$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft File: hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft (raw, json) Hash identifier: S6cLxyhHD0Vw3PIKer8G8tVc7SZwI8tSxoZ2aH0dn/Q= Subject key identifier: 60:FB:C3:9C:67:52:D5:61:B2:E9:FC:F4:2B:5A:BE:BF:8B:9E:DC:03 Authority key identifier: 85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 Certificate issuer: /CN=A9196DCA/serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft Manifest number: 9B Signing time: Wed 05 Nov 2025 06:31:39 +0000 Manifest this update: Wed 05 Nov 2025 06:31:38 +0000 Manifest next update: Wed 12 Nov 2025 06:31:38 +0000 Files and hashes: 1: hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl (hash: TVPXU4dFlKGqUTCEhOhpauVB0+1R+3xTB2asrCb6+F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=85C567259103D9E2292E64DBFB79FD39B256FDE4 Validity Not Before: Nov 5 06:31:38 2025 GMT Not After : Nov 12 06:31:38 2025 GMT Subject: CN=690aef4a-5fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:12:00:bb:c1:c3:57:07:c3:68:5d:17:36: dc:70:75:10:f5:3e:fb:68:07:29:e0:9d:ee:7e:e2: f1:1a:bf:73:91:e8:62:16:cd:d4:8d:d6:20:6e:7d: df:fa:0c:16:4a:f6:af:ae:76:c4:b3:6f:78:b7:a0: 78:d2:11:59:50:15:dc:d4:2c:3c:7d:f7:70:a0:28: 03:96:59:a1:a9:5e:e3:05:58:f7:dd:23:66:dd:05: 12:b4:ea:f8:79:41:06:67:3e:67:f3:40:16:36:6a: 98:eb:f2:b5:34:45:bf:3d:8b:ce:0e:2f:54:51:51: b2:49:ac:c0:5c:c8:a4:42:1a:f5:44:af:47:49:7c: a0:6b:6b:f4:e6:2f:ef:9a:f8:6f:9c:44:9a:ef:f1: 29:be:68:4a:9c:1d:2c:97:f1:51:8b:d1:7b:89:bb: 8f:67:e2:e9:d8:d4:1e:34:ba:43:e6:55:46:78:5a: 1a:48:33:30:91:ba:65:fb:a0:a7:9b:b4:e8:84:0e: ff:60:6e:c5:99:b5:7f:f8:8c:6d:b9:e1:e9:e7:8c: 45:e1:ee:0d:07:3a:21:f6:7d:6f:ec:41:ed:75:f1: 0d:95:b4:6c:b9:9c:53:98:75:1a:fa:5e:bc:2f:f5: 4c:4e:a0:2e:41:64:cc:8e:54:ae:f0:e8:77:6c:4d: 83:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FB:C3:9C:67:52:D5:61:B2:E9:FC:F4:2B:5A:BE:BF:8B:9E:DC:03 X509v3 Authority Key Identifier: keyid:85:C5:67:25:91:03:D9:E2:29:2E:64:DB:FB:79:FD:39:B2:56:FD:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcVnJZED2eIpLmTb-3n9ObJW_eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/583FFC94CB1F11EFB7AC2786C4F9AE02/hcVnJZED2eIpLmTb-3n9ObJW_eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ad:b7:4d:35:cc:26:89:ca:4e:ee:36:dc:a8:23:2a:c4:13: a1:ba:63:9d:02:9d:0a:3b:8e:39:03:57:dd:3d:97:6f:a3:be: 85:61:08:28:2e:eb:4d:0c:f1:11:76:69:cd:71:05:48:80:6a: 81:35:02:ae:6f:2c:8c:d9:29:a1:f0:21:ef:ac:e2:4d:a0:d5: 7e:d6:17:fb:09:64:a8:cd:63:c5:d8:0f:29:d7:8b:b2:ee:46: 05:61:f2:03:46:17:59:c1:06:a3:0b:1d:11:72:bf:ea:4c:c1: 1b:5f:2e:07:4c:b0:d0:c2:a8:fd:24:17:01:da:50:49:ba:67: cd:b0:8d:3e:ae:02:d8:b8:11:7f:83:f5:4b:a1:fb:f6:8d:8b: 33:ef:9c:92:8d:cf:4f:e5:49:c6:1c:88:85:7e:d0:1b:f8:44: c4:e3:f7:57:18:e6:d5:30:a0:69:8c:5a:b3:4d:68:9c:dc:f6: 55:dc:43:86:02:ac:f5:1d:b0:89:49:0d:11:bb:14:fa:7c:5d: e8:a4:46:ba:cb:84:7c:23:54:ef:39:ac:83:2f:9e:e1:9f:24: e3:79:e4:01:c0:08:64:94:c2:f3:54:b4:a7:65:5a:94:6b:7b: ff:c9:0f:8a:6b:96:df:1d:9c:6a:0a:00:8d:66:48:00:31:9e: 44:8c:38:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKDg1QzU2NzI1OTEwM0Q5RTIyOTJFNjREQkZCNzlGRDM5 QjI1NkZERTQwHhcNMjUxMTA1MDYzMTM4WhcNMjUxMTEyMDYzMTM4WjAYMRYwFAYD VQQDEw02OTBhZWY0YS01ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA278SALvBw1cHw2hdFzbccHUQ9T77aAcp4J3ufuLxGr9zkehiFs3UjdYgbn3f +gwWSvavrnbEs294t6B40hFZUBXc1Cw8ffdwoCgDllmhqV7jBVj33SNm3QUStOr4 eUEGZz5n80AWNmqY6/K1NEW/PYvODi9UUVGySazAXMikQhr1RK9HSXyga2v05i/v mvhvnESa7/EpvmhKnB0sl/FRi9F7ibuPZ+Lp2NQeNLpD5lVGeFoaSDMwkbpl+6Cn m7TohA7/YG7FmbV/+IxtueHp54xF4e4NBzoh9n1v7EHtdfENlbRsuZxTmHUa+l68 L/VMTqAuQWTMjlSu8Oh3bE2DHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGD7w5xn UtVhsun89Ctavr+LntwDMB8GA1UdIwQYMBaAFIXFZyWRA9niKS5k2/t5/TmyVv3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81ODNGRkM5NENC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJlSXBMbVRiLTNuOU9iSldf ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjVm5KWkVEMmVJcExtVGItM245T2JKV19lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81ODNGRkM5NENCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9oY1ZuSlpFRDJl SXBMbVRiLTNuOU9iSldfZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5rbdNNcwmicpO7jbcqCMqxBOhumOdAp0KO445A1fdPZdvo76FYQgo LutNDPERdmnNcQVIgGqBNQKubyyM2Smh8CHvrOJNoNV+1hf7CWSozWPF2A8p14uy 7kYFYfIDRhdZwQajCx0Rcr/qTMEbXy4HTLDQwqj9JBcB2lBJumfNsI0+rgLYuBF/ g/VLofv2jYsz75ySjc9P5UnGHIiFftAb+ETE4/dXGObVMKBpjFqzTWic3PZV3EOG Aqz1HbCJSQ0RuxT6fF3opEa6y4R8I1TvOayDL57hnyTjeeQBwAhklMLzVLSnZVqU a3v/yQ+Ka5bfHZxqCgCNZkgAMZ5EjDiQ -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:37 2025 by rpki-client