU5Yp +ea1K9ICU3cgkj1mAvAA8inu7g3t0YFJenyiBUJ5HNgHsmpn3qPqsD7OPzr6uiVX 78DljgJ0kcvSFpD5tH8xDyo7xU4lB98eMYRZASXumNLeaVELa+sdpNCa3XhB9Tud 4hSpvWtaQm2bdu26pkjFJ1D85wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhn3meo 3HSulfJwRbbGStlyl5GoMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/QComP8nZA9JbEc1nGO/FV1H5Axq9j6P8BfEvtyDS1rQQPF0fe1j js4f9EjZClQkHaikJ5/7FD2vkBYA02msxyCeJtbNEnQAay5d0qUrfioTK5odHTm/ vSVOLPeLEWcfstgB1JUtE37abUmShcH9fFyvE0xOWpYnEorQTbxohnp8o4ZkmE78 lYLuLIWQs1oAsOf3yYyvNIE5AT18LJrxHTtbgWASIYpvyk7TPvw2KvFpfbRnoX4x 3yt7/5OAD3Emn3O1nvBuymq2ogsXpInUk2j3s8V0k3JCCVel5QHX7MHf/sDyFTGb 6hMV7xG3twvONQUZwKPNLlXpAp6NGbbI -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:31 2025 by rpki-client